Active e-mail filter with challenge-response

• US 8,924,484 B2
• Filed: 07/16/2002
• Issued: 12/30/2014
• Est. Priority Date: 07/16/2002
• Status: Expired due to Fees

• Current Assignee: Quest Software, Inc.
• Original Assignee: SonicWALL, Inc. (SonicWall Holdings Ltd.)
• Inventors: Wilson, Brian
• Primary Examiner(s): Tiv, Backhean
• Application Number:
  US10/197,393
• Publication Number:
  US 20040015554A1
• Time in Patent Office: 4,550 Days
• Field of Search: 709/206, 709/207, 713/201
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes

Abstract

When a user receives potential junk e-mail from an unknown sender address, an active filter installed in or cooperating with the user'"'"'s e-mail system sends a challenge e-mail back to the sender address. Unless the user receives a correct response e-mail from the sender address and/or a response that meets formal criteria, the active filter rejects the original e-mail and blocks future e-mail from that sender address. The challenge preferably includes a question that the sender must correctly answer in his response. The question is such that only humans can interpret and respond to it correctly. For example, the question may relate to and/or be incorporated in an image in the challenge. Lists of approved and blocked sender addresses are compiled. The user may directly enter addresses in the address lists. Addresses to which the user has sent e-mail may also be included directly in the approved list.

Claims

1. A method for filtering electronic mail (e-mail) sent to a user e-mail system comprising:

receiving at the user e-mail system a current e-mail message sent from a sender address, wherein the e-mail system has a plurality of different levels of security ranging from high to low, each level of security associated with a different set of one or more e-mail filters;

determining that a current level of security has been selected by the user, wherein the current level of security as selected by the user is associated with a challenge-response filter;

determining that the current e-mail message is not a challenge e-mail response message sent from the sender address in response to a previous challenge rendered by the user e-mail system, the previous challenge having been identified at a computing device associated with the sender address by a valid challenge key in the previous challenge rendered by the user e-mail system, the valid challenge key identifying a message as a challenge requiring a challenge e-mail response message;

returning to the sender address a challenge that requires a correct challenge response, wherein the challenge rendered by the user'"'"'s e-mail system is selected from a plurality of challenges generated by an external provider of challenges, the challenge being sent to the sender address via e-mail;

storing the current e-mail message sent from the sender address in an intermediate buffer coupled to the user e-mail system;

receiving a challenge e-mail response message sent from the sender address in response to the challenge rendered by the user'"'"'s e-mail system; and

evaluating the challenge e-mail response message to determine whether the challenge response message includes a correct challenge response and corresponds to a formal criterion, wherein the formal criterion is a server of the sender being configured to accept e-mail, wherein future e-mail messages from senders associated with servers that do not accept e-mail are prevented from reaching an intended recipient at the user e-mail system.

2. The method of claim 1, further comprising blocking all future e-mail messages from the sender address until a challenge e-mail response message including the correct challenge response and corresponding to the formal criterion is received by the user e-mail system from the sender address.

3. The method of claim 1, wherein the challenge rendered by the user e-mail system includes an instruction to the recipient at the sender address to perform an action, and the correct challenge response includes an indication of correct performance of the action.

4. The method of claim 3, wherein the action to be performed includes a response to a question.

5. The method of claim 4, wherein the challenge rendered by the user e-mail system is accompanied by an image.

6. The method of claim 5, wherein the performed action includes a response to a question concerning the image, the response including selection of an object in the image, wherein the selection of the object executes a script that automatically generates the correct challenge response for inclusion in the challenge e-mail response message.

7. The method of claim 5, wherein the performed action includes a response to a question concerning the image, the response including the manual entry of text that is to be included in the challenge e-mail response message.

8. The method of claim 5, wherein the challenge rendered by the user e-mail system is further accompanied by an audio file that instructs the recipient at the sender address to perform the action, the action including a response to a question in the audio file and concerning the image, the response including selection of an object in the image, wherein the selection of the object executes a script that automatically generates the correct challenge response for inclusion in the challenge e-mail response message.

