Unsolicited electronic message source verification and tracking system and method

• US 8,266,217 B2
• Filed: 10/30/2003
• Issued: 09/11/2012
• Est. Priority Date: 10/30/2003
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Osterberg, Donald H. Jr.
• Primary Examiner(s): Whipple, Brian P
• Application Number:
  US10/698,813
• Publication Number:
  US 20090089375A1
• Time in Patent Office: 3,239 Days
• Field of Search: 709/206
• US Class Current: 709/206
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases

Abstract

An unsolicited electronic message source verification and tracking method and system for providing an efficient and convenient mechanism for tracking identification of unsolicited electronic message (e.g., e-mails) sources is presented. In one embodiment, a request for authorization to forward an electronic message is received. The request for authorization includes a request source address. A response is sent including an authorization indicator (e.g., a unique bit string) is sent to the request source address. An electronic message is received and a determination is made if the electronic message includes a valid authorization indictor. If the electronic message does include a valid authorization indicator the electronic message is associated with the request source address and the association is tracked. In one exemplary implementation, a source address included in the electronic message is compared to the request source address and discrepancies are noted.

Claims

1. An unsolicited e-mail Internet protocol source address verification and tracking method comprising:

sending from a source device a request for authorization to send an electronic mail message, the request identifying an address of the source of the request;

receiving at an e-mail authorization system from the source device the request for authorization to send the electronic mail message;

authorizing the request with the e-mail authorization system including generating an authorization indicator that includes the address of the source device sending said request for authorization;

sending a response to the request for authorization from the e-mail authorization system to the address of the source device, wherein the response to said request for authorization includes the authorization indicator with the included address of the source device sending said request for authorization;

receiving at the source device from the e-mail authorization system the authorization indicator;

adding by the source device the received authorization indicator to an electronic mail message;

sending the electronic mail message with the added authorization indicator and an indication of the address of the source device sending the electronic mail message from the source device to a destination device;

receiving the electronic mail message with the added authorization indicator and indication of the address of the source device sending the electronic mail message from the source device at an intermediate mail agent for the destination device; and

handling receipt of said electronic mail message at the intermediate mail agent for the destination device, including comparing the indication of the address of the source device sending the electronic mail message included in the received electronic mail message against the address of the source device sending said request for authorization included in the authorization indicator received in the electronic mail message.

2. The unsolicited e-mail Internet protocol source address verification and tracking method of claim 1 wherein said authorization indicator is a unique bit string and further identifies an address of the e-mail authorization system.

3. The unsolicited e-mail Internet protocol source address verification and tracking method of claim 1 further comprising tracking the address of the source device with the e-mail authorization system.

4. The unsolicited e-mail Internet protocol source address verification and tracking method of claim 2 wherein generating the authorization indicator comprises:

extracting a request source address from said request;

generating a key uniquely identifying the source device and based on the address of the source device indicated in the request; and

utilizing said request source address as a destination address in a header file of a return package including authorization indictor information.

5. A system comprising:

a destination device;

a source device communicatively coupled with the destination device;

an e-mail authorization system communicatively coupled with the source device, wherein the source device;

sends to the e-mail authorization system a request for authorization to send an electronic mail message to the destination device,

wherein the e-mail authorization system;

receives from the source device the request for authorization to send the electronic mail message,

generates an authorization indicator that includes the address of the source of the request for authorization, and

sends the authorization indicator to the address of the source device after authorization,

and wherein the source device;

receives from the e-mail authorization system the authorization indicator,

adds the received authorization indicator with the included address of the source of the request to the electronic mail message, and

sends the electronic mail message with the added authorization indicator to the destination device; and

an intermediate mail system for the destination device, wherein the intermediate mail system;

receives the electronic mail message with the added authorization indicator from the source device,

compares the address of the source device sending the received electronic mail message against the address of the source device sending said request for authorization included in the authorization indicator received in the electronic mail message, and

delivers the electronic mail message to the destination device if the address of the source device sending the received electronic mail message matches the address of the source device sending said request for authorization included in the authorization indicator received in the electronic mail message.

6. The system of claim 5, wherein said authorization indicator is a unique bit string and further identifies the email authorization system.

7. The system of claim 5, wherein the e-mail authorization system is further adapted to track the address of the source device.

8. A method for verifying and tracking unsolicited e-mail sources, the method comprising:

receiving at an e-mail authorization system from a source device a request for authorization to send an electronic mail message, the request identifying an address of the source of the request;

authorizing the request with the e-mail authorization system including generating an authorization indicator that includes the address of the source of the request;

sending a response to the request for authorization from the e-mail authorization system to the address of the source of the request, wherein the response to said request for authorization includes the authorization indicator;

receiving an electronic mail message from the source device to a destination device at an intermediate mail agent for the destination device, the electronic mail message including the authorization indicator and indication of an address of the source device sending the electronic mail message;

comparing by the intermediate mail agent for the destination device the indication of the address of the source device sending the electronic mail message included in the received electronic mail message against the address of the source of the request from for authorization included in the authorization indicator received in the electronic mail message; and

delivering the electronic mail message from the intermediate mail agent for the destination device to the destination device if the indication of the address of the source device sending the electronic mail message included in the received electronic mail message matches the address of the source of the request for authorization included in the authorization indicator received in the electronic mail message.

9. A system comprising:

an e-mail authorization system, wherein the e-mail authorization system receives from a source device a request for authorization to send an electronic mail message, the request identifying an address of the source of the request, authorizes the request, generates an authorization indicator that includes the address of the source of the request, and sends a response to the request for authorization to the address of the source of the request, wherein the response to said request for authorization includes the authorization indicator with the included address of the source of the request; and

an e-mail server for a destination device, wherein the e-mail server receives an electronic mail message from the source device to the destination device, the electronic mail message including the authorization indicator and indication of an address of the source device from which the electronic mail message is received, compares the indication of the address of the source device from which the electronic mail message is received included in the received electronic mail message against the address of the source of the request for authorization included in the authorization indicator received in the electronic mail message, and delivers the electronic mail message to the destination device if the indication of the address of the source device from which the electronic mail message is received included in the received electronic mail message matches the address of the source of the request for authorization included in the authorization indicator received in the electronic mail message.