Real-time classification of email message traffic
AssigneeReturn Path, Inc.
InventorsBryan P. Dreller, Gregory J. Colburn, George M. Bilbrey
Life of this patent
Estimating the term…
Abstract
A classification system has a classification server that receives data for an email and determines if the email message is suspicious, legitimate but failing authentication, forwarded or fully authenticated and legitimate when the domains are owned, or not owned, by the domain owner, Email messages are categorized and presented in a report that enables the email sender to identify and fix a network, malicious traffic, and legitimate messages that have failed authentication beyond control. It also highlights where everything is going well.
Claims17
A classification system comprising:
- a classification server configured to receive aggregate and message level data for email messages each associated with a domain owned by a domain owner and to determine for each one of the email messages a category selected from suspicious, legitimate but failing authentication, forwarded, or legitimate, when the domain for the one of the email messages is known to be owned by the domain owner.
A method of classification, the method comprising:
- receiving at a classification server, aggregate and message level data for a email messages;
- and
- determining at the classification server, a category for each of the email messages, the categories including that the email message is suspicious, legitimate but failing authentication, forwarded, or legitimate when the domains are owned by the domain owner.
A classification system comprising:
- a classification server configured to receive message data for email messages and to determine if one of the email messages is suspicious;
- and, a phish detection engine configured to determine, for email messages each associated with a domain owner, that are determined to be suspicious, if the email message is from a domain not owned by the domain owner are determined to be phishing.
Dependencies are inferred from the claim text.