US6072942A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method of electronic mail filtering using interconnected nodes
Assignee: McAfee LLC
•
Filing: 1996-09-18
•
Granted: 2000-06-06
•
Expires: 2016-09-18
Abstract
Abstract A system and method for filtering electronic mail messages is described. A message is received an processed through a one or more filter flows. Each filter flow is comprised of one or more self-contained nodes which can be combined in whatever order is required to enforce a given security policy. Node independence provides a policy-neutral environment for constructing filter flows. A filter flow may be as simple as forwarding the mail to the intended recipient, or may perform one or more checks where it decides whether to forward, reject, return (or some combination thereof) the message. Certain node types are also able to append information on to a mail message, while others are able to modify certain parts of a mail message. Several of the node types are able to generate audit or log messages in concert with processing a mail message.
Inventors
- 👤 Edward B. Stockwell
- 👤 Paula Budig Greve
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 07:48
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0245; H04L51/00; H04L51/21; H04L51/212; H04L9/00; H04L9/40; H04L51/234
Claims Analysis
Total Claims: 34
Claim 1
Independent Claim
134 words
A method of filtering electronic mail messages, comprising the steps of: defining a plurality of nodes, wherein each node identifies an operation and wherein one of the nodes is a filter node which identifies messages to filter; interconnecting nodes from the plurality of nodes such that the interconnected nodes describe a security policy; and reassembling an electronic mail message from two or more packets; passing the electronic mail message through the filter node, wherein the step of passing an electronic mail message through the filter node includes the steps of: determining if the electronic mail message is one which is to be filtered; if the electronic mail message is identified as to be filtered, processing the electronic mail message through one or more filter flows; and otherwise delivering the electronic mail message without filtering.
Claim 2
Independent Claim
134 words
A method of filtering electronic mail messages, comprising the steps of: defining a plurality of nodes, wherein each node identifies an operation and wherein one of the nodes is a filter node which identifies messages to filter; interconnecting nodes from the plurality of nodes such that the interconnected nodes describe a security policy; and reassembling an electronic mail message from two or more packets; passing the electronic mail message through the filter node, wherein the step of passing an electronic mail message through the filter node includes the steps of: determining if the electronic mail message is one which is to be filtered; if the electronic mail message is identified as to be filtered, processing the electronic mail message through one or more filter flows; and otherwise delivering the electronic mail message without filtering.
Claim 3
Dependent Claim
43 words
The method of claim 1, wherein the step of processing the electronic mail message comprises the steps of: analyzing the message to determine if it has a particular characteristic; and disposing of the electronic mail message based on the outcome of the analysis.
Claim 4
Dependent Claim
22 words
The method of claim 2, wherein the step of disposing of the electronic mail message comprises the step of delivering the message.
Claim 5
Dependent Claim
22 words
The method of claim 2, wherein the step of disposing of the electronic mail message comprises the step of rejecting the message.
Claim 6
Dependent Claim
23 words
The method of claim 2, wherein the step of disposing of the electronic mail message comprises the step of transmitting an audit message.
Claim 7
Dependent Claim
30 words
The method of claim 2, wherein the step of disposing of the electronic mail message comprises the steps of: delivering the message; rejecting the message; and transmitting an audit message.
Claim 8
Dependent Claim
23 words
The method of claim 1, wherein the step of processing the electronic mail message comprises the step of modifying the electronic mail message.
Claim 9
Dependent Claim
24 words
The method of claim 7, wherein the step of modifying the electronic mail message comprises the step of altering an electronic mail message address.
Claim 10
Dependent Claim
24 words
The method of claim 7, wherein the step of modifying the electronic mail message comprises the step of altering an electronic mail message header.
Claim 11
Independent Claim
126 words
A system for filtering electronic mail, comprising: means for receiving electronic mail messages, including a first electronic mail message, from one or more sources; an analysis module, for determining whether to filter the first electronic mail message, wherein the analysis module includes: node defining means for defining a plurality of nodes, wherein each node identifies an operation and wherein two of the nodes are filter nodes wherein each filter node includes a filter, for analyzing characteristics of the first electronic mail message; and one or more terminals, including a first terminal, wherein each terminal is connected to a node and wherein the first terminal is connected to one of the filter nodes in order to deliver the first electronic mail message to one or more destinations.
Claim 12
Independent Claim
126 words
A system for filtering electronic mail, comprising: means for receiving electronic mail messages, including a first electronic mail message, from one or more sources; an analysis module, for determining whether to filter the first electronic mail message, wherein the analysis module includes: node defining means for defining a plurality of nodes, wherein each node identifies an operation and wherein two of the nodes are filter nodes wherein each filter node includes a filter, for analyzing characteristics of the first electronic mail message; and one or more terminals, including a first terminal, wherein each terminal is connected to a node and wherein the first terminal is connected to one of the filter nodes in order to deliver the first electronic mail message to one or more destinations.
