Cookie-based detection of spam account generation

• US 8,601,547 B1
• Filed: 12/28/2009
• Issued: 12/03/2013
• Est. Priority Date: 12/29/2008
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Shen, HongHai
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US12/648,251
• Time in Patent Office: 1,436 Days
• Field of Search: 726/4, 726/26
• US Class Current: 726/4
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A computer implemented method for detecting and preventing spam account generation is disclosed. Upon receiving an account creation request from a client, the server analyzes the request and associates a spam score with the account creation request, based at least in part on a number of new account requests associated with the cookie received during a predefined time period, and compares the spam score with certain predefined thresholds. If the spam score is above a first threshold, the server may refuse the account creation request. If the spam score is within a certain range, the server may limit the access to the account associated with the account creation request. If the spam score is below a second threshold, the server may put no limit on access to (i.e., enable normal use of) the account.

Claims

1. A computer implemented method, comprising:

at a server having one or more processors and memory storing one or more programs executed by the one or more processors;

receiving an account creation request associated with a cookie;

associating a score with the account creation request, based at least in part on a number of new account requests associated with the cookie received during a predefined time period; and

performing an action associated with the account creation request based at least in part on the score, wherein the action includes at least one of refusing the account creation request, modifying an account created in response to the account creation request, accepting the account creation request, and maintaining the account created in response to the account creation request.

2. The computer implemented method of claim 1, wherein the predefined time period has a duration that is in the range of one day to one month.

3. The computer implemented method of claim 1, wherein modifying the account created in response to the account creation request comprises disabling the account or limiting account access.

4. The computer implemented method of claim 3, wherein limiting account access includes at least one of requiring a response to a human interaction proof for access to the account, limiting access time to the account, limiting use of account functions, and limiting transmission from the account.

5. The computer implemented method of claim 1, wherein if the score meets predetermined criteria, the action associated with the account creation request comprises disabling the account.

6. The computer implemented method of claim 1, wherein the number of new account requests associated with the cookie is an average, over a time period, of new account requests associated with the cookie received during successive time intervals;

wherein the predefined time period is longer than each of the time intervals.

7. The computer implemented method of claim 1, wherein the score is greater than zero only if the number of new account requests associated with the cookie meets a predetermined threshold.

8. A computer system, comprising:

one or more processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including;

instructions for receiving an account creation request associated with a cookie;

instructions for associating a score with the account creation request, based at least in part on a number of new account requests associated with the cookie received during a predefined time period; and

instructions for performing an action associated with the account creation request based at least in part on the score, wherein the action includes at least one of refusing the account creation request, modifying an account created in response to the account creation request, accepting the account creation request, and maintaining the account created in response to the account creation request.

9. A non-transitory computer readable storage medium and one or more computer programs embedded therein, the one or more computer programs comprising instructions, which when executed by a computer system, cause the computer system to:

receive an account creation request associated with a cookie;

associate a score with the account creation request, based at least in part on a number of new account requests associated with the cookie received during a predefined time period; and

perform an action associated with the account creation request based at least in part on the score, wherein the action includes at least one of refusing the account creation request, modifying an account created in response to the account creation request, accepting the account creation request, and maintaining the account created in response to the account creation request.

10. A computer implemented method, comprising:

at a server having one or more processors and memory storing one or more programs executed by the one or more processors;

sending an account creation form including a human interaction proof to a client;

receiving the account creation form including a response to the human interaction proof from the client;

evaluating a time difference between the sending and the receiving;

associating a score, based at least in part on the time difference, with the account creation form; and

performing an action associated with the account creation form based at least in part on the score, wherein the action includes at least one of refusing the account creation form, modifying an account created in response to the account creation form, accepting the account creation form, and maintaining the account created in response to the account creation form.

11. The computer implemented method of claim 10, wherein modifying the account created in response to the account creation request comprises disabling the account or limiting account access.

12. The computer implemented method of claim 11, wherein limiting account access includes at least one of requiring a response to a human interaction proof for access to the account, limiting access time to the account, limiting use of account functions, and limiting transmission from the account.

13. The computer implemented method of claim 10, wherein if the score meets predetermined criteria, the action associated with the account creation request comprises disabling the account.

14. The computer implemented method of claim 10, wherein the score is inversely proportional to the time difference.

15. The computer implemented method of claim 10, wherein the score is equal to a default value unless the time difference is less than a predetermined threshold.

16. The computer implemented method of claim 10, wherein the score is a function of the time difference and an average time difference over a predefined time period.

17. A computer system, comprising:

one or more processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including;

instructions for sending an account creation form including a human interaction proof to a client;

instructions for receiving the account creation form including a response to the human interaction proof from the client;

instructions for evaluating a time difference between the sending and the receiving;

instructions for associating a score, based at least in part on the time difference, with the account creation form; and

instructions for performing an action associated with the account creation form based at least in part on the score, wherein the action includes at least one of refusing the account creation form, modifying an account created in response to the account creation form, accepting the account creation form, and maintaining the account created in response to the account creation form.

18. A non-transitory computer readable storage medium and one or more computer programs embedded therein, the one or more computer programs comprising instructions, which when executed by a computer system, cause the computer system to:

send an account creation form including a human interaction proof to a client;

receive the account creation form including a response to the human interaction proof from the client;

evaluate a time difference between the sending and the receiving;

associate a score, based at least in part on the time difference, with the account creation form; and

perform an action associated with the account creation form based at least in part on the score, wherein the action includes at least one of refusing the account creation form, modifying an account created in response to the account creation form, accepting the account creation form, and maintaining the account created in response to the account creation form.