Message filtering method

• US 8,363,568 B2
• Filed: 05/24/2012
• Issued: 01/29/2013
• Est. Priority Date: 09/03/2003
• Status: Active Grant

• Current Assignee: Intellectual Ventures I LLC (Intellectual Ventures LLC)
• Original Assignee: Hoshiko LLC (Raoul Management LLC)
• Inventors: Shuster, Gary Stephen
• Primary Examiner(s): Kizou, Hassan
• Assistant Examiner(s): MAGLO, EMMANUEL K
• Application Number:
  US13/479,882
• Publication Number:
  US 20120233279A1
• Time in Patent Office: 250 Days
• Field of Search: 370/395.52, 709226-229
• US Class Current: 370/252
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL

Abstract

A message filtering method makes use of a database in which domain names of a network, such as the Internet, are associated with IP addresses, or with geographic locations. Electronic messages are tested for authenticity by comparing domain names and IP addresses for a message being tested with information in the database. If the sender information in the message does not have the same associations as information in the database, the message may be blocked, flagged as spam, or subjected to further filtering.

Claims

1. A method comprising:

determining, by a computing device, sender information for an electronic mail message, wherein the sender information comprises a domain name within an email address of the sender of the electronic mail message and an originating IP address for at least one server transmitting the electronic mail message;

determining one or more permitted users of at least one portion of the domain name;

determining one or more permitted users of the originating IP address;

comparing, by the computing device, at least one of the one or more permitted users of the at least one portion of the domain name with at least one of the one or more permitted users of the originating IP address; and

providing an indication of a likelihood that the electronic mail message constitutes spam based on at least said comparing, wherein the indication indicates a higher likelihood that the electronic mail message constitutes spam if such permitted users do not match.

2. The method of claim 1, wherein permitted users of at least one portion of the domain name comprise an owner of the domain name.

3. The method of claim 1, wherein permitted users of the originating IP address comprise an entity associated with a range of IP addresses that includes the originating IP address.

4. The method of claim 1, further comprising:

determining a first geographic location associated with the domain name;

determining a second geographic location associated with the originating IP address; and

comparing the first geographic location and the second geographic location, wherein the indication of a likelihood that the electronic mail message constitutes spam is further based on said comparing the first geographic location and the second geographic location.