Claim 13
Dependent Claim
34 words
The system of claim 10, wherein the analysis module further comprises a plurality of modifiers, including a first modifier, wherein each of the plurality of modifiers operates to modify the first electronic mail message.
Claim 14
Independent Claim
98 words
A method of managing a filter map, comprising the steps: identifying one or more nodes to be included in the map, wherein each node defines an operation to be performed on an electronic mail message, wherein the step of identifying includes the step of defining a security policy; defining an order in which operations are to be performed on the electronic mail message; graphically positioning each of the one or more nodes according to the defined order; and graphically identifying connections between the nodes as a function of one or more routing paths available from any one node.
Claim 15
Independent Claim
98 words
A method of managing a filter map, comprising the steps: identifying one or more nodes to be included in the map, wherein each node defines an operation to be performed on an electronic mail message, wherein the step of identifying includes the step of defining a security policy; defining an order in which operations are to be performed on the electronic mail message; graphically positioning each of the one or more nodes according to the defined order; and graphically identifying connections between the nodes as a function of one or more routing paths available from any one node.
Claim 16
Independent Claim
84 words
A method for constructing an electronic mail filter having one or more message routing paths, comprising the steps: identifying a policy describing the one or more message routing paths; defining a plurality of filter nodes for analyzing electronic mail messages; defining a plurality of modifier nodes for modifying electronic mail messages; defining one or more terminal nodes for delivering electronic mail messages and other electronic information; and interconnecting the plurality of filter nodes, modifier nodes and terminal nodes so as to implement the policy.
Claim 17
Independent Claim
84 words
A method for constructing an electronic mail filter having one or more message routing paths, comprising the steps: identifying a policy describing the one or more message routing paths; defining a plurality of filter nodes for analyzing electronic mail messages; defining a plurality of modifier nodes for modifying electronic mail messages; defining one or more terminal nodes for delivering electronic mail messages and other electronic information; and interconnecting the plurality of filter nodes, modifier nodes and terminal nodes so as to implement the policy.
Claim 18
Dependent Claim
99 words
An electronic mail system, comprising: a mail filter having a plurality of filter objects, wherein the filter objects are arranged in a flow which enforces a security policy; and a mail delivery agent connected to the mail filter, wherein the mail delivery agent receives an electronic mail message and routes the electronic mail message based on a mail filter policy, wherein the mail filter policy determines mail to queue and mail to pass on; wherein the mail filter retrieves electronic mail messages queued by the mail delivery agent and filters the retrieved electronic messages according to the security policy.
Claim 19
Dependent Claim
99 words
An electronic mail system, comprising: a mail filter having a plurality of filter objects, wherein the filter objects are arranged in a flow which enforces a security policy; and a mail delivery agent connected to the mail filter, wherein the mail delivery agent receives an electronic mail message and routes the electronic mail message based on a mail filter policy, wherein the mail filter policy determines mail to queue and mail to pass on; wherein the mail filter retrieves electronic mail messages queued by the mail delivery agent and filters the retrieved electronic messages according to the security policy.
Claim 20
Dependent Claim
19 words
The electronic mail system according to claim 14, wherein the plurality of filter objects includes a terminal node type.
Claim 21
Dependent Claim
19 words
The electronic mail system according to claim 14, wherein the plurality of filter objects includes a modifier node type.
Claim 22
Dependent Claim
19 words
The electronic mail system according to claim 14, wherein the plurality of filter objects includes a filter node type.
Claim 23
Dependent Claim
37 words
The electronic mail system according to claim 14, wherein the plurality of filter objects includes a plurality of node types, wherein each node type includes an initialization section, a message processing section and a node clean-up section.
Claim 24
Dependent Claim
34 words
The electronic mail system according to claim 14, wherein the plurality of filter objects includes a plurality of node types, wherein one of the plurality node types appends information on to a mail message.
Claim 25
Dependent Claim
31 words
The electronic mail system according to claim 14, wherein the plurality of filter objects includes a plurality of node types, wherein one of the plurality of node types generates audit messages.
Claim 26
Dependent Claim
54 words
The electronic mail system according to claim 14, wherein the mail filter policy is stored in a mail filter policy file as a set of burb pairs, wherein each burb pair includes a first and a second burb, wherein messages from the first to the second burb are queued by the mail delivery agent.
