Method and apparatus for scoring unsolicited e-mail

• US 20060031306A1
• Filed: 04/29/2004
• Published: 02/09/2006
• Est. Priority Date: 04/29/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Haverkos, Todd David
• Granted Patent: US 7,627,670 B2
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases

Abstract

A method for filtering spam is disclosed comprising the steps of: assigning weights to a plurality of recipient e-mail addresses; determining a set of similar e-mails from a plurality of e-mails sent to the recipient addresses; calculating a score based for each set of similar e-mails; placing the score in the header of the e-mail; determining whether the score exceeds a threshold; and responsive to determining that the score exceeds the threshold, tagging and/or filtering the e-mail.

Claims

1. A method for identifying and marking spam, comprising:

assigning weights to a plurality of recipient e-mail addresses;

determining a set of similar e-mails from a plurality of e-mails sent to the recipient addresses;

calculating a score for each set of similar e-mails;

placing the score in the header of each of the e-mails in the set of similar e-mails;

determining whether the score exceeds a threshold; and

responsive to determining that the score exceeds the threshold, filtering the e-mail.

2. The method of claim 1 further comprising:

designating a plurality of attributes;

examining a plurality of incoming e-mails;

building a database of attributes for each of the plurality of incoming e-mails;

tracking the e-mail received based on a recipient address; and

correlating the attributes and recipient addresses.

3. The method of claim 2 further comprising:

wherein the step of examining a plurality of incoming e-mails is accomplished within a user-definable length of time.

4. The method of claim 1 further comprising:

categorizing the plurality of recipient email addresses into a plurality of recipient address categories;

assigning weights to each of the plurality of recipient address categories; and

calculating a score based on weights assigned to each of the plurality of recipient address categories.

5. The method of claim 1 further comprising the step of:

using the threshold score to determine how the mail is filed in any mail user agent.

6. The method of claim 1 further comprising the step of:

filtering the plurality of e-mails based on each of the e-mail headers.

7. A program product operable on a computer comprising:

a computer-usable medium;

wherein the computer-usable medium comprises instructions for a computer to perform steps comprising;

assigning weights to a plurality of recipient e-mail addresses;

determining a set of similar e-mails from a plurality of e-mails sent to the recipient addresses;

calculating a score for each set of similar e-mails;

placing the score in the header of each of the e-mails in the set of similar e-mails;

determining whether the score exceeds a threshold; and

responsive to determining that the score exceeds the threshold, filtering the e-mail.

8. The program product of claim 7 further comprising instructions for:

designating a plurality of attributes;

examining a plurality of incoming e-mails;

building a database of attributes for each of the plurality of incoming e-mails;

tracking the e-mail received based on a recipient address; and

correlating the attributes and recipient addresses.

9. The program product of claim 7 further comprising instructions for:

wherein the step of examining a plurality of incoming e-mails is accomplished within a user-definable length of time.

10. The program product of claim 7 further comprising instructions for:

categorizing email addresses into a plurality of address categories; and

assigning weights to each of the plurality of address categories; and

calculating a score based on weights assigned to each type of address.

11. The program product of claim 7 further comprising instructions for:

using the threshold score to determine how the mail is filed in any mail user agent.

12. The program product of claim 7 further comprising instructions for:

filtering the plurality of e-mails based on each of the e-mail headers.

13. An apparatus comprising:

a computer having a processor connected to a network;

an input device and a display device connected to the processor;

a calculator program in the memory of the computer;

wherein the calculator program instructs the processor to;

assign weights to a plurality of recipient e-mail addresses;

determine a set of similar e-mails from a plurality of e-mails sent to the recipient addresses;

calculate a score for each set of similar e-mails;

place the score in the header of each of the e-mails in the set of similar e-mails;

determine whether the score exceeds a threshold; and

responsive to determining that the score exceeds the threshold, filter the e-mail.

14. The apparatus of claim 13 further comprising instructions to:

designate a plurality of attributes;

examine a plurality of incoming e-mails;

build a database of attributes for each of the plurality of incoming e-mails;

track the e-mail received based on a recipient address; and

correlate the attributes and recipient addresses.

15. The apparatus of claim 13 further comprising instructions to:

examine the plurality of incoming e-mails within a user-definable length of time.

16. The apparatus of claim 13 further comprising instructions to:

categorize email addresses into a plurality of address categories; and

assign weights to each of the plurality of address categories; and

calculate a score based on weights assigned to each type of address.

17. The apparatus of claim 13 further comprising instructions to:

use the threshold score to determine how the mail is filed in any mail user agent.

18. The apparatus of claim 13 further comprising instructions to:

filter the plurality of e-mails based on each of the e-mail headers.