Signature generation using message summaries

• US 9,325,649 B2
• Filed: 01/10/2014
• Issued: 04/26/2016
• Est. Priority Date: 02/20/2003
• Status: Expired due to Term

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Oliver, Jonathan J., Koblas, David A., Wilson, Brian K.
• Primary Examiner(s): Osman, Ramy M
• Application Number:
  US14/152,812
• Publication Number:
  US 20140129655A1
• Time in Patent Office: 837 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/345 Summarisation for human users
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/063 Content adaptation, e.g. replacement of unsuitable content
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/234 for tracking messages

Abstract

Systems and methods for processing a message are provided. A message may be processed to generate a message summary by removing or replacing certain words, phrases, sentences, punctuation, and the like. Message signatures based upon the message summary may be generated and stored in a signature database, which may be used to identify and/or classify spam messages. Subsequently received messages may be classified by signature and processed based on classification.

Claims

1. A method for processing electronic-mail (email) messages, the method comprising:

receiving a message over a network interface at a spam blocking device;

identifying a word or phrase in the message received at the spam blocking device that can be replaced with a canonical equivalent;

creating a message summary by replacing the identified word or phrase in the message with the canonical equivalent of the word or phrase;

generating a signature for the message summary that includes the canonical equivalent,

comparing the generated signature to a plurality of signatures in a database of spam signatures, wherein each signature in the database of spam signatures was generated from a previous message summary that includes a canonical equivalent from one or more previously processed messages, and

isolating the message when the signature is in the database of spam signatures, wherein the isolated message is not delivered to an email account of a user.

2. The method of claim 1, wherein:

the generated signature was stored in the database after the user or another user identified a message of the previously processed messages received at a user electronic device as being spam; and

the generated signature was generated at the user electronic device from a canonical equivalent from an identified word or phrase in the message of the previously processed messages.

3. The method of claim 2, wherein a number set in the database is set to one, the number set corresponding to a number of times that the signature has been associated with spam.

4. The method of claim 3, wherein the number in the database is increased by one corresponding to the number of times the signature was associated with spam.

5. The method of claim 2, further comprising adding a sender of the message to a blacklist.

6. The method of claim 5, further comprising blocking additional messages from the sender in the blacklist.

7. The method of claim 1, wherein the message is moved to a junk folder when the message is in the database of spam messages.

8. The method of claim 1, wherein the message is quarantined when the message is in the database of spam messages.

9. The method of claim 8, wherein the quarantined message is recoverable by the user or by a mail administrator.

10. The method of claim 1, further comprising:

executing instructions stored in memory with a processor, whereby execution of the instructions replaces one or more additional words or phrases in the message with a canonical equivalent of the one or more additional words or phrases;

generating a signature for each of the canonical equivalents;

assigning an importance ranking value to each of the canonical equivalents; and

choosing one or more of the canonical equivalents with the highest importance rankings to compare with the database of spam signatures.