Reducing unwanted and unsolicited electronic messages by exchanging electronic message transmission policies and solving and verifying solutions to computational puzzles

• US 7,921,173 B2
• Filed: 04/07/2009
• Issued: 04/05/2011
• Est. Priority Date: 03/12/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Williams, Roy, Ahmed, Khaja E., Katz, Harry Simon, Atkinson, Robert George, Lyon, James M., Rounthwaite, Robert L., Goodman, Joshua T., Goldberg, Andrew V., Dwork, Cynthia
• Primary Examiner(s): DENNISON, JERRY B
• Application Number:
  US12/419,884
• Publication Number:
  US 20090193093A1
• Time in Patent Office: 728 Days
• Field of Search: 709/206, 709/224, 726/4
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

The present invention provides for generating inputs that can be provided to a message classification module to facilitate more reliable classification of electronic messages, such as, for example, as unwanted and/or unsolicited. In one embodiment, a sending messaging server provides an appropriate response to address verification data thereby indicating a reduced likelihood of the sending messaging server using a forged network address. In another embodiment, it is determined if a messaging server is authorized to send electronic messages for a domain. In yet another embodiment, electronic message transmission policies adhered to by a domain are identified. In yet a further embodiment, a sending computer system expends computational resources to solve a computational puzzle and includes an answer document in an electronic message. A receiving computer system receives the electronic message and verifies the answer document.

Claims

1. In a sending domain that is network connectable to one or more receiving domains, the sending domain including a sending messaging server configured to send electronic messages to the receiving domains, a method for indicating to a receiving domain that the sending messaging server expended computational resources to solve a predetermined computational puzzle before sending an electronic message to the receiving domain, the method comprising:

an act of the sending messaging server receiving electronic message data that is to be contained in an electronic message sent from the sending messaging server to the receiving domain;

an act of the sending messaging server generating puzzle input from one or more components of the electronic message;

an act of the sending messaging server identifying an answer document by applying a hashing algorithm to different answer documents until the hashing algorithm produces an answer hash value that is a solution to the predetermined computational puzzle, wherein the answer hash value is calculated by hashing a combination of the puzzle input and at least one of the different answer documents; and

an act of sending the electronic message from the sending messaging server to the receiving domain, wherein the electronic message includes the identified answer document and the electronic message data enabling verification by the receiving domain that the sending messaging server expended computational resources without further communication with the sending messaging server.

2. The method as recited in claim 1, wherein the hashing algorithm modifies a standard application of SHA-1 sub functions.

3. The method as recited in claim 1, further comprising an act of generating an initial document from at least one of the one or more components, wherein the act of generating the initial document comprises extracting data from at least one field of the electronic message data wherein the at least one field is selected from a From field, a To field, a NotBefore field, a NotAfter field, a Date field, a Body field, an Attachment field, a Subject field, and a Message-Id field.

4. The method as recited in claim 3, wherein the act of generating an initial document from at least one of the one or more components comprises an act of extracting data from one or more date range fields.

5. The method as recited in claim 3, wherein the act of generating an initial document from at least one of the one or more components comprises an act of extracting data wherein the data is text data, graphical data, Uniform Resource Identifier (“

URI”

) data, or executable data.

6. The method as recited in claim 1, wherein the act of the sending messaging server identifying an answer document comprises an act of identifying an answer document that, when combined with the puzzle input and the combination of the answer document and puzzle input is hashed, results in a hash value having a specified value in a plurality of fixed bit positions.

7. The method as recited in claim 6, wherein the act of the sending messaging server identifying an answer document comprises an act of identifying an answer document that, when prepended to the puzzle input and the concatenation of the answer document and puzzle input is hashed, results in a hash value having a value of zero in at least a first specified number of bits.

8. The method as recited in claim 1, wherein the act of the sending messaging server identifying an answer document comprises an act of identifying an answer document that, when concatenated to the puzzle input and the concatenation of the answer document and puzzle input is hashed, results in a hash value having specified bit values in a first plurality of bit positions and having bit values equal to the corresponding bit values of the hashes resulting from other answer documents in a second plurality of bit positions.

