Method and system for identifying unsolicited mail utilizing checksums

A method for identifying unsolicited electronic mail messages in a computer network, comprising:

• receiving an electronic mail message;
• removing non-static data including visible end-of-line characters and headers, from the electronic mail message;
• generating a checksum based on data remaining within the electronic mail message;
• comparing the generated checksum with a database containing checksums for previously identified unsolicited messages;
• and
• identifying the electronic message as an unsolicited message if the generated checksum matches one of the database checksums;
• wherein the non-static data is removed to prevent the non-static data from being subject to the checksum, so that non-static data forged by spammers does not compromise the identification of the electronic message as the unsolicited message;
• wherein generating the checksum comprises generated individual checksums for portions of the remaining data;
• wherein comparing the checksum comprises comparing checksums starting with one of the portions at the end of the remaining data and working backwards through the data.

A system for identifying unsolicited electronic mail messages in a computer network, comprising:

• a message modifier operable to remove non-static data including visible end-of-line characters and headers, from an electronic mail message;
• a checksum generator operable to generate a checksum based on data remaining within the electronic mail message;
• a database containing checksums previously identified for unsolicited messages;
• and
• a detector operable to compare the generated checksum with the database and identify the electronic message as an unsolicited message if the generated checksum matches one of the database checksums;
• wherein the non-static data is removed to prevent the non-static data from being subject to the checksum, so that non-static data forged by spammers does not compromise the identification of the electronic message as the unsolicited message;
• wherein the detector is configured to generate individual checksums for portions of the remaining data;
• wherein the detector is configured to compare the generated checksums starting with one of the portions at the end of the data and working backwards through the data.

A computer program product for identifying unsolicited electronic mail messages in a computer network, comprising:

• code that receives an electronic mail message;
• code that removes non-static data including visible end-of-line characters and headers, from the electronic mail message;
• code the generates a checksum based on data remaining within the electronic mail message;
• code that compares the generated checksum with a database containing checksums for previously identified unsolicited messages;
• code that identifies the electronic message as an unsolicited message if the generated checksum matches one of the database checksums;
• code that generates individual checksums for portions of the remaining data;
• code that compares the generated checksums starting with one of the portions at the end of the data and works backward through the data;
• and
• a computer readable medium that stores said computer codes;
• wherein the non-static data is removed to prevent the non-static data from being subject to the checksum, so that non-static data forged by spammers does not compromise the identification of the electronic message as the unsolicited message.