Detection and prevention of spam

• US 20060265498A1
• Filed: 12/25/2003
• Published: 11/23/2006
• Est. Priority Date: 12/26/2002
• Status: Abandoned Application

• Current Assignee: Commtouch Software Ltd
• Original Assignee: Commtouch Software Ltd
• Inventors: Turgeman, Yehuda, Lev, Amir, Drai, David
• Application Number:
  US10/540,735
• Publication Number:
  US 20060265498A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

A method and system for combating spam, including obtaining information contained in messages, employing a variable criteria to the information, encrypting at least part of the information employing a non-reversible encryption so as to generate encrypted information, transmitting at least the encrypted information to a server for spam indication thereby receiving from the server classification data and determining the spam classification of the messages at least partially based on the classification data.

Claims

1. A method for combating spam comprising:

classifying a message at least partially by evaluating at least one message parameter, using at least one variable criterion, thereby providing a spam classification; and

handling said message based on said spam classification.

2. A method for combating spam according to claim 1 and wherein said at least one variable criterion comprises a criterion which changes over time.

3. A method for combating spam according to claim 1 and wherein said at least one variable criterion comprises a parameter template-defined function.

4. A method for combating spam according to claim 1 and wherein said classifying comprises:

said using at least one variable criterion at at least one gateway; and

said providing spam classifications at at least one server, receiving evaluation outputs from said at least one gateway and providing said spam classifications to said at least one gateway.

5. A method for combating spam according to claim 4 and wherein said classifying also comprises:

encrypting at least part of said evaluation outputs by employing a non-reversible encryption so as to generate encrypted information; and

transmitting at least said encrypted information to said at least one server.

6. A method for combating spam according to claim 5 and wherein said transmitting comprises transmitting information of a length limited to a predefined threshold.

7. A method for combating spam according to claim 1 and wherein said handling comprises at least one of:

forwarding said message to an addressee of said message;

storing said message in a predefined storage area;

deleting said message;

rejecting said message;

sending said message to an originator of said message; and

delaying said message for a period of time and thereafter re-classifying said message.

8. A method for combating spam according to claim 1 and wherein said message comprises at least one of:

an e-mail;

a network packet;

a digital telecom message; and

an instant messaging message.

9. A method for combating spam according to claim 1 and wherein said classifying also comprises at least one of:

requesting feedback from an addressee of said message;

evaluating compliance of said message with a predefined policy;

evaluating registration status of at least one registered address in said message;

analyzing a match among network references in said message;

analyzing a match between at least one translatable address in said message and at least one other network reference in said message;

at least partially actuating an unsubscribe feature in said message;

analyzing an unsubscribe feature in said message;

employing a variable criteria;

sending information to a server and receiving classification data based on said information;

employing classification data received from a server; and

employing stored classification data.

10. A method for combating spam comprising:

classifying messages at least partially by evaluating at least one message parameter of multiple messages, by employing at least one evaluation criterion which changes over time, thereby providing spam classifications; and

handling said messages based on said spam classifications.

11. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to similarities between plural messages among said multiple messages, which similarities are reflected in said at least one message parameter.

12. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to similarities between plural messages among said multiple messages, which similarities are reflected in outputs of applying said at least one evaluation criterion to said at least one message parameter.

13. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to similarities in multiple outputs of applying a single evaluation criterion to said at least one message parameter in multiple messages.

14. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to the extent of similarities between plural messages among said multiple messages which similarities are reflected in said at least one message parameter.

15. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to the extent of similarities between plural messages among said multiple messages which similarities are reflected in outputs of applying said at least one evaluation criterion to said at least one message parameter.

16. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to the extent of similarities in multiple outputs of applying a single evaluation criterion to said at least one message parameter in multiple messages.

17. A method for combating spam according to claim 14 and wherein said extent of similarities comprises a count of messages among said multiple messages which are similar.

18. A method for combating spam according to claim 10 and wherein said classifying is at least partially responsive to similarities in outputs of applying evaluation criteria to said at least one message parameter in multiple messages, wherein a plurality of different evaluation criteria are individually applied to said at least one message parameter in said multiple messages, yielding a corresponding plurality of outputs indicating a corresponding plurality of similarities among said multiple messages.

19. A method according to claim 18 and wherein said classifying also comprises aggregating individual similarities among said plurality of similarities.

20. A method according to claim 19 and wherein said aggregating individual similarities among said plurality of similarities comprises applying weights to said individual similarities.

21-186. -186. (canceled)