9. The method as recited in claim 1, wherein the act of sending an electronic message that includes the identified answer document and the electronic message data to the receiving domain comprises an act of sending an electronic message that includes a plurality of answer documents.

10. In a receiving domain that is network connectable to one or more sending domains, the receiving domain including one or more receiving messaging servers configured to receive electronic messages from the sending domains, a method for determining if a sending messaging server solved a predetermined computational puzzle before sending an electronic message, the method comprising:

an act of receiving an electronic message, wherein the electronic message includes electronic message data and an answer document;

an act of reproducing a puzzle input from one or more predetermined components of the electronic message;

an act of determining if a verifying hash value is a solution to the predetermined computational puzzle, the verifying hash value being calculated by hashing a combination of the answer document and the puzzle input using a hashing algorithm; and

an act of determining, based on whether the verifying hash value is a solution to the predetermined computational puzzle, whether the received electronic message is spam.

11. The method as recited in claim 10, wherein the act of receiving an electronic message that includes electronic message data and an answer document comprises an act of receiving an electronic mail message.

12. The method as recited in claim 10, wherein the act of receiving an electronic message that includes electronic message data and an answer document comprises an act of receiving an electronic message that includes a plurality of answer documents.

13. The method as recited in claim 10, further comprising an act of reproducing an initial document from at least one of the one or more predetermined components of the electronic message, wherein the act of reproducing the initial document comprises an act of extracting data from a field of the electronic message data wherein the field is selected from among a From field, a To field, a NotBefore field, a NotAfter field, a Date field, a Body field, an Attachment field, a Subject field, and a Message-ID field.

14. The method as recited in claim 13, wherein the act of reproducing an initial document from at least one of the one or more predetermined components of the electronic message comprises an act of extracting data from the electronic message data wherein the data is text data, graphical data, Uniform Resource Identifier (“

URI”

) data, or executable data.

15. The method as recited in claim 10, wherein the act of reproducing a puzzle input from one or more predetermined components of the electronic message comprises an act of applying the hashing algorithm, the hashing algorithm being specifically designed to increase the difficulty of implementing hardware acceleration used to enhance efficiency of the hashing algorithm.

16. The method as recited in claim 10, wherein the act of determining if a verifying hash value, calculated from a combination of an answer document and the puzzle input, is an answer value indicative of a solution to the predetermined computational puzzle comprises an act of determining if the verifying hash value has a specified value in a plurality of fixed bit positions interspersed throughout the verifying hash value.

17. The method as recited in claim 10, wherein the act of determining if a verifying hash value, calculated from a combination of an answer document and the puzzle input, is an answer value indicative of a solution to the predetermined computational puzzle comprises an act of determining if the verifying hash value has a specified value in a first plurality of bit positions and has a value equal to other verifying hash values resulting from other answer documents in a second plurality of bit positions.

18. The method as recited in claim 10, wherein the hashing algorithm modifies a standard application of SHA-1 sub functions.

19. A computer program product for use in a sending domain that is network connectable to one or more receiving domains, the sending domain including a sending messaging server configured to send electronic messages to the receiving domains, the computer program product for implementing a method for indicating to a receiving domain that the sending messaging server expended computational resources to solve a predetermined computational puzzle before sending an electronic message to the receiving domain, the computer program product comprising one or more computer storage media, the computer storage media not consisting of a propagated data signal and having stored thereon computer executable instructions that, when executed by a processor, cause the sending domain to perform the following:

receive electronic message data that is to be contained in an electronic message;

generate puzzle input from one or more components of the electronic message;

identify an answer document by applying a hashing algorithm to different answer documents until the hashing algorithm produces an answer hash value that is a solution to the predetermined computational puzzle, wherein the answer hash value is calculated by hashing a combination of the one of the different answer documents and the puzzle input using the hashing algorithm; and

send the electronic message to the receiving domain, wherein the electronic message includes the identified answer document and the electronic message and enables verification by the receiving domain that the sending messaging server expended computational resources without further communication with the sending messaging server.