CN1939013A - Junk mail processing device and method thereof - Google Patents

Junk mail processing device and method thereof Download PDF

Info

Publication number
CN1939013A
CN1939013A CNA2004800426899A CN200480042689A CN1939013A CN 1939013 A CN1939013 A CN 1939013A CN A2004800426899 A CNA2004800426899 A CN A2004800426899A CN 200480042689 A CN200480042689 A CN 200480042689A CN 1939013 A CN1939013 A CN 1939013A
Authority
CN
China
Prior art keywords
domain name
mentioned
email
spam
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CNA2004800426899A
Other languages
Chinese (zh)
Inventor
佐佐木优一
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hewlett Packard Development Co LP
Original Assignee
Hewlett Packard Development Co LP
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hewlett Packard Development Co LP filed Critical Hewlett Packard Development Co LP
Publication of CN1939013A publication Critical patent/CN1939013A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/21Monitoring or handling of messages
    • H04L51/212Monitoring or handling of messages using filtering or selective blocking

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Information Transfer Between Computers (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

An electronic mail is transmitted between electronic mail communication systems (2, 10). If an electronic mail having a domain name Yi is received with a frequency higher than a predetermined value, a GW server (24) stores the domain name Yi as a domain name Yi of junk mail. On the other hand, the domain name Yj which is not a non-junk mail is stored according to the user operation. The GW server (24) processes an electronic mail having a domain name which is the domain name Yi of junk mail and not the domain name Yj of non-junk mail, as a junk mail (discarding, delayed transmission, or the like) and immediately transmits an electronic mail other than this as a normal mail via a network (200) to a PC (20).

