Email Classification via DNS Validation and Computational Puzzles
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic mail classification techniques are ineffective in distinguishing between legitimate and unwanted messages due to spoofing of domain names and network addresses, leading to incorrect classification and increased burden of unwanted emails.
Innovation Solution
Implementing a system that alters connection establishment data to validate network addresses, uses authorized outgoing server lists, and verifies computational puzzles to ensure the authenticity of electronic messages, thereby reducing the likelihood of forged network addresses and domain spoofing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If conventional electronic mail classification techniques are used, then the system is simple to operate, but the classification accuracy deteriorates due to domain spoofing and network address forgery
Solution Approach 1:
The system performs preliminary validation of network addresses and domain names before classifying electronic messages. By checking whether the network address corresponds to the domain name using DNS queries and connection establishment validation, the system prevents spoofed messages from being misclassified, thereby improving classification accuracy without requiring complex post-processing filters
Solution Approach 2:
The system introduces an intermediary validation mechanism that acts as a bridge between the message classification process and the network infrastructure. This intermediary layer verifies the authenticity of sending addresses through DNS lookups and connection establishment checks, providing reliable authentication information to the classification module without significantly increasing overall system complexity
2Reliability
If connection establishment data is altered to include validation, then network address authenticity is improved, but the connection establishment process becomes more complex
Solution Approach 1:
The system performs DNS queries and address validation before finalizing the connection establishment. By pre-validating whether the network address corresponds to the domain name in the electronic message, the system ensures authenticity without requiring complex real-time verification during the connection handshake, thus maintaining relatively simple connection establishment procedures
Solution Approach 2:
The system uses feedback from DNS queries and connection establishment responses to validate network addresses. By checking whether the resolved address matches the expected address from domain name lookup, the system provides a simple feedback mechanism that confirms authenticity without adding complex validation logic to the connection establishment process
3Reliability
If authorized outgoing server lists are maintained, then domain spoofing prevention is improved, but the system complexity and maintenance burden increase
Solution Approach 1:
The system automatically queries DNS servers to obtain authorized outgoing server information and maintains local cached lists. By performing self-service updates through standard DNS queries rather than requiring manual configuration or external updates, the system improves domain spoofing prevention while minimizing maintenance burden, as the authorized lists are automatically refreshed through normal DNS resolution processes
Solution Approach 2:
The system uses the existing DNS infrastructure for multiple purposes: both for resolving domain names to network addresses and for obtaining authorized outgoing server lists. By making the DNS system serve dual functions, the system improves domain spoofing prevention without adding separate maintenance mechanisms, as the same DNS queries that enable communication also provide authentication information
4Measurement precision
If computational puzzles are verified, then message authenticity is improved, but the processing time and computational resources increase
Solution Approach 1:
The system performs computational puzzle verification only for messages that fail initial classification or exhibit suspicious characteristics. By applying the computationally intensive verification selectively rather than to all messages, the system improves authenticity verification for problematic messages while minimizing the overall processing time impact on legitimate email traffic
Solution Approach 2:
The system applies different verification levels to different messages based on their characteristics. Messages from known authorized servers undergo minimal verification, while messages with suspicious features trigger full computational puzzle verification. This localized quality approach ensures high authenticity verification where needed while maintaining fast processing for routine messages
Data Source
AI summary
The present invention provides for generating inputs that can be provided to a message classification module to facilitate more reliable classification of electronic messages, such as, for example, as unwanted and/or unsolicited. In one embodiment, a sending messaging server provides an appropriate response to address verification data thereby indicating a reduced likelihood of the sending messaging server using a forged network address. In another embodiment, it is determined if a messaging server is authorized to send electronic messages for a domain. In yet another embodiment, electronic message transmission policies adhered to by a domain are identified. In yet a further embodiment, a sending computer system expends computational resources to solve a computational puzzle and includes an answer document in an electronic message. A receiving computer system receives the electronic message and verifies the answer document.