US6507866B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
E-mail usage pattern detection
Assignee: RPX Corp
•
Filing: 1999-07-19
•
Granted: 2003-01-14
•
Expires: 2019-07-19
Abstract
Abstract A method and apparatus for identifying undesired e-mail messages by receiving e-mail messages, storing fields from the headers of the received e-mail messages and analyzing the stored fields for patterns indicative of undesired e-mail messages. The pattern recognition performed includes counting the number of e-mails received which have the same or similar field content within the headers. This number can be compared to an absolute threshold number, or to the total number of messages in a sample of e-mail messages. The sample may be composed of a predetermined number of received e-mail messages, or may include e-mail messages received during a predetermined time interval. Exceeding thresholds or certain ratios will trigger alarms to alert monitoring functions and update lists of known sources and types of undesired e-mail messages for filtering.
Inventors
- 👤 Ronald S. Barchi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 22:41
CPC Classifications
G; G06; G06Q; G06Q10/00; G06Q10/10; G06Q10/107; H; H04; H04L; H04L51/00; H04L51/21; H04L51/212; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
109 words
A method for detecting undesired e-mail usage, the method comprising: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 2
Independent Claim
109 words
A method for detecting undesired e-mail usage, the method comprising: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 3
Independent Claim
115 words
A method for detecting undesired e-mail usage, the method comprising: receiving, during a predetermined time interval, a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 4
Independent Claim
115 words
A method for detecting undesired e-mail usage, the method comprising: receiving, during a predetermined time interval, a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 5
Independent Claim
113 words
A method for detecting undesired e-mail usage, the method comprising: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a predetermined number of e-mail messages from the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 6
Independent Claim
113 words
A method for detecting undesired e-mail usage, the method comprising: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a predetermined number of e-mail messages from the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 7
Independent Claim
119 words
A method for detecting undesired e-mail usage, the method comprising: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including, for each e-mail message from a subset of the plurality of e-mail messages, at least one field from either the 821 header or the 822 header of that e-mail message; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 8
Independent Claim
119 words
A method for detecting undesired e-mail usage, the method comprising: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including, for each e-mail message from a subset of the plurality of e-mail messages, at least one field from either the 821 header or the 822 header of that e-mail message; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein said analyzing includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 9
Independent Claim
137 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 10
Independent Claim
137 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 11
Independent Claim
142 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving, during a predetermined time interval, a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 12
Independent Claim
142 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving, during a predetermined time interval, a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a subset of the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 13
Independent Claim
141 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a predetermined number of e-mail messages from the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 14
Independent Claim
141 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including at least one field from the header of each e-mail message from a predetermined number of e-mail messages from the plurality of e-mail messages; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 15
Independent Claim
147 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including, for each e-mail message from a subset of the plurality of e-mail messages at least one field from either the 821 header or the 822 header of that e-mail message; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
Claim 16
Independent Claim
147 words
An apparatus for detecting undesired e-mail usage, the apparatus comprising: (a) a processor; (b) a memory, coupled to said processor, said memory storing instructions adapted to be executed by said processor, the instructions including: receiving a plurality of e-mail messages; storing a plurality of fields, the fields including, for each e-mail message from a subset of the plurality of e-mail messages at least one field from either the 821 header or the 822 header of that e-mail message; and analyzing the stored plurality of fields for at least one pattern, the at least one pattern indicating undesired e-mail usage, wherein the analyzing instruction in said memory includes counting the number of fields in a subset of the stored plurality of fields, each field in the subset either being correlated with any other field in the subset, containing an identical entry, or containing at least one identical string.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-01-13 | 2006-07-15 | 2007-01-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-01-13 | 2010-07-15 | 2011-01-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-01-13 | 2014-07-15 | 2015-01-14 | $7700.00 | Window Closed / Lapsed |