# US 7,613,923 B2 · Method and apparatus for controlling unsolicited messaging in real time messaging networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,613,923 B2 - Document ID: US7613923B2 - Status: Granted - Kind: B2 - Application number: 11/066,660 - Filed: 2005-02-25 - Published: 2005-09-15 - Granted: 2009-11-03 - Earliest claimed: 2004-02-25 - Assignees: WatchGuard Technologies, Inc. - Inventors: Rod Gilchrist; Richard Fogel; John Alsop - Web page: https://patentgrep.com/patent/US7613923B2 ## CPC - H04M 3/436: Arrangements for screening incoming calls {, i.e. evaluating the characteristics of a call before deciding whether to answer it (based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54)} - H04L 51/212: using filtering or selective blocking - H04L 65/1079: {of unsolicited session attempts, e.g. SPIT} - H04L 12/1818: {Conference organisation arrangements, e.g. handling schedules, setting up parameters needed by nodes to attend a conference, booking network resources, notifying involved parties} - H04L 51/04: Real-time or near real-time messaging, e.g. instant messaging [IM] - H04L 51/48: Message addressing, e.g. address format or anonymous messages, aliases - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A Voice over IP (VoIP) or Real Time Messaging (RTM) firewall device is claimed that protects VoIP or RTM network traffic by identifying and controlling the delivery of such network traffic that is unsolicited and undesired by the recipient (i.e. VoIP or RTM spam). The system involves applying a unique marking to RTM messages close to a point of message origination and then at a point close to message termination for the intended recipient examining a reputation store for information on the unique marking and using that information in conjunction with a set of policy rules to decide whether to pass, reject, pass on to an RTM store or otherwise filter the RTM message. The unique marking serves to identify a source characteristic of the message such as the message originator, a corporate affiliation for the originator, or a RTM network characteristic of the originator such as a transmission gateway. ## Claims ### Claim 1 A method for controlling unsolicited messaging in a real time messaging (RTM) network, the method comprising: receiving a call initiation request from a first terminal device coupled to the RTM network; marking the call initiation request on behalf of the first terminal device to identify an origination characteristic of the initiation request, generating a marked call initiation request; transmitting the marked call initiation request on the RTM network for delivery to one or more second terminal devices coupled to the RTM network; verifying the marked call initiation request on behalf of at least one of the second terminal devices to determine the origination characteristics of the marked call initiation request; determining a delivery action in response to the verifying; delivering the marked call initiation request in accordance with the delivery action; and determining a reputation associated with the call initiation request in response to the origination characteristic and wherein the determining a delivery action is responsive to the reputation. ### Claim 2 (depends on 1) The method of claim 1, wherein the marking comprises applying a digital signature to the call initiation request. ### Claim 3 (depends on 2) The method of claim 2, wherein the applying a digital signature to the call initiation request comprises: creating a message digest of the call initiation request; applying a private key of a public/private key pair to the message digest to generate the digital signature; and providing a public key of the public/private key pair for verifying the digital signature. ### Claim 4 (depends on 1) The method of claim 1, wherein the marking comprises applying an originating internet protocol (IP) address to the call initiation request or portions of the call initiation request. ### Claim 5 (depends on 4) The method of claim 4, where a set of legitimate originating IP addresses are provided via a publicly available IP address store. ### Claim 6 (depends on 1) The method of claim 1, wherein the marking comprises encrypting the call initiation request. ### Claim 7 (depends on 6) The method of claim 6, wherein the encrypting the call initiation request comprises: applying a private key of a public/private key pair to the call initiation request to encrypt the call initiation request for transmitting; and providing a public key of the public/private key pair for decrypting and verifying the call initiation request. ### Claim 8 (depends on 7) The method of claim 7, wherein the providing a public key comprises providing the public key to a public key store for electronic retrieval. ### Claim 9 (depends on 1) The method of claim 1, wherein the origination characteristic identifies at least one of an entity associated with the call initiation requests, a message originator originating the call initiation requests, and an affiliation of the message originator. ### Claim 10 (depends on 1) The method of claim 1, wherein the RTM network is configured to provide at least one of voice over internet protocol (VOIP) services, instant messaging (IM) services, and video conferencing services. ### Claim 11 (depends on 1) The method of claim 1, wherein the determining a respective reputation comprises retrieving the reputation from one or more stores of reputation information in response to the origination characteristic. ### Claim 12 (depends on 1) The method of claim 1, wherein the determining a delivery action comprises applying a policy in response to the reputation, the policy defining rules for directing a delivery of the call initiation request. ### Claim 13 (depends on 1) The method of claim 1, wherein the delivery action comprises at least one of completing the delivery of the call initiation request, rejecting the delivery of the call initiation request, and filtering the call initiation request. ### Claim 14 (depends on 13) The method of claim 13, wherein the filtering the call initiation request comprises at