Apparatus and Method for Handling Electronic Mail

• US 20080040439A1
• Filed: 10/22/2007
• Published: 02/14/2008
• Est. Priority Date: 06/29/2001
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia, Inc. (Nokia Corporation)
• Inventors: Wang, Bing
• Granted Patent: US 7,624,154 B2
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

A mail transfer agent adapted for determining the disposition of incoming e-mail from a sender includes a penalty count filter module (20 which functions on the basis of current communication system resource usage, such as the number of concurrent TCP connections being maintained, and penalty counts assigned for cumulative undesirable sender activity such as sending large e-mail files. The penalty count filter module can operate in a selective-rejection state accepting e-mail from senders without a penalty count and randomly accepting other e-mail, and in a random-rejection state rejecting all e-mail from senders with a penalty count and randomly rejecting other e-mail. The rejection rates can be increased or decreased in response to a detected increase or decrease in the usage of system resources.

Claims

1. A method comprising:

determining an identity of a sender of an incoming e-mail;

determining a cumulative penalty count value associated with said identity, wherein determining said cumulative penalty count value comprises assessing a penalty count value to said identity for an undesirable activity performed by the sender;

retrieving a system overall resource usage status associated with the communication device; and

processing the incoming e-mail on the basis of said cumulative penalty count value and said system overall resource usage status.

2. The method of claim 1 wherein determining the identity comprises associating the sender with a peer IP address of a TCP connection associated with the sender.

3. The method of claim 1 wherein said cumulative penalty count value comprises an activity penalty count charged to the sender for current undesirable sender activity and a time-dependent penalty count determined from previous undesirable sender activity.

4. The method of claim 3 wherein said time-dependent penalty count comprises a zero value subsequent to a pre-established retention period.

5. The method of claim 3 wherein said time-dependent penalty count comprises a prior activity penalty count value reduced by a time-dependent decay factor.

6. The method of claim 1 wherein said undesirable activity comprises a member of the group consisting of:

sending a large number of e-mails, sending emails of relatively large sizes, using a relatively large amount of TCP connection time, and causing a TCP timeout.

7. The method of claim 1 wherein said system overall resource usage status is a function of a member of the group consisting of:

the number of concurrent TCP connections being maintained, the number of e-mail files in an incoming message queue, and the amount of disk space being utilized for an incoming message queue.

8. The method of claim 1 wherein said step of processing the incoming e-mail comprises the step of assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status.

9. The method of claim 8 wherein said operating state is a selective-rejection state, and if said cumulative penalty count value has a zero value, said step of processing the incoming e-mail comprises the step of accepting the incoming e-mail.

10. The method of claim 9 wherein if said cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail comprises the steps of:

specifying a rejection factor;

generating a random number; and

randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number.

11. The method of claim 8 wherein, wherein said operating state is a random-rejection state, and if said cumulative penalty count value has a zero value, said step of processing the incoming e-mail comprises the steps of:

deriving an overall resource usage factor;

generating a random number; and

randomly rejecting the incoming e-mail on the basis of said overall resource usage factor, said random number, and said cumulative penalty count value.

12. A device comprising:

a processor; and

memory storing computer readable instruction comprising a penalty count filter module that, when executed by the processor, configured the device to perform;

identifying a sender of an incoming e-mail;

assigning a penalty count to the sender, said penalty count being a function of previous undesirable activity associated with the sender;

determining an overall resource usage value for said communication device in receiving e-mail;

specifying an operating state for penalty count filter module, said operating state being a function of said overall resource usage value; and

disposing of the incoming e-mail on the basis of said sender penalty count and said operating state, by either accepting or rejecting the e-mail.

13. The device of claim 12 wherein identifying the sender comprises obtaining at least one of a Domain Name Service verification and a peer IP address of the sender TCP connection.

14. The device of claim 12 wherein said undesirable activity comprises a member of the group consisting of:

sending a large number of e-mails, sending e-mails of relatively large sizes, using a relatively large amount of TCP connection time, and causing a TCP timeout.

15. The device of claim 12 wherein said overall resource usage value is a function of a member of the group consisting of:

the number of concurrent TCP connections being maintained, the number of e-mail files in an incoming message queue, and the amount of disk space being utilized for an incoming message queue.

16. A device comprising:

a sender penalty count data structure, stored in a memory of the device, for storing a current penalty count value associated with a sender of an incoming email, wherein said current penalty count value is based at least in part on previous undesirable activity performed by the sender;

a system resource usage status file, stored in the memory, for storing a current usage status value for device e-mail processing resources; and

an accept/reject filter, stored in the memory, for disposing of the incoming e-mail on the basis of said penalty count value and said usage status.

17. The device of claim 16 wherein said sender penalty count data structure includes an entry comprising a member of the group consisting of:

a sender identification value, a cumulative penalty count value, a cumulative e-mail count, a total e-mail size, a total TCP connection time, and a timestamp value.

18. A method comprising:

identifying an e-mail sender of an incoming e-mail by determining a sender IP address;

obtaining a previous sender penalty count value calculated for said sender IP address, wherein said previous sender penalty count value is based at least in part on previous undesirable activity performed by the sender; and

accepting or rejecting the incoming e-mail based on said previous sender penalty count value.

19. The method of claim 18 further comprising:

maintaining a behavior trace table entry for the e-mail sender; and

determining said previous sender penalty count from said behavior trace table.

20. The method of claim 19 further comprising updating sender behavior values in said trace table entry in response to receipt of a sender e-mail.

21. The method of claim 20 wherein said sender behavior values include a member of the group consisting of:

the number of e-mails, the total size of e-mails, and the total TCP connection time.

22. The method of claim 20 wherein updating sender behavior values comprises:

reducing said behavior trace table value by a time-dependent decay factor; and

adding a current behavior trace table value to said corresponding reduced behavior trace table value.

23. The method of claim 18 wherein said previous sender penalty count value is determined from undesirable sender activity occurring over a pre-established retention period.

24. The method of claim 23 wherein said undesirable activity comprises a member of the group consisting of:

sending a large number of e-mails, sending e-mails of relatively large sizes, using a relatively large amount of TCP connection time, and causing a TCP timeout.