Apparatus and method for analyzing and filtering email and for providing web related services

• US 20110119343A1
• Filed: 01/27/2011
• Published: 05/19/2011
• Est. Priority Date: 02/15/2005
• Status: Active Grant

• Current Assignee: Joseph P. Marino
• Original Assignee: John W.L. Ogilvie
• Inventors: Fortin, Jonathan, Marino, Joseph P.
• Granted Patent: US 8,326,936 B2
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/065 Replication mechanisms
• CPC Class Codes: G06F 3/0655 Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
• CPC Class Codes: G06F 9/4416 Network booting; Remote initial program loading [RIPL]
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The inventive methodology provides an integrated plug and play solution designed to protect home networks against spam, phishing emails, viruses, spyware as well as other similar threats. The described content filtering appliance can be used for processing of web and email traffic implemented and can be deployed as a stand-alone appliance. In one implementation, the content processing appliance utilizes backend content filtering provided by a remote scanning service accessed via a network. The system employs network level analysis and translation of content and executes various procedures to handle the network traffic. In an embodiment of the invention, the appliance is provided with an automatic remote updating capability, wherein the software and data used by the appliance can be updated remotely via a network. Finally, the appliance may also implement parental controls.

Claims

1. A method for filtering a content of an email message, the method comprising:

a. Reading the email message;

b. Checking a sender of the email message against a blacklist;

c. Checking the sender of the email message against a whitelist;

d. Checking the email message for phishing scam;

e. Checking the header of the email message for SPAM content;

f. Allowing or denying the email message based on the results of the a) through f).

2. The method of claim 1, further comprising reading the message from a remote email system.

3. The method of claim 1, further comprising, before the reading, authenticating with the remote email system using authentication information provided by the user.

4. The method of claim 1, further comprising determining if the email message contains a virus.

5. The method of claim 4, wherein the checking the message for a virus comprises making a request to a remote scanning engine configured to detect the virus in the email message;

6. The method of claim 1, further comprising, checking the body of the email message for SPAM content.

7. The method of claim 6, wherein checking the body of the email message for SPAM content comprises performing matching the content of the email message against a list of keywords.

8. The method of claim 1, wherein the checking the header of the email message for SPAM content comprises verification of the format of the header of the email message.

9. The method of claim 1, wherein the checking the header of the email message for SPAM content comprises checking the sender of the email message against a list of known spammers.

10. The method of claim 1, wherein the email message is read from a web mail account of the user using HTTP protocol.

11. The method of claim 1, wherein the email message is read using an email protocol.

12. The method of claim 1, further comprising, in response to detection of at least one threat in the email message, modifying the email message to alert the user about the detected threat and forwarding the modified email message to the user.

13. The method of claim 1, further comprising, in response to detection of at least one threat in the email message, modifying the email message to neutralize the detected threat and forwarding the modified email message to the user.

14. The method of claim 1, further comprising accumulating statistics about a threat detected in the email message.

15. An apparatus for filtering a content of an email message sent to a user, the inventive network appliance comprising:

a. A central processing unit (CPU);

b. A first network interface coupled to the computer of the user;

c. A second network interface coupled to the external network;

d. A memory storing a set of computer-readable instructions, which, when executed by the CPU cause the CPU to;

i. Read the email message;

ii. Check a sender of the email message against a blacklist;

iii. Check the sender of the email message against a whitelist;

iv. Check the email message for phishing scam;

v. Check the header of the email message for SPAM content;

vi. Allow or deny the email message based on the results of the i) through vi).