Description

Junk mail processing device and method thereof
Technical field
The present invention relates to prevent the junk mail processing device and the method thereof of system failure that a large amount of transmissions of spam cause etc.
Background technology
In the network of internet etc., carry out E-mail communication usually, Email also is suitable for as advertising media.
But for example, malicious user may be by alphanumeric combination, do not consider to make whether practically addresses of items of mail, perhaps, on network, obtain not specific a large amount of addresses of items of mail, will be used to send a large amount of Email that the advertisement that do not obtain the other side's permission uses and on network, send together.
The transmission of inappropriate Email so not only brings inconvenience to the user of destination, also becomes the reason of the system failure, hinders general user's smooth communication.
The Email of inappropriate like this and a large amount of transmissions is commonly referred to as spam (spammail).
For example, non-patent literature 1 discloses the general game that Email is carried out with the spam in the gateway server.
On the other hand, because Content of Communication is born confidentiality obligations, therefore, the communication merchant (common carrier) of support common communication can't judge whether to spam and take some countermeasures according to the content of Email.
Relatively, for example, non-patent literature 2 discloses the method for discerning spam according to traffic carrying capacity at regular intervals.
[non-patent literature 1]
http://www.ietf.org/rfc/rfc2505.txt?number=2505
[non-patent literature 2]
http://www.sendmail.com/products/msmgr_flowcontrol.shtml
Summary of the invention
The present invention proposes in view of above-mentioned background, and purpose provides junk mail processing device and the method thereof for preventing that inconvenience that spam causes from improveing.
In order to achieve the above object, junk mail processing device of the present invention possesses: receiving-member receives the Email that comprises the IP address corresponding with the domain name in the source of transmission respectively; Domain name investigation parts are investigated the domain name of IP address correspondence of the Email of above-mentioned reception; The statistical disposition parts, the domain name that the above-mentioned investigation of statistical disposition obtains; The 1st domain name memory unit, storage comprises the Email beyond the above-mentioned spam as transmission source information the 1st domain name; The 2nd domain name memory unit, according to the result of above-mentioned statistical disposition, in the territory that the result as above-mentioned investigation obtains, 2nd domain name corresponding that storage should comprise as transmission source information as the Email that spam is handled with the IP address; The spam processing unit, in the Email of above-mentioned reception, the Email of IP address that will comprise the 2nd domain name correspondence of the above-mentioned storage beyond the 1st domain name of above-mentioned storage is handled as spam.
Preferably, above-mentioned spam processing unit is with the Email beyond the spam of the Email beyond the above-mentioned spam, above-mentioned processing, and the E-mail communication system to the destination sends.
Preferably, above-mentioned statistical disposition parts carry out above-mentioned statistical disposition, obtain the frequency that receives the Email that comprises each domain name that is obtained by above-mentioned investigation, above-mentioned the 2nd domain name memory unit is stored the domain name that comprises with certain above frequency in the Email of above-mentioned reception as above-mentioned the 2nd domain name.
Preferably, above-mentioned spam processing unit is discarded above-mentioned spam or is postponed the E-mail communication system of back to the destination and sends.
In addition, spam processing method of the present invention, receive the Email that comprises the IP address corresponding respectively with the domain name in the source of transmission, investigate the domain name of IP address correspondence of the Email of above-mentioned reception, the domain name that the above-mentioned investigation of statistical disposition obtains, storage comprises the Email beyond the above-mentioned spam as transmission source information the 1st domain name, result according to above-mentioned statistical disposition, in the territory that the result as above-mentioned investigation obtains, 2nd domain name corresponding that storage should comprise as transmission source information as the Email that spam is handled with the IP address, in the Email of above-mentioned reception, the Email of IP address that will comprise the 2nd domain name correspondence of the above-mentioned storage beyond the 1st domain name of above-mentioned storage is handled as spam.