Claim 27
Dependent Claim
54 words
The electronic mail system according to claim 18, wherein the mail filter policy is stored in a mail filter policy file as a set of burb pairs, wherein each burb pair includes a first and a second burb, wherein messages from the first to the second burb are queued by the mail delivery agent.
Claim 28
Independent Claim
67 words
A method of filtering electronic mail messages, comprising the steps of: providing a plurality of node types; defining a security policy wherein defining includes specifying an order in which the plurality of node types are to be connected; connecting the plurality of node types according to the security policy; receiving an electronic mail message; and analyzing the electronic mail message as a function of the security policy.
Claim 29
Independent Claim
67 words
A method of filtering electronic mail messages, comprising the steps of: providing a plurality of node types; defining a security policy wherein defining includes specifying an order in which the plurality of node types are to be connected; connecting the plurality of node types according to the security policy; receiving an electronic mail message; and analyzing the electronic mail message as a function of the security policy.
Claim 30
Dependent Claim
52 words
The method according to claim 23, wherein the step of connecting includes the steps of: displaying the plurality of node types as icons within a visual medium; placing copies of the icons on the visual medium in response to input from a user; and connecting the icons placed on the visual medium.
Claim 31
Dependent Claim
39 words
The method according to claim 23, wherein the step of connecting includes the step of configuring the plurality of nodes types to perform a function from one of a set of functions including forwarding, rejecting and returning the message.
Claim 32
Dependent Claim
108 words
An electronic mail filter, comprising: an analysis module for analyzing an electronic mail message, wherein the analysis module includes: node defining means for defining a plurality of nodes, wherein each node identifies an operation and wherein one of the nodes is a filter node which identifies messages to filter; and interconnecting means for interconnecting nodes from the plurality of nodes such that the interconnected nodes describe a security policy; and an output module, connected to the analysis module, for generating a plurality of output messages, wherein one of the plurality of messages is generated as a function of analysis of the electronic mail message by the analysis module.
Claim 33
Dependent Claim
108 words
An electronic mail filter, comprising: an analysis module for analyzing an electronic mail message, wherein the analysis module includes: node defining means for defining a plurality of nodes, wherein each node identifies an operation and wherein one of the nodes is a filter node which identifies messages to filter; and interconnecting means for interconnecting nodes from the plurality of nodes such that the interconnected nodes describe a security policy; and an output module, connected to the analysis module, for generating a plurality of output messages, wherein one of the plurality of messages is generated as a function of analysis of the electronic mail message by the analysis module.
Claim 34
Dependent Claim
44 words
The electronic mail filter of claim 26, wherein the node defining means includes means for creating a plurality of individual independent filter, modifier and terminal nodes; and wherein the interconnecting means includes means for interconnecting the plurality of individual filter, modifier and terminal nodes.
References Cited (Backward Citations)
US4177510A
Cited
US3956615A
Cited
US4104721A
Cited
US4442484A
Cited
US4648031A
Cited
US4870571A
Cited
US4584639A
Cited
US4661951A
Cited
US4701840A
Cited
US4621321A
Cited
US4713753A
Cited
US4914568A
Cited
US4885789A
Cited
US4914590A
Cited
US5377349A
Cited
US5377354A
Cited
EP0420779A2
Cited
GB2238212A
Cited
US5093914A
Cited
US5204961A
Cited
US5272754A
Cited
US5555346A
Cited
US5305385A
Cited
US5333266A
Cited
US5276735A
Cited
US5311593A
Cited
US5644571A
Cited
US5418951A
Cited
US5586260A
Cited
US5414833A
Cited
EP0653862A1
Cited
US5606668A
Cited
GB2287619A
Cited
US5530758A
Cited
US5416842A
Cited
US5485460A
Cited
US5548646A
Cited
WO1996013113A1
Cited
US5623601A
Cited
US5720035A
Cited
EP0720333A2
Cited
US5619648A
Cited
US5550984A
Cited
US5717913A
Cited
US5634084A
Cited
US5715466A
Cited
WO1996031035A1
Cited
US5699513A
Cited
WO1996035994A1
Cited
EP0743777A2
Cited
US5632011A
Cited
US5706507A
Cited
WO1997013340A1
Cited
US5689566A
Cited
WO1997016911A1
Cited
US5781550A
Cited
WO1997029413A2
Cited
US5684951A
Cited
US5673322A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-06-06 | 2003-12-06 | 2004-06-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-06-06 | 2007-12-06 | 2008-06-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-06-06 | 2011-12-06 | 2012-06-06 | $7700.00 | Window Closed / Lapsed |