Managing a blocked-originator list for a messaging application

• US 9,438,611 B2
• Filed: 03/17/2014
• Issued: 09/06/2016
• Est. Priority Date: 03/17/2014
• Status: Active Grant

• Current Assignee: Lenovo International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Enterprise Solutions (Singapore) Pte., Ltd. (Lenovo Group Ltd.)
• Inventors: Glass, David W., McLean, James G., Pickover, Clifford A., Winarski, Daniel J.
• Primary Examiner(s): Vostal, O. C.
• Application Number:
  US14/215,541
• Publication Number:
  US 20150264066A1
• Time in Patent Office: 904 Days
• Field of Search: 726/23
• US Class Current: 1/1
• CPC Class Codes: H04L 51/046 Interoperability with other network applications or services
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

Managing a blocked-originator list for a messaging application, including: detecting, by a list management module, a list management initiation event for a blocked-originator list, the blocked-originator list including a plurality of originators from which incoming messages are blocked; determining a number of entries in a blocked-originator list; determining a maximum number of entries in the blocked-originator list; determining whether the number of entries in the blocked-originator list is equal to the maximum number of entries in the blocked-originator list; and responsive to determining that the number of entries in the blocked-originator list is equal to the maximum number of entries in the blocked-originator list: deleting an entry from the blocked-originator list in dependence upon entry removal rules; and adding the new entry to the blocked-originator list.

Claims

1. A method of managing a blocked-originator list for a messaging application, the method comprising:

detecting, by a list management module stored in memory and executed by a computer microprocessor, a list management initiation event for a blocked-originator list, the blocked-originator list including a plurality of originators from which incoming messages are blocked;

determining, by the list management module, whether a number of entries currently in the blocked-originator list is equal to a maximum number of allowable entries in the blocked-originator list; and

responsive to determining that the number of entries currently in the blocked-originator list is equal to the maximum number of entries that may be included in the blocked-originator list;

deleting, by the list management module, an entry from the blocked-originator list in dependence upon entry removal rules, including

determining, by the list management module, a threat level for each entry in the blocked-originator list, wherein greater threats are associated with higher threat levels and lower threats are associated with lower threat levels;

deleting, by the list management module, an entry in the blocked-originator list with the lowest associated threat level;

identifying, by the list management module, an entry in the blocked-originator list that is a duplicate of an entry in a higher level blocked-originator list; and

deleting, by the list management module, the entry in the blocked-originator list that is a duplicate of an entry in the higher level blocked-originator list, and

adding, by the list management module, the new entry to the blocked-originator list.

2. The method of claim 1 wherein each originator is identified by an electronic mail (‘

email’

) address.

3. The method of claim 1 wherein deleting an entry from the blocked-originator list in dependence upon entry removal rules further comprises:

identifying, by the list management module, each entry in the blocked-originator list that has been included in the blocked-originator list for at least a predetermined period of time;

determining, by the list management module, a frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list; and

deleting, by the list management module, the entry in the blocked-originator list for which an incoming message has been least frequently received.

4. The method of claim 3 wherein determining the frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list further comprises determining, by the list management module, a frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list during a predetermined period of time.

5. An apparatus for managing a blocked-originator list for a messaging application, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

detecting, by a list management module stored in memory and executed by a computer microprocessor, a list management initiation event for a blocked-originator list, the blocked-originator list including a plurality of originators from which incoming messages are blocked;

determining, by the list management module, whether a number of entries currently in the blocked-originator list is equal to a maximum number of allowable entries in the blocked-originator list; and

responsive to determining that the number of entries currently in the blocked-originator list is equal to the maximum number of entries that may be included in the blocked-originator list;

deleting, by the list management module, an entry from the blocked-originator list in dependence upon entry removal rules, including

determining, by the list management module, a threat level for each entry in the blocked-originator list, wherein greater threats are associated with higher threat levels and lower threats are associated with lower threat levels;

deleting, by the list management module, an entry in the blocked-originator list with the lowest associated threat level;

identifying, by the list management module, an entry in the blocked-originator list that is a duplicate of an entry in a higher level blocked-originator list; and

deleting, by the list management module, the entry in the blocked-originator list that is a duplicate of an entry in the higher level blocked-originator list, and

adding, by the list management module, the new entry to the blocked-originator list.

6. The apparatus of claim 5 wherein each originator is identified by an electronic mail (‘

email’

) address.

7. The apparatus of claim 5 wherein deleting an entry from the blocked-originator list in dependence upon entry removal rules further comprises:

identifying, by the list management module, each entry in the blocked-originator list that has been included in the blocked-originator list for at least a predetermined period of time;

determining, by the list management module, a frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list; and

deleting, by the list management module, the entry in the blocked-originator list for which an incoming message has been least frequently received.

8. The apparatus of claim 7 wherein determining the frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list further comprises determining, by the list management module, a frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list during a predetermined period of time.

9. A computer program product for managing a blocked-originator list for a messaging application, the computer program product disposed upon a computer readable storage medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:

detecting, by a list management module stored in memory and executed by a computer microprocessor, a list management initiation event for a blocked-originator list, the blocked-originator list including a plurality of originators from which incoming messages are blocked;

determining, by the list management module, whether a number of entries currently in the blocked-originator list is equal to a maximum number of allowable entries in the blocked-originator list; and

responsive to determining that the number of entries currently in the blocked-originator list is equal to the maximum number of entries that may be included in the blocked-originator list;

deleting, by the list management module, an entry from the blocked-originator list in dependence upon entry removal rules, including

determining, by the list management module, a threat level for each entry in the blocked-originator list, wherein greater threats are associated with higher threat levels and lower threats are associated with lower threat levels;

deleting, by the list management module, an entry in the blocked-originator list with the lowest associated threat level;

identifying, by the list management module, an entry in the blocked-originator list that is a duplicate of an entry in a higher level blocked-originator list; and

deleting, by the list management module, the entry in the blocked-originator list that is a duplicate of an entry in the higher level blocked-originator list, and

adding, by the list management module, the new entry to the blocked-originator list.

10. The computer program product of claim 9 wherein each originator is identified by an electronic mail (‘

email’

) address.

11. The computer program product of claim 9 wherein deleting an entry from the blocked-originator list in dependence upon entry removal rules further comprises:

identifying, by the list management module, each entry in the blocked-originator list that has been included in the blocked-originator list for at least a predetermined period of time;

determining, by the list management module, a frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list; and

deleting, by the list management module, the entry in the blocked-originator list for which an incoming message has been least frequently received.

12. The computer program product of claim 11 wherein determining the frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list further comprises determining, by the list management module, a frequency at which an incoming message has been received from an originator contained in each identified entry in the blocked-originator list during a predetermined period of time.