least one of interacting with the first terminal device of the call initiation request and taking a message from the first terminal device. ### Claim 15 A method for controlling unsolicited messaging in a real time messaging (RTM) network, the method comprising: verifying an origination of a call initiation request on behalf of a first terminal device, the verifying being performed at least in part using marks included in the call initiation request that identifies an origination characteristic of the call initiation request; determining a delivery action in response to the verifying, wherein the determining includes determining a reputation associated with the origination and wherein the determining a delivery action is responsive to the reputation; and delivering the call initiation requests in accordance with the delivery action. ### Claim 16 (depends on 15) The method of claim 15, wherein the verifying is performed at least in part by verifying a digital signature associated with at least a portion of the call initiation request. ### Claim 17 (depends on 15) The method of claim 15, wherein the verifying is performed at least in part by verifying an originating internet protocol (IP) address. ### Claim 18 (depends on 15) The method of claim 15, wherein the verifying is performed at least in part by verifying an encrypted call initiation request or encrypted portion thereof. ### Claim 19 (depends on 15) The method of claim 15, wherein the origination identifies at least one of an entity associated with the marking of the call initiation requests, a message originator originating the call initiation requests, and an affiliation of the message originator. ### Claim 20 (depends on 15) The method of claim 15, wherein the verifying comprises using a public key to validate a digital signature. ### Claim 21 (depends on 15) The method of claim 15, wherein the determining a reputation comprises retrieving the reputation from one or more stores of reputation information associated with the origination or marking of the call initiation. ### Claim 22 (depends on 15) The method of claim 15, wherein the determining a reputation comprises retrieving the reputation from one or more stores of reputation information associated with the call initiation request. ### Claim 23 (depends on 15) The method of claim 15, wherein the determining a delivery action comprises applying a policy in response to the reputation, the policy defining rules for directing a delivery of the call initiation request. ### Claim 24 (depends on 15) The method of claim 15, wherein the delivery action comprises at least one of completing the delivery of the call initiation request, rejecting the delivery of the call initiation request, and filtering the call initiation request. ### Claim 25 (depends on 24) The method of claim 24, wherein the filtering the call initiation request comprises at least one of interacting with a second terminal device associated with the call initiation request; and taking a message from the second terminal device, wherein the second terminal device is associated with the origination of the call initiation request. ### Claim 26 (depends on 15) The method of claim 15, wherein the RTM network is configured to provide at least one of voice over internet protocol (VOIP) services, instant messaging (IM) services, and video conferencing services. ### Claim 27 A system for controlling unsolicited messaging in a real time messaging (RTM) network, the system comprising: a signing gateway communicatively coupled to one or more message originators and to the RTM network, the signing gateway being configured to receive a call initiation request from a first message originator, mark the call initiation request to generate a signed call initiation request, and relay the signed call initiation request to the RTM network on behalf the first message originator, the signed call initiation request identifying an origination characteristic of the call initiation request; a verifying gateway communicatively coupled to the RTM network and one or more message recipients, the verifying gateway being configured to receive the signed call initiation request, verify the signed call initiation request on behalf of at least one message recipient to determine the origination characteristic, and determine a delivery action to selectively deliver the signed call initiation request in response to the origination characteristic; and one or more reputation information stores communicatively coupled to the verifying gateway, the reputation information stores comprising reputation information for at least some of the message originators, wherein the verifying gateway is configured to determine a reputation for the message originator associated with the signed call initiation request and to selectively deliver the signed call initiation request in response to the reputation. ### Claim 28 (depends on 27) The system of claim 27, wherein the signing gateway marks the call initiation requests with at least one of a digital signature, an originating internet protocol (IP) address, or by encrypting a call initiation request. ### Claim 29 (depends on 27) The system of claim 27, further comprising a public key store communicatively coupled to the signing gateway and verifying gateway, the public key store providing a public key of a private/public key pair to the verifying gateway, and wherein the signing gateway is configured to mark the call initiation request by applying a private key of the private/public key pair and the verifying gateway is configured to verify the signed call initiation request by applying the public key. ### Claim 30 (depends on 27) The system of claim 27, wherein the delivery action comprises at least one of completing the delivery of the call initiation request, rejecting the delivery of the call initiation request, and filtering the call initiation request. ### Claim 31 (depends on 27) The system of claim 27, wherein the RTM network is configured to provide at least one of voice over internet protocol (VOIP) services, instant messaging (IM) services, and video conferencing services.