SYSTEM AND METHOD FOR DETERMINING SPAM
First Claim
Patent Images
1. A method comprising:
- receiving in a messaging application an electronic message from a sender, the message comprising a message body and a sender address, the message identifying a recipient;
identifying the recipient as having a trusted account with a service provider, the account being identified in a trusted database, the account identifying a plurality of sender addresses as being trusted;
determining whether the sender address is a trusted sender address by determining if the sender address is identified as trusted in the recipient'"'"'s trusted account;
upon the determination that the sender address is not identified as a trusted sender, identifying the message as potential spam;
comparing the message body of the message with a message body of each of a corpus of existing messages in the database that are identified as potential spam;
determining if a match exists between the message body of the message and at least one message body of the existing messages;
if a match exists, incrementing a message body match counter, the message counter tallying a total number of determined matches;
comparing the counter'"'"'s value with a predetermined threshold value, the predetermined threshold value indicating a probability of a message being spam; and
identifying the message as spam based on the comparison.
6 Assignments
0 Petitions
Accused Products
Abstract
The disclosure describes systems and methods for determining spam. A spam detecting system identifies potential spam messages by checking the relationship between a sender of a message and a recipient of the message. The spam detecting system identifies the relationship between the sender and recipient as ‘unknown’ or ‘trusted’. If the message is ‘trusted’, the message is transmitted accordingly to the recipient. If the message is classified as ‘unknown’, then the message is analyzed in view of other identified potential spam messages where an count is tallied against a threshold value to keep track of the probability a message is spam.
-
Citations
40 Claims
-
1. A method comprising:
-
receiving in a messaging application an electronic message from a sender, the message comprising a message body and a sender address, the message identifying a recipient; identifying the recipient as having a trusted account with a service provider, the account being identified in a trusted database, the account identifying a plurality of sender addresses as being trusted; determining whether the sender address is a trusted sender address by determining if the sender address is identified as trusted in the recipient'"'"'s trusted account; upon the determination that the sender address is not identified as a trusted sender, identifying the message as potential spam; comparing the message body of the message with a message body of each of a corpus of existing messages in the database that are identified as potential spam; determining if a match exists between the message body of the message and at least one message body of the existing messages; if a match exists, incrementing a message body match counter, the message counter tallying a total number of determined matches; comparing the counter'"'"'s value with a predetermined threshold value, the predetermined threshold value indicating a probability of a message being spam; and identifying the message as spam based on the comparison. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A computer-readable medium tangibly encoded with instructions for performing a method comprising:
-
receiving in a messaging application an electronic message from a sender, the message comprising a message body and a sender address, the message identifying a recipient; identifying the recipient as having a trusted account with a service provider, the account being identified in a trusted database, the account identifying a plurality of sender addresses as being trusted; determining whether the sender address is a trusted sender address by determining if the sender address is identified as trusted in the recipient'"'"'s trusted account; upon the determination that the sender address is not identified as a trusted sender, identifying the message as potential spam; comparing the message body of the message with a message body of each of a corpus of existing messages in the database that are identified as potential spam; determining if a match exists between the message body of the message and at least one message body of the existing messages; if a match exists, incrementing a message body match counter, the message counter tallying a total number of determined matches; comparing the counter'"'"'s value with a predetermined threshold value, the predetermined threshold value indicating a probability of a message being spam; and identifying the message as spam based on the comparison. - View Dependent Claims (20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36)
-
-
37. A system comprising:
-
a plurality of processors; a server for receiving an electronic message from a sender, the message comprising a message body and a sender address, the message identifying a recipient; a selection engine implemented on one of the plurality of processors for identifying the recipient as having a trusted account identified in a trusted database, the account identifying a plurality of sender addresses as being trusted; a determination engine implemented on one of the plurality of processors for determining whether the sender address is an identified trusted sender address in the recipient'"'"'s trusted account, wherein if the sender address is not identified as a trusted sender, the message is identified as potential spam; the determination engine configured for comparing the message body of the message with a message body of each of a corpus of existing messages in the database that are identified as potential span, wherein if a match exists between the message body of the message and at least one message body of the existing messages, a message body match counter is incremented; the determination engine configured for comparing the counter'"'"'s value with a predetermined threshold value, the predetermined threshold value indicating a probability of a message being spam; and the determination engine configured for identifying the message as spam based on the comparison. - View Dependent Claims (38, 39, 40)
-
Specification