Apparatus and method for handling electronic mail
First Claim
1. A method comprising:
- determining a sender identifier based on a sender of an incoming email;
determining a cumulative penalty count value associated with said sender identifier, wherein determining said cumulative penalty count value comprises assessing a penalty count value to said sender identifier for an undesirable activity performed by the sender;
retrieving a system overall resource usage status associated with the communication device; and
processing the incoming e-mail on the basis of said cumulative penalty count value and said system overall resource usage status,wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, and said operating state is a number of the group consisting of;
a normal operating state, a selective-rejection operating state, and a random-rejection operating state,wherein, for said selective-rejection state, if said cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail comprises;
specifying a rejection factor;
generating a random number; and
randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number, andwherein said step of randomly rejecting comprises accepting the incoming e-mail if said random number is greater than said rejection factor and rejecting the incoming e-mail if said random number is not greater than said rejection factor.
1 Assignment
0 Petitions
Accused Products
Abstract
A mail transfer agent adapted for determining the disposition of incoming e-mail from a sender includes a penalty count filter module which functions on the basis of current communication system resource usage, such as the number of concurrent TCP connections being maintained, and penalty counts assigned for cumulative undesirable sender activity such as sending large e-mail files. The penalty count filter module can operate in a selective-rejection state accepting e-mail from senders without a penalty count and randomly accepting other e-mail, and in a random-rejection state rejecting all e-mail from senders with a penalty count and randomly rejecting other e-mail. The rejection rates can be increased or decreased in response to a detected increase or decrease in the usage of system resources.
-
Citations
28 Claims
-
1. A method comprising:
-
determining a sender identifier based on a sender of an incoming email; determining a cumulative penalty count value associated with said sender identifier, wherein determining said cumulative penalty count value comprises assessing a penalty count value to said sender identifier for an undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and said system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, and said operating state is a number of the group consisting of;
a normal operating state, a selective-rejection operating state, and a random-rejection operating state,wherein, for said selective-rejection state, if said cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail comprises; specifying a rejection factor; generating a random number; and randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number, and wherein said step of randomly rejecting comprises accepting the incoming e-mail if said random number is greater than said rejection factor and rejecting the incoming e-mail if said random number is not greater than said rejection factor. - View Dependent Claims (2, 3, 5, 6, 7, 8, 9, 12)
-
-
4. A method comprising:
-
determining a sender identifier based on a sender of an incoming email; determining a cumulative penalty count value associated with said sender identifier, wherein determining said cumulative penalty count value comprises assessing a penalty count value to said sender identifier for an undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and said system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, and said operating state is a number of the group consisting of;
a normal operating state, a selective-rejection operating state, and a random-rejection operating state,wherein, for said selective-rejection state, if said cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail comprises; specifying a rejection factor; generating a random number; and randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number, and wherein said step of specifying the rejection factor comprises determining a rejection factor value based on the system overall resource usage status.
-
-
10. A method comprising:
-
determining a sender identifier based on a sender of an incoming email; determining a cumulative penalty count value associated with said sender identifier, wherein determining said cumulative penalty count value comprises assessing a penalty count value to said sender identifier for an undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and said system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, and said operating state is a number of the group consisting of;
a normal operating state, a selective-rejection operating state, and a random-rejection operating state,wherein, for said random-rejection state, if said cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail comprises rejecting the incoming e-mail.