In addition, the program that computer of the present invention is carried out comprises: receiving step receives the Email that comprises the IP address corresponding with the domain name in the source of transmission respectively; Domain name investigation step is investigated the domain name of IP address correspondence of the Email of above-mentioned reception; The statistical disposition step, the domain name that the above-mentioned investigation of statistical disposition obtains; The 1st domain name storing step, storage comprises the Email beyond the above-mentioned spam as transmission source information the 1st domain name; The 2nd domain name storing step, according to the result of above-mentioned statistical disposition, in the territory that the result as above-mentioned investigation obtains, 2nd domain name corresponding that storage should comprise as transmission source information as the Email that spam is handled with the IP address; The spam treatment step, in the Email of above-mentioned reception, the Email of IP address that will comprise the 2nd domain name correspondence of the above-mentioned storage beyond the 1st domain name of above-mentioned storage is handled as spam.
According to the present invention,, provide the junk mail processing device and the method thereof of improvement for the inconvenience that prevents that spam from bringing.
Description of drawings
Fig. 1 is the topology example figure that adopts the communication system of spam processing method of the present invention.
Fig. 2 is the hardware configuration exemplary plot of PC shown in Figure 1 and GW server etc.
Fig. 3 is the pie graph of the spam handling procedure of Fig. 1, GW server shown in Figure 2 execution.
Fig. 4 is the example flow diagram of the processing (S10) of BL management department shown in Figure 3.
Fig. 5 is the flow chart of the processing (S12) of expression spam handling part shown in Figure 3.
Embodiment
Below, embodiments of the invention are described.
[communication system 1]
Fig. 1 is the topology example figure that adopts the communication system 1 of spam processing method of the present invention.
As shown in Figure 1, communication system 1 is by E-mail communication system 2 and the 1st~the n E-mail communication 10-1~10-n of system and the response inquiry from E-mail communication system 2,10-1~10-n, and the domain name system server (dns server) 14 of answering the domain name of the IP address correspondence that inquiry comprised constitutes by connecting communicatedly mutually.
E-mail communication system 2 is connected and constitutes by being used for a plurality of computers (PC) 20-1~20-m (m, n are the integers more than 1) that the user carries out the transmission of Email and reception and gateway (GW) server 24 network 200 via LAN or WAN etc.
The 10-1 of E-mail communication system~10-n adopts the formation (not shown) same with E-mail communication system 2.
Below, the 10-1~10-n of E-mail communication system etc. has a plurality of component parts, slightly is designated as E-mail communication system 10 etc. when not specific expression.
In addition, the component part that communicates in communication system 1 such as dns server 14, PC20, GW server 24 and E-mail communication system 2,10 is generically and collectively referred to as node.
In the communication system 1, carry out E-mail communication 2,10 of E-mail communication systems, in the Email, comprise the spam that sends from 10 pairs of E-mail communication systems of E-mail communication system 2 by these component parts.
In the following description, for specializing of illustrating and make clear, with the spam that the GW server 24 of E-mail communication system 2 is handled from E-mail communication system 10, prevent to take place in the E-mail communication system 2 high traffic and puzzlement user's occasion as concrete example.
[hardware formation]
Fig. 2 is the exemplary plot that the hardware of PC20 shown in Figure 1 and GW server 24 etc. constitutes.
As shown in Figure 2, PC20 and GW server 24 are by constituting with the lower part: CPU120, memory 122 and comprise the processing unit 12 of these component parts; The input/output unit 124 that comprises display unit and keyboard etc.; The tape deck 126 that recording mediums 128 such as HDD and CD device are carried out data record and regeneration; Reach the communicator 132 that communicates via network and other nodes.
That is, PC20 and GW server 24 comprise the component part of the computer that can communicate by letter via network and other nodes.
[domain name and IP address]
In addition, in the illustrative communication system 1 of Fig. 1, the Email of computer (not shown) in E-mail communication system 10 to the transmission of the PC20 in the E-mail communication system 2, comprise " IP1~IPn ", as the IP address (Internet ProtocolAddress) in expression transmission source.
