Automated spam filter updating by tracking user navigation

Patent metadata

Field	Value
Publication number	US-2016072747-A1
Application number	US-201414476874-A
Country	US
Kind code	A1
Filing date	Sep 4, 2014
Priority date	Sep 4, 2014
Publication date	Mar 10, 2016
Grant date	—

Abstract

An email filter updating system includes a tracking component, and a logic component. The tracking component is provided to track user navigation. This tracking compiles information about websites the user has visited and presumably may “trust” in the event an email associated with one such site or application is later received by the user's email application. The logic component uses information and a set of configurable rule-based criteria to output a characterization that a particular email message has been initiated from a site that the user has visited or should otherwise trust. The characterization is then provided to the email filter to control whether in-bound email is passed to the user's email client inbox. Further, the logic component is operative to generate filter update commands that update the email filter in an automated manner, i.e., without user input.

First claim

1 - 7 . (canceled)

8 . An apparatus, comprising:
a processor; computer memory holding computer program instructions that when executed by the processor to manage an email filter associated with a client computing machine, the computer program instructions comprising:
program code to collect information as a user navigates to and interacts with external websites;
program code to apply one or more rule-based criteria to the collected information to determine a characterization to be applied to an initiator of an email message; and
program code to provide the characterization to the email filter to facilitate an email filter operation with respect to the email message.

9 . The apparatus as described in claim 8 wherein the computer program instructions further include program code to provide at least one filter update command to instruct the email filter to automatically transfer at least one entry from a blacklist to a whitelist, the filter update command based on the characterization.

10 . The apparatus as described in claim 8 wherein the information compiled includes one of: the user's web browsing history, a list of IP addresses visited by one or more applications executing in the client computing machine, a list of DNS domains and sub-domains visited, and cookie data.

11 . The apparatus as described in claim 8 wherein the one or more rule-based criteria includes one of: time, recency, a user-initiated activity, a frequency of user visits, website categorization information, any prior update to a filter list characterization, and any other information to determine that the initiator of the email message is a trusted site.

12 . The apparatus as described in claim 8 wherein the computer program instructions further include program code to provide a replica of the compiled information to a server to facilitate server-side email filtering.

13 . The apparatus as described in claim 8 wherein the computer program instructions further include program code to receive data that defines the one or more rule-based criteria to be applied to the compiled information.

14 . The apparatus as described in claim 8 wherein the rule-based criteria requires that the email message be received from an IP address accessed by the user and within a given threshold time following an activity initiated by the user.

15 . A computer program product in a non-transitory computer readable storage medium for use in a data processing system, the computer program product holding computer program instructions which, when executed by the data processing system, manage an email filter associated with a client computing machine, the computer program instructions comprising:
program code to collect information as a user navigates to and interacts with external websites; program code to apply one or more rule-based criteria to the collected information to determine a characterization to be applied to an initiator of an email message; and program code to provide the characterization to the email filter to facilitate an email filter operation with respect to the email message.

16 . The computer program product as described in claim 15 wherein the computer program instructions further include program code to provide at least one filter update command to instruct the email filter to automatically transfer at least one entry from a blacklist to a whitelist, the filter update command based on the characterization.

17 . The computer program product as described in claim 15 wherein the information compiled includes one of: the user's web browsing history, a list of IP addresses visited by one or more applications executing in the client computing machine, a list of DNS domains and sub-domains visited, and cookie data.

18 . The computer program product as described in claim 15 wherein the one or more rule-based criteria includes one of: time, recency, a user-initiated activity, a frequency of user visits, website categorization information, any prior update to a filter list characterization, and any other information to determine that the initiator of the email message is a trusted site.

19 . The computer program product as described in claim 15 wherein the computer program instructions further include program code to provide a replica of the compiled information to a server to facilitate server-side email filtering.

20 . The computer program product as described in claim 15 wherein the rule-based criteria requires that the email message be received from an IP address accessed by the user and within a given threshold time following an activity initiated by the user.

Assignees

• IBM

Inventors

• Lu Fang
• Mcgloin Mark
• Clifford Emmet R
• Clifford Stuart J
• Quinn William M

Classifications

• H04L67/22

  Electricity · mapped topic

• H04L51/12 Primary

  Electricity · mapped topic

• H04L51/48

  Message addressing, e.g. address format or anonymous messages, aliases · CPC title

• H04L51/046

  Interoperability with other network applications or services · CPC title

• H04L51/212 Primary

  using filtering or selective blocking · CPC title