Email Spam Detection via Delivery Path Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current whitelisting techniques for spam detection are ineffective against spammers who forge 'From:' addresses, as they often use fake return addresses to bypass filters, leading to a need for a method to verify the authenticity of email delivery paths.
Innovation Solution
A spam detector that extracts and compares delivery path information from email packets with trusted path data, developed by sending test messages and recording delivery paths, to determine the likelihood of forgery and authenticate the source.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If whitelisting techniques are used for spam detection, then emails from known contacts are allowed through, but spammers can forge From: addresses to bypass the filter
Solution Approach 1:
The patent transitions from verifying only the email address (one dimension) to verifying both the email address and the delivery path (adding another dimension). By checking multiple dimensions of authenticity, the system becomes more resistant to forgery while maintaining reliability.
Solution Approach 2:
The patent introduces delivery path information as an intermediary element to verify email authenticity. Instead of directly trusting the From: address, the system uses the delivery path as a mediator to indirectly verify the email's origin, making it harder for spammers to bypass filters.
2Reliability
If delivery path verification is implemented, then forged emails are identified, but system complexity increases
Solution Approach 1:
The patent performs preliminary actions by collecting and storing delivery path information for trusted senders in advance. This pre-collected data is then used during email verification, reducing the need for complex real-time analysis and simplifying the verification process.
Solution Approach 2:
The patent creates a copy of the expected delivery path from trusted senders and compares it with the actual delivery path. This copying approach simplifies verification by using straightforward string comparison rather than complex authentication protocols.
Data Source
AI summary
A spam detector for determining likelihood of forgery of a source in an email addressed to a destination is provided, comprising extraction means for extracting delivery path information from one or more packets in the packet flow of the email, and comparison means for comparing the extracted delivery path information with trusted delivery path information from the source to the destination.