In the E-mail communication system 2, if GW server 24 is IP address ip 1~IPn that 14 inquiries are taken out from the Email from E-mail communication system 10 to dns server, then dns server 14 is transformed into domain name X1.Y1~Xn.Yn with IP address ip 1~IPn, returns the domain name X1.Y1~Xn.Yn that obtains as transformation results to GW server 24.
From dns server 14 in the domain name X1.Y1~Xn.Yn of the E-mail communication system 10 that the GW of E-mail communication system 2 server 24 returns, the part of X1~Xn is in E-mail communication system 10, the IP address ip 1~IPn that dynamically gives the computer (not shown) of send Email according to network side (not shown) changes, the part of Y1~Yn is irrelevant with the IP address that network side is dynamically given computer, is constant.
In addition, in the following description, unless otherwise specified, domain name represents that the part of the constant Y1~Yn in domain name X1.Y1~Xn.Yn is (in the E-mail communication system 2, give PC20 with the IP address ip 0 (X0.Y0) that IP address ip 1~IPn is same, but in the following description not with reference to these.)
[GW server 24 and spam handling procedure 26]
Fig. 3 is the pie graph of the spam handling procedure 26 carried out of Fig. 1, GW server shown in Figure 2 24.
GW server 24, for example, execution is supplied with GW server 24 via recording medium and is loaded into the spam handling procedure 26 (Fig. 3) of memory 122, whether the Email that identification receives from other E-mail communication systems 10 spam, and the Email that is identified as non-spam is sent via the PC20 of network 200 to the destination.
In addition, 24 pairs of the GW servers Email that is identified as spam is discarded or is handled to the spam countermeasure that PC20 sends etc. via network 200 being deferred to few moment of Network.
As shown in Figure 3, spam handling procedure 26 is made of user interface (UI) control part 260, acceptance division 262, domain name investigation and management portion 264, dns database (DB) 266, statistical disposition portion 268, blacklist (BL) management department 270, blacklist (BL) DB272, white list (WL) management department 274, white list (WL) DB276, spam handling part 278, mail DB280 and sending part 282.
In the spam handling procedure 26, UI control part 260 is accepted the operation of the user of GW server 24 to input/output unit 124, and the information of representing user's operation is exported each component part of spam handling procedure 26.
In addition, UI control part 260 is controlled the processing of each component part of spam handling procedure 26 according to the operation of accepting.
In addition, UI control part 260 shows the necessary information of the user of spam handling procedure 26 at input/output unit 124.
It is the Email that the destination is sent here that acceptance division 262 receives with the PC20 in the E-mail communication system 2 from other E-mail communication systems 10, to domain name investigation and management portion 264, statistical disposition portion 268 and 278 outputs of spam handling part.
Domain name investigation and management portion 264 is to the IP address of the E-mail communication system 10 that dns server 14 inquiry comprises as the information in expression transmission source from the Email of acceptance division 262 inputs (IP1~IPn), and the IP address returned of investigation (domain name (X1.Y1~Xn.Yn that IP1~IPn) is corresponding; Fig. 1).
((Y1~Yn) corresponding stored manages in domain name DB266 for IP1~IPn) and the domain name that obtains as investigation result with IP address that Email comprised in domain name investigation and management portion 264.
In addition, domain name investigation and management portion 264 (Y1~Yn) offers the processing in other component parts of spam handling procedure 26 with domain name DB266 stored IP address and domain name.
268 statistical dispositions of statistical disposition portion from the domain name that Email comprised of acceptance division 262 input (Y1~Yn), with the result of statistical disposition to 270 outputs of BL management department.
Statistical disposition portion 268 carries out statistical disposition, and for example, acceptance division 262 is received each domain name that how many times comprises the E-mail communication system 10 in transmission source at regular intervals, and (Email of Y1~Yn) is counted.
Domain name (the Yi (the 2nd domain name) of the E-mail communication system 10 of the computer that is estimated as the transmission source that comprises spam judges according to the statistical disposition result of statistical disposition portion 268 in BL management department 270; In i=1~n and be more than 0), will be stored in BLDB272 as the domain name that judged result obtains and manage.
BL management department 270 for example, is judged as the domain name that Email was comprised that receives with the number of times more than the predetermined threshold value at regular intervals the domain name (Yi) of spam.
