Delaying inbound and outbound email messages

• US 8,745,143 B2
• Filed: 04/01/2010
• Issued: 06/03/2014
• Est. Priority Date: 04/01/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Walter, Jason D, Bidgoli, Mehrdad, Vitaldevara, Krishna C, Gillum, Eliot C
• Primary Examiner(s): Chan, Wing F
• Assistant Examiner(s): MIAH, RAZU A
• Application Number:
  US12/752,775
• Publication Number:
  US 20110246583A1
• Time in Patent Office: 1,524 Days
• Field of Search: 709204-207, 370/352
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]

Abstract

A computer implemented system and method to enable protection of email users from unsolicited bulk email using a message delivery delay based on characteristics detected in selected messages. Messages are evaluated for characteristics resembling unsolicited bulk email. A determination is made whether a message passing through the email system exhibits such characteristics and whether to delay the message. Suspect messages may be delayed for a period of time, the delay period being dependent on the characteristics giving rise to a determination to delay. Following the period, additional information received during the delay period characterizing the message is used to determine whether to dispose or deliver the message. Messages evaluated can be inbound to the email system, outbound to other email systems, or moving within the email system.

Claims

1. A computer implemented method for safeguarding users from unwanted bulk email messages (UBE) in an email system, the method comprising:

monitoring messages passing through the email system;

determining whether a message passing through the email system exhibits characteristics matching one or more characteristics associated with unwanted bulk email messages (UBE);

determining based on the characteristics exhibited by the message to delay the message;

delaying the message for a delay period of time, said delaying includes determining an amount of the delay period according to the characteristics giving rise to the determination to delay the message, said amount of the delay period determined varies with the type of characteristics evaluated;

determining whether to deliver the message based on additional information received during the delay period characterizing the message;

disposing of the message based on the determining step;

monitoring messages received from senders external to the email system and received by the email system;

monitoring messages generated by users of the email system and destined for recipients external to the email system; and

monitoring messages received from users of the email system and destined for other users of the email system.

2. The method of claim 1 wherein the step of disposing includes one of:

delaying the message for a second delay period and determining whether to deliver the message based on addition information received during the second delay period;

delivering the message;

or

destroying the message.

3. The method of claim 1 wherein the characteristics comprise one or more of:

sender information recipient information;

message specific characteristics; and

a random sampling.

4. The method of claim 1 wherein the method further includes queuing the message during the delaying period.

5. A computer implemented method for safeguarding users from unwanted bulk email messages (UBE) in an email system, the method comprising:

monitoring messages passing through the email system;

detecting a plurality of messages passing through the email system exhibiting characteristics matching one or more characteristics associated with unwanted bulk email messages (UBE);

determining based on the characteristics exhibited by the plurality of messages to delay at least a portion of the plurality of messages, said determining includes calculating a weighted sum of one or more factors and comparing the weighted sum of the one or more factors to a threshold to determine whether to delay the at least a portion of the plurality of messages based on said comparison;

delaying the at least a portion of the plurality of messages for a delay period, said delaying includes determining an amount of the delay period based on the characteristics giving rise to the determination to delay the at least a portion of the plurality of messages;

determining whether to deliver the at least a portion of the plurality of messages based on additional information characterizing messages received during the delay period;

disposing of the at least a portion of the plurality messages based on the determining step;

monitoring messages received from senders external to the email system and received by the email system;

monitoring messages generated by users of the email system and destined for recipients external to the email system; and

monitoring messages received from users of the email system and destined for other users of the email system.

6. The method of claim 5 wherein delaying at least a portion includes delaying all messages having identical characteristics.

7. The method of claim 5 wherein delaying at least a portion includes delaying a fraction of the plurality of messages having identical characteristics.

8. The method of claim 7 wherein determining whether to deliver at least the portion of the plurality of messages includes using additional information comprising feedback on a fraction of the plurality of messages not delayed.

9. The method of claim 8 wherein the additional information includes one of user action feedback or message delivery information.

10. The method of claim 9 wherein the step of disposing includes one of:

delaying the messages for a second delay period and determining whether to deliver the message based on addition information received during the second delay period;

delivering the messages;

or

destroying the messages.

11. A computer implemented method for safeguarding users from unwanted bulk email messages (UBE) in an email system, the email system including an inbound mail server, an outbound mail server and an internal mail server, the method comprising:

monitoring messages passing through the email system at each of the inbound, outbound and internal mail servers;

determining whether a group of messages passing through the email system exhibits identical characteristics that match one or more characteristics associated with unwanted bulk email messages (UBE);

determining based on the characteristics exhibited by the group of messages to delay at least a portion of the group of messages;

delaying the at least a portion of the group of messages for a first delay period of time, said delaying includes determining the amount of the first delay period based on the characteristics giving rise to the determination to delay the at least a portion of the group of messages, said first delay period varies with the type of characteristics evaluated;

determining whether to deliver the at least a portion of the group of messages based on additional information received during the first delay period on whether the characteristics indicate the message is unwanted bulked email messages (UBE);

disposing of the at least a portion of the group of messages based on the determining step, said disposing includes delaying the at least a portion of the group of messages for a second delay period and determining whether to deliver the at least a portion of the group of messages based on addition information received during the second delay period;

monitoring messages received from senders external to the email system and received by the email system;

monitoring messages generated by users of the email system and destined for recipients external to the email system; and

monitoring messages received from users of the email system and destined for other users of the email system.

12. The method of claim 11 wherein the one or more characteristics comprise one or more of:

sender information recipient information;

message specific characteristics;

or a random sampling.

13. The method of claim 11 wherein the delaying the at least a portion of the group of messages for a first delay period of time includes delaying all messages of the group of messages having identical characteristics.

14. The method of claim 11 wherein the delaying the at least a portion of the group of messages for a first delay period of time includes delaying a fraction of the group of messages having identical characteristics.

15. The method of claim 14 wherein determining whether to deliver at least the portion of the group of messages includes using additional information comprising feedback on a fraction of the group of messages not delayed.

16. The method of claim 15 wherein the additional information includes one of user action feedback or message delivery information.

17. The method of claim 16 wherein the step of disposing includes one of:

delivering the messages;

or

destroying the messages.