9. The method of claim 5, wherein the challenge rendered by the user e-mail system is further accompanied by an audio file that instructs the recipient at the sender address to perform the action, the action including a response to a question in the audio file concerning the image, the response including the manual entry of text that is to be included in the challenge e-mail response message.

10. The method of claim 3, wherein a user of the user e-mail system selects a challenge generated by the external provider of challenges.

11. The method of claim 3, wherein the action must be correctly performed within a predefined response period.

12. The method of claim 3, wherein multiple attempts are allowed to correctly perform the action.

13. The method of claim 12, wherein the multiple attempts to correctly perform the action are limited to maximum number of multiple attempts.

14. The method of claim 12, wherein each of the multiple attempts that results in a challenge e-mail response message that does not include both a correct challenge response and a valid challenge key subsequently results in the issuance of a new challenge.

15. The method of claim 3, further comprising:

adding the sender address to a list of approved sender addresses upon receipt of a challenge e-mail response message that includes the correct challenge response and that corresponds to the formal criterion from the sender address; and

accepting all future e-mail message sent from an address included on the list of approved sender addresses without challenge.

16. The method of claim 15, wherein adding the sender to a list of approved sender addresses includes manually adding user-specified e-mail addresses to the list of approved sender addresses.

17. The method of claim 15, wherein adding the sender to a list of approved sender addresses includes automatically adding to the list of approved sender addresses any e-mail address to which the user has initiated sending an e-mail message.

18. The method of claim 15, further comprising adding to the list of approved sender addresses at least one e-mail address obtained from an externally compiled address list.

19. The method of claim 15, wherein the list of approved sender addresses includes an internally-compiled list of senders for an enterprise e-mail system.

20. The method of claim 15, wherein the list of approved sender addresses includes a user-specific list of senders.

21. The method of claim 15, wherein the list of approved sender addresses includes both an internally-compiled list of senders for an enterprise e-mail system and a user-specific list of senders.

22. The method of claim 3, wherein the instruction to perform the action is presented by an audio file that accompanied the challenge and the correct challenge response requires an indication of correct performance of the action identified by the audio file.

23. The method of claim 3, wherein the challenge is further accompanied by motion video.

24. The method of claim 23, wherein the performed action includes a response to a question concerning the motion video, the response including selection of an object in the video, wherein the selection of the object executes a script that automatically generates the correct challenge response for inclusion of the challenge e-mail response message.

25. The method of claim 23, wherein the performed action includes a response to a question concerning the motion video, the response including a manual entry of text that is to be included in the challenge e-mail response message.

26. The method of claim 1, further comprising blocking any e-mail message received from any address included on a list of blocked sender addresses without rendering a challenge that requires a challenge e-mail response message.

27. The method of claim 26, further comprising manually adding user-specified e-mail addresses to the list of blocked sender addresses.

28. The method of claim 26, further comprising adding at least one e-mail address obtained from an externally compiled address list to the list of blocked sender addresses.

29. The method of claim 26, further comprising adding the sender address to the list of blocked sender addresses until receipt of a challenge e-mail response message that includes the correct challenge response and that corresponds to the formal criterion.

30. The method of claim 29, further comprising providing the list of blocked sender addresses to one or more third-parties for subsequent distribution to another e-mail system that renders challenges and blocks sender addresses that fail to provide a challenge e-mail response message including both a correct challenge response and that corresponds to the formal criterion.

31. The method of claim 1, further comprising:

notifying the user of receipt of the current e-mail message;

prompting the user to indicate whether to send the challenge; and

sending the challenge only if the user indicates that the challenge should be sent.

32. The method of claim 1, wherein the valid challenge key includes a checksum.

33. The method of claim 1, wherein the address of a sender of any challenge e-mail response message that includes both the correct challenge response and that corresponds to the formal criterion to a challenge is automatically added to a list of approved sender addresses and all future messages from that sender address are accepted for display to a user without further challenge.