BL management department 270 offers the domain name Yi of BLDB272 storage the processing in other component parts of spam handling procedure 26.
Fig. 4 is the example flow diagram of the processing (S10) of BL management department 270 shown in Figure 3.
With reference to Fig. 4, further specify the processing of BL management department 270.
Processing shown in Figure 4 (S10) for example starts at a certain time interval.
In the step 100 (S100), the statistical disposition result that BL management department 270 obtains from the statistical disposition portion 268 (number of each domain name that Email comprised of Jie Shouing at regular intervals; The frequency of domain name) takes out one as judging object.
In the step 102 (S102), BL management SD270 judges that whether the frequency of the domain name that the processing by S100 obtains is more than predetermined threshold value.
The processing that BL management department 270 enters S104 in frequency during more than threshold value, the processing that then enters S106 in addition.
In the step 104 (S104), BL management department 270 stores the frequency that is judged as that comprises in the Email that receives BLDB272 more than the domain name Yi of threshold value into as the domain name of spam and manages.
In the step 106 (S106), the end that judges whether to all statistical disposition results is judged by BL management department 270.
End process when BL management department 270 finishes in the judgement to all statistical disposition results is returned the processing of S100 in addition.
WL management department 274 (Fig. 3) accepts user's operation etc. via UI control part 260, will be estimated as the domain name (Yj (the 1st domain name) of E-mail communication system 10 of the computer in the transmission source that does not comprise spam; J=1~n with interior and greater than 0 (i, j can repeat)), store WLDB276 into and manage.
As domain name (Yj) by WL management department 274 non-spam of storage administration in WLDB276, for example, but the domain name of the E-mail communication system 10 that example is such, in this E-mail communication system 10, acceptance division 262 might be always at regular intervals with the frequency more than the above-mentioned threshold value receive non-spam suitable content Email (is the destination with the PC20 in the E-mail communication system 2).
WL management department 274 offers the domain name Yj that non-spam comprised of WLDB276 storage the processing in other component parts of spam handling procedure 26.
Spam handling part 278 will manage to mail DB280 from the e-mail storage that acceptance division 262 receives.
Spam handling part 278 is handled the Email of mail DB280 storage according to domain name Yi, Yj from BL management department 270 and 274 inputs of WL management department.
That is, spam handling part 278 for example via domain name investigation and management portion 264, is transformed into the domain name in transmission source with the IP address in the transmission source that Email comprised of mail DB280 storage by reference domain name DB266.
Spam handling part 278 will comprise the Email of the domain name Yi domain name in addition of spam as the territory in the source of transmission, export to sending part 282 as the Email of non-spam.
In addition, spam handling part 278, to comprise domain name Yi as spam and be stored in BLDB272 and be stored in the Email of the domain name of WLDB276 as the territory in the source of transmission as the domain name Yj of non-spam, as the Email of non-spam to sending part 282 outputs.
In addition, spam handling part 278 will comprise domain name Yi as spam and be stored in BLDB272 and be not stored in the Email of the domain name of WLDB276 as the territory in the source of transmission as the domain name Yj of non-spam, handle as spam.
Handle as the spam countermeasure that spam handling part 278 carries out, for example following example can be arranged,
(1) acceptance division 262 will comprise the Email of this domain name, all carry out waste treatment no matter whether receive with the number of times more than above-mentioned threshold value at regular intervals;
(2) acceptance division 262 will comprise the Email of this domain name, under the condition that receives with the number of times more than above-mentioned threshold value at regular intervals, carry out waste treatment; Or
(3) Email that will comprise this domain name is deferred in the E-mail communication system 2 professional few moment to the processing of sending part 282 outputs.
Sending part 282 will send via the PC20 of network 200 to the destination from the Email of spam handling part 278 inputs.
Fig. 5 is the flow chart of the processing (S12) of expression spam handling part 278 shown in Figure 3.
With reference to Fig. 5, further specify the processing of spam handling part 278.