-
-
11. A method comprising:
-
determining a sender identifier based on a sender of an incoming email; determining a cumulative penalty count value associated with said sender identifier, wherein determining said cumulative penalty count value comprises assessing a penalty count value to said sender identifier for an undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and said system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, and said operating state is a number of the group consisting of;
a normal operating state, a selective-rejection operating state, and a random-rejection operating state,wherein, for said selective-rejection state, if said cumulative penalty count value has a zero value, said step of processing the incoming e-mail comprises; deriving an overall resource usage factor; generating a random number; and randomly rejecting the incoming e-mail on the basis of said overall resource usage factor, said random number, and said cumulative penalty count value, and wherein said step of randomly rejecting comprises accepting the incoming e-mail if said random number is greater than a product of said overall resource usage factor and said cumulative penalty count value, and rejecting the incoming e-mail if said random number is not greater than said product of said overall resource usage factor and said cumulative penalty count value. - View Dependent Claims (13)
-
-
14. A method comprising:
-
identifying an e-mail sender by determining a sender IP address based of an incoming email; obtaining a previous sender penalty count value calculated for said sender IP address, wherein said previous sender penalty count value is based at least in part on previous undesirable activity performed by the sender; accepting or rejecting the incoming e-mail based on said previous sender penalty count value; and updating said previous sender penalty count value by; reducing said previous sender penalty count value by a decay factor to yield a reduced sender penalty count value, said decay factor being a function of a pre-established retention period; and adding an activity penalty count value to said reduced sender penalty count value to yield an updated sender penalty count value, said activity penalty count value calculated as a function of current sender e-mail activities. - View Dependent Claims (19, 20, 21)
-
-
15. The method of 14 further comprising the steps of:
-
maintaining a behavior trace table entry for the e-mail sender; and determining said previous sender penalty count from said behavior trace table. - View Dependent Claims (16, 17)
-
-
18. A method comprising:
-
identifying an e-mail sender by determining a sender IP address based of an incoming email; obtaining a previous sender penalty count value calculated for said sender IP address, wherein said previous sender penalty count value is based at least in part on previous undesirable activity performed by the sender; accepting or rejecting the incoming e-mail based on said previous sender penalty count value; maintaining a behavior trace table entry for the e-mail sender; determining said previous sender penalty count from said behavior trace table; updating sender behavior values in said trace table entry in response to receipt of a sender e-mail by; reducing said behavior trace table value by a time-dependent decay factor; and adding a current behavior trace table value to said corresponding reduced behavior trace table value; wherein said time-dependent decay factor is a function of the time interval between the last two updates of said behavior trace table entry and a pre-established retention period.
-
-
22. A method comprising:
-
establishing an identity of a sender of an incoming email; determining a cumulative penalty count value associated with said identity, wherein said cumulative penalty count value is based at least in part on previous undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and the system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, wherein said operating state comprises a selective-rejection state, and wherein if said cumulative penalty count has nonzero value, said step of processing the incoming e-mail comprises; specifying a rejection factor; generating a random number; and randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number, and wherein said step of randomly rejecting comprises accepting the incoming e-mail if said random number is greater than said rejection factor and rejecting the incoming e-mail if said random number is not greater than said rejection factor. - View Dependent Claims (23, 24)
-
-
25. A method comprising:
-
establishing an identity of a sender of an incoming email; determining a cumulative penalty count value associated with-said identity, wherein said cumulative penalty count value is based at least in part on previous undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and the system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, wherein said operating state comprises a selective-rejection state, and wherein if said cumulative penalty count has nonzero value, said step of processing the incoming e-mail comprises; specifying a rejection factor; generating a random number; and randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number, and wherein said rejection factor is increased if said system overall resource usage status increases and said rejection factor is decreased if said system overall resource usage status decreases.
-
-
26. A method comprising:
-
establishing an identity of a sender of an incoming email; determining a cumulative penalty count value associated with said identity, wherein said cumulative penalty count value is based at least in part on previous undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and the system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, wherein said operating state comprises a random-rejection state, and wherein if said cumulative penalty count value has a nonzero value, said step of processing the incoming e-mail comprises rejecting the incoming e-mail.
-
-
27. A method comprising:
-
establishing an identity of a sender of an incoming email; determining a cumulative penalty count value associated with said identity, wherein said cumulative penalty count value is based at least in part on previous undesirable activity performed by the sender; retrieving a system overall resource usage status associated with the communication device; and processing the incoming e-mail on the basis of said cumulative penalty count value and the system overall resource usage status, wherein said step of processing the incoming e-mail comprises assigning an operating state to the communication device, said operating state being a function of said system overall resource usage status, wherein said operating state comprises a selective-rejection state, and wherein if said cumulative penalty count has zero value, said step of processing the incoming e-mail comprises; specifying a rejection factor; generating a random number; and randomly rejecting the incoming e-mail on the basis of said rejection factor and said random number, and wherein said step of randomly rejecting comprises accepting the incoming e-mail if said random number is greater than a product of said resource usage factor and said cumulative penalty count value, and rejecting the incoming e-mail if said random number is not greater than said product of said resource usage factor and said cumulative penalty count value. - View Dependent Claims (28)
-
Specification