34. The method of claim 33, wherein any incoming message that is sent from an approved sender address is accepted for automatic display to a user.

35. The method of claim 1, wherein the valid challenge key is encrypted.

36. The method of claim 1, wherein the valid challenge key includes a random number.

37. A system for filtering electronic mail (e-mail) sent to a user comprising:

a network that receives and transmits e-mail;

a computing device communicatively coupled to the network, the computing device associated with a recipient address and having a plurality of different levels of security ranging from high to low, each level of security associated with a different set of one or more e-mail filters, and wherein the computing device;

receives a current e-mail message sent over the network from a sender address to the recipient address;

determines that a current level of security has been selected by the user, wherein the current level of security as selected by the user is associated with a challenge-response filter,

determines that the current e-mail message is not a challenge e-mail response message sent in response to a previous challenge initiated by the computing device, the previous challenge having been identified by a valid challenge key in the previous challenge rendered by the computing device, the valid challenge key identifying a message as a challenge requiring a challenge e-mail response message;

sends to the sender address a challenge that requires a correct challenge response, wherein the challenge is selected from a plurality of challenges generated by an external provider of challenges, the external provider being communicatively coupled to the computing device and accessed over the network;

stores the current e-mail message from the sender address in an intermediate storage buffer coupled to the computing device;

receives a challenge e-mail response message from the sender address; and

evaluates the challenge e-mail response message to determine whether the challenge e-mail response message includes a correct challenge response and corresponds to a formal criterion, wherein the formal criterion is a server of the sender address being configured to accept e-mail, wherein future e-mail messages from sender addresses associated with servers that do not accept e-mail are prevented from reaching an intended recipient at the computing device.

38. The system of claim 37, wherein the correct e-mail challenge response includes an indication of performance of an action specified by the challenge.

39. The system of claim 38, wherein the computing device further generates a list of approved sender addresses, wherein an approved sender address includes an address having provided a challenge e-mail response message that includes both a correct challenge response and that corresponds to the formal criterion, whereby all future e-mail received from an approved sender is not subjected to a challenge.

40. The system of claim 38, wherein the computing device further generates a list of blocked sender addresses, wherein a blocked sender address includes an address having failed to provide a challenge e-mail response message that includes both a correct challenge response and that corresponds to the formal criterion, whereby all future e-mail received from a blocked sender is automatically blocked and not subject to a challenge.

41. The system of claim 38, wherein the computing device comprises a response analysis module that analyzes a received challenge e-mail response message from the sender address and determine whether the message includes a correct challenge response.

42. A non-transitory computer-readable storage medium having embodied thereon a program, the program being executable by a computer to perform a method for filtering electronic mail (e-mail) comprising:

receiving a current e-mail message sent from a sender address in an e-mail system that has a plurality of different levels of security ranging from high to low, each level of security associated with a different set of one or more e-mail filters;

determining that a current level of security has been selected by the user, wherein the current level of security as selected by the user is associated with a challenge-response filter;

determining that the current e-mail message is not a challenge e-mail response message sent from the sender address in response to a previously rendered challenge, the previous challenge having been identified by a valid challenge key in the previously rendered challenge, the valid challenge key identifying a message as a challenge requiring a challenge e-mail response message;

returning to the sender address a newly rendered challenge that requires a correct challenge response, wherein the newly rendered challenge is selected from a plurality of challenges generated by an external provider of challenges;

storing the current e-mail message sent from the sender address to an intended recipient in an intermediate storage buffer;

receiving a challenge e-mail response message sent from the sender address; and

evaluating the challenge e-mail response message to determine whether the challenge e-mail response message includes both a correct challenge response and corresponds to a formal criterion, wherein the formal criterion is a server of the sender address being configured to accept e-mail, wherein future e-mail messages from senders associated with servers that do not accept e-mail are prevented from reaching an intended recipient.