Handle as shown in Figure 5, for example when each spam handling part 278 receives Email and stores mail DB280 into, start.
In the step 120 (S120), spam handling part 278 is obtained an Email from mail DB280, as process object.
In the step 122 (S122), spam handling part 278 is judged IP address (IP1~IPn that Email comprised; Fig. 1) whether Dui Ying domain name is stored among the domain name DB266.
Spam handling part 278 is at IP address (IP1~IPn that Email comprised; When Fig. 1) Dui Ying domain name is stored in domain name DB266, obtain this domain name, enter the processing of S126, enter the processing of S124 in the time of in addition via domain name investigation and management portion 264.
In the step 124 (S124), spam handling part 278 makes the investigate IP address that the Email comprised (domain name that IP1~IPn) the is corresponding (X1.Y1~Xn.Yn) of object of domain name investigation and management portion 264.
Spam handling part 278 is obtained the domain name that obtains as investigation result, the processing that enters S126.
In the step 126 (S126), whether the domain name of the Email of spam handling part 278 judgment processing objects is the domain name Yi that is stored in the spam of BLDB272.
Spam handling part 278 enters S128 when the domain name of the Email of process object is the domain name Yi of spam of BLDB272 storage processing, the processing that enters S128 in the time of in addition.
In the step 128 (S128), whether the domain name of the Email of spam handling part 278 judgment processing objects is domain name Yj of the non-spam of WLDB276 storage.
Spam handling part 278 enters S130 when the domain name of the Email of process object is the domain name Yj of non-spam of WLDB276 storage processing, the processing that enters S132 in the time of in addition.
In the step 130 (S130), spam handling part 278 is handled the Email of process object as non-spam, to sending part 282 outputs.
In the step 132 (S132), spam handling part 278 is handled the Email of process object as spam.In the step 134 (S134), whether the Email of spam handling part 278 judgment processing objects is all handled.
End process when spam handling part 278 is all handled at the Email of process object is returned the processing of S120 in the time of in addition.
[all actions of communication system 1]
Below, all actions of communication system 1 are described.
Between E-mail communication system 2,10 (Fig. 1), transmit Email.
For example, with the Email of domain name Yi from other E-mail communication systems 10 when arriving the GW server 24 of E-mail communication system 2 more than certain frequency, the spam handling procedure of carrying out on the GW server 24 26 is with the domain name Yi storage (Fig. 4) of this domain name Yi as spam.
On the other hand, the domain name Yj of non-spam is accepted and stored to spam handling procedure 26.
Spam handling procedure 26 is in the Email from other E-mail communication systems 10, and the domain name that will comprise is the domain name Yi of registered spam but not as the Email of the domain name Yj of non-spam registration, handles as spam.
On the other hand, spam handling procedure 26 is in the Email from other E-mail communication systems 10, the domain name that will comprise is the domain name Yi of registered spam and as the Email of the domain name Yj of non-spam registration, and, the Email that does not comprise the domain name Yi of registered spam sends (Fig. 5) via network 200 to PC20 as common Email.
As mentioned above, according to spam processing method of the present invention, for being the Email of destination, according to the IP address (IP1~IPn that comprises as expression transmission source (computer in the E-mail communication system 10) information with the PC20 in the E-mail communication system 2; ) corresponding domain name (constant part (Y1~Yn), can carry out the processing of suitable and accurate spam countermeasure in the X1.Y1~Xn.Yn).
In addition,, in GW server 24, can suitably handle spam, therefore, can alleviate the user's of E-mail communication system burden, provide comfortable communication environment to the user according to spam processing method of the present invention.
In addition, adopt in the communication system 1 of the method that spam of the present invention handles, even in the domain name X1.Y1~Xn.Yn of the E-mail communication system 10 that dns server 14 returns by DHCP (Dynamic Host Configuration Protocol: DHCP) give the occasion of dynamic IP addressing, because GW server 24 adopts constant Y1~Yn partly to come the disposal of refuse mail, therefore, come the communication system of the conventional method of disposal of refuse mail to compare with employing by the blacklist that comprises IP address or addresses of items of mail, can more effectively prevent the inconvenience that spam brings.
Utilize possibility on the industry
The present invention can be used for spam is carried out in the system that carries out E-mail communication Suitable countermeasure.

Claims (9)

1. junk mail processing device possesses:
Receiving-member receives the Email that comprises the IP address corresponding with the domain name in the source of transmission respectively;
Domain name investigation parts are investigated the domain name of IP address correspondence of the Email of above-mentioned reception;
The statistical disposition parts, the domain name that the above-mentioned investigation of statistical disposition obtains;
The 1st domain name memory unit, storage comprises the Email beyond the above-mentioned spam as transmission source information the 1st domain name;
The 2nd domain name memory unit, according to the result of above-mentioned statistical disposition, in the territory that the result as above-mentioned investigation obtains, 2nd domain name corresponding that storage should comprise as transmission source information as the Email that spam is handled with the IP address;
The spam processing unit, in the Email of above-mentioned reception, the Email of IP address that will comprise the 2nd domain name correspondence of the above-mentioned storage beyond the 1st domain name of above-mentioned storage is handled as spam.
2. 1 described junk mail processing device of claim the is characterized in that,
Above-mentioned spam processing unit is with the Email beyond the spam of the Email beyond the above-mentioned spam, above-mentioned processing, and the E-mail communication system to the destination sends.
3. 1 described junk mail processing device of claim the is characterized in that,
Above-mentioned statistical disposition parts carry out above-mentioned statistical disposition, obtain the frequency that receives the Email that comprises each domain name that is obtained by above-mentioned investigation,
Above-mentioned the 2nd domain name memory unit is stored the domain name that comprises with certain above frequency in the Email of above-mentioned reception as above-mentioned the 2nd domain name.
4. 1 described junk mail processing device of claim the is characterized in that,
Above-mentioned spam processing unit is discarded above-mentioned spam or is postponed the E-mail communication system of back to the destination and sends.
5. spam processing method,
Receive the Email that comprises the IP address corresponding respectively with the domain name in the source of transmission,
Investigate the domain name of IP address correspondence of the Email of above-mentioned reception, the domain name that the above-mentioned investigation of statistical disposition obtains,
Storage comprises the Email beyond the above-mentioned spam as transmission source information the 1st domain name,
According to the result of above-mentioned statistical disposition, in the territory that the result as above-mentioned investigation obtains, 2nd domain name corresponding that storage should comprise as transmission source information as the Email that spam is handled with the IP address,
In the Email of above-mentioned reception, the Email of IP address that will comprise the 2nd domain name correspondence of the above-mentioned storage beyond the 1st domain name of above-mentioned storage is handled as spam.
6. the program carried out of a computer comprises:
Receiving step receives the Email that comprises the IP address corresponding with the domain name in the source of transmission respectively;
Domain name investigation step is investigated the domain name of IP address correspondence of the Email of above-mentioned reception;
The statistical disposition step, the domain name that the above-mentioned investigation of statistical disposition obtains;
The 1st domain name storing step, storage comprises the Email beyond the above-mentioned spam as transmission source information the 1st domain name;
The 2nd domain name storing step, according to the result of above-mentioned statistical disposition, in the territory that the result as above-mentioned investigation obtains, 2nd domain name corresponding that storage should comprise as transmission source information as the Email that spam is handled with the IP address;
The spam treatment step, in the Email of above-mentioned reception, the Email of IP address that will comprise the 2nd domain name correspondence of the above-mentioned storage beyond the 1st domain name of above-mentioned storage is handled as spam.
7. 6 described programs of claim the is characterized in that,
Above-mentioned spam treatment step sends the E-mail communication system of the Email beyond the spam of the Email beyond the above-mentioned spam, above-mentioned processing to the destination.
8. 6 described programs of claim the is characterized in that,
Above-mentioned statistical disposition step is carried out above-mentioned statistical disposition, obtains the frequency that receives the Email that comprises each domain name that is obtained by above-mentioned investigation,
Above-mentioned the 2nd domain name storing step is stored the domain name that comprises with certain above frequency in the Email of above-mentioned reception as above-mentioned the 2nd domain name.
9. 6 described programs of claim the is characterized in that,
Above-mentioned spam treatment step is discarded above-mentioned spam or is postponed the E-mail communication system of back to the destination and sends.
CNA2004800426899A 2004-04-05 2004-04-05 Junk mail processing device and method thereof Pending CN1939013A (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2004/004923 WO2005101770A1 (en) 2004-04-05 2004-04-05 Junk mail processing device and method thereof

Publications (1)

Publication Number Publication Date
CN1939013A true CN1939013A (en) 2007-03-28

Family

ID=35150339

Family Applications (1)

Application Number Title Priority Date Filing Date
CNA2004800426899A Pending CN1939013A (en) 2004-04-05 2004-04-05 Junk mail processing device and method thereof

Country Status (3)

Country Link
JP (1) JPWO2005101770A1 (en)
CN (1) CN1939013A (en)
WO (1) WO2005101770A1 (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103125103A (en) * 2010-09-28 2013-05-29 英派尔科技开发有限公司 Data filtering for communication devices
CN101682672B (en) * 2007-05-25 2016-08-03 阿尔卡特朗讯公司 With the caller identities detection spam/telemarketing phone campaigns of simulation in UNE
CN109495372A (en) * 2017-09-11 2019-03-19 北京二六三企业通信有限公司 The recognition methods of spam and device
CN110417643A (en) * 2019-07-29 2019-11-05 世纪龙信息网络有限责任公司 Email processing method and device

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8239874B2 (en) 2007-09-28 2012-08-07 Microsoft Corporation Inbox with focused messages according to categories
US8380793B2 (en) * 2008-09-05 2013-02-19 Microsoft Corporation Automatic non-junk message list inclusion
CN102255922A (en) * 2011-08-24 2011-11-23 山东师范大学 Intelligent multilevel junk email filtering method
JP6053421B2 (en) * 2012-09-21 2016-12-27 Kddi株式会社 Spam mail detection device, method and program

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH0818582A (en) * 1994-06-30 1996-01-19 Toshiba Corp Network repeater and network system using it
US6732149B1 (en) * 1999-04-09 2004-05-04 International Business Machines Corporation System and method for hindering undesired transmission or receipt of electronic messages
JP2002244979A (en) * 2001-02-20 2002-08-30 Nec Corp Electronic mail system
JP3719173B2 (en) * 2001-08-03 2005-11-24 日本電気株式会社 Mail server, e-mail transfer system, transfer method and program

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101682672B (en) * 2007-05-25 2016-08-03 阿尔卡特朗讯公司 With the caller identities detection spam/telemarketing phone campaigns of simulation in UNE
CN103125103A (en) * 2010-09-28 2013-05-29 英派尔科技开发有限公司 Data filtering for communication devices
CN103125103B (en) * 2010-09-28 2016-04-13 英派尔科技开发有限公司 For the data filtering of communicator
CN109495372A (en) * 2017-09-11 2019-03-19 北京二六三企业通信有限公司 The recognition methods of spam and device
CN109495372B (en) * 2017-09-11 2021-12-07 北京二六三企业通信有限公司 Junk mail identification method and device
CN110417643A (en) * 2019-07-29 2019-11-05 世纪龙信息网络有限责任公司 Email processing method and device
CN110417643B (en) * 2019-07-29 2021-10-08 世纪龙信息网络有限责任公司 Mail processing method and device

Also Published As

Publication number Publication date
JPWO2005101770A1 (en) 2008-03-06
WO2005101770A1 (en) 2005-10-27

Similar Documents

Publication Publication Date Title
US8725889B2 (en) E-mail management services
US7529802B2 (en) Method for performing multiple hierarchically tests to verify identity of sender of an email message and assigning the highest confidence value
US7603472B2 (en) Zero-minute virus and spam detection
US7774420B2 (en) Managing on-demand email storage
US20060004896A1 (en) Managing unwanted/unsolicited e-mail protection using sender identity
US20040019695A1 (en) Messaging system and method using alternative message delivery paths
US20020107925A1 (en) Method and system for e-mail management
US20090307320A1 (en) Electronic mail processing unit including silverlist filtering
US7447744B2 (en) Challenge response messaging solution
US20060265459A1 (en) Systems and methods for managing the transmission of synchronous electronic messages
KR101238527B1 (en) Reducing unwanted and unsolicited electronic messages
CN1939013A (en) Junk mail processing device and method thereof
JPH11252158A (en) Electronic mail information management method and device and storage medium recording electronic mail information management processing program
CN108123955A (en) Management method, device, equipment and the machine readable storage medium of safe list item
US20060195537A1 (en) Systems and methods for managing directory harvest attacks via electronic messages
JPH11191083A (en) Electronic mail delivery method and mail server
JP2002091874A (en) Proxy electronic mail processor and program storage medium
KR20070001217A (en) Junk mail processing device and method thereof
US20030212748A1 (en) Mail-incoming rejection system, mail-incoming rejection method, and mail-incoming rejection program
JP2001175557A (en) Electronic mail system, transfer method for electronic mail, and recording medium
Pathak et al. The case for spam-aware high performance mail server architecture
JP2003303159A (en) Information processor, message processing method, and program
JP4403108B2 (en) Mail server, mail delivery control method, mail delivery control program
JP2005236845A (en) Electronic mail substitution apparatus and program
JP2005332276A (en) Server system for tracking communication among network terminals

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication