Real-time Message Clustering for Spam Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for detecting unwanted message flooding, such as spam and rumors, in messaging networks are inadequate as they rely on snapshot data analysis and fail to effectively identify clusters over time, leading to delayed detection and corrective actions.

Innovation Solution

The application of unsupervised clustering algorithms like DBSCAN on real-time big data streams, combined with graph processing algorithms, to analyze clusters of messages and identify loops, enabling real-time detection and visualization of spam, and implementation of automated actions to block senders and content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If snapshot data analysis is used for spam detection, then the detection method is simple and fast, but it fails to identify clusters that spread over time and results in delayed detection

Engineering Contradiction:
Improvedetection delayVSAvoidcluster identification accuracy
Core Design Contradiction:
Loss of timeVSMeasurement precision

Solution Approach 1:

The patent transitions from static snapshot analysis to dynamic streaming analysis. The system continuously processes message data streams in real-time, updating cluster assignments as new messages arrive. This dynamic approach allows the system to detect clusters that evolve over time, resolving the contradiction between detection speed and accuracy by maintaining continuous awareness of message patterns without requiring periodic snapshots.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent implements continuous clustering analysis on streaming data rather than periodic snapshot analysis. The DBSCAN clustering algorithm operates continuously on incoming message streams, maintaining cluster structures and updating assignments in real-time. This continuous operation ensures that clusters spreading over time are detected as they form, eliminating detection delays while maintaining analytical precision.

Inventive Principle:
Principle #20Continuity of useful action

2Measurement precision

If real-time streaming clustering is implemented, then detection accuracy and real-time identification are improved, but computational complexity and processing requirements increase

Engineering Contradiction:
Improvecluster identification accuracyVSAvoidprocessing system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the continuous streaming data into manageable time-based batches or windows for processing. By dividing the stream into discrete segments, the system can apply clustering algorithms to smaller, more manageable data portions while maintaining real-time detection capabilities. This segmentation reduces the computational burden on any single processing step while preserving the ability to detect time-evolving clusters.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies partial clustering by focusing computational resources on identifying and maintaining only the most relevant clusters that meet certain criteria (e.g., minimum size, growth rate thresholds). Rather than clustering all possible message combinations, the system performs partial analysis on subsets of data that are most likely to contain spam patterns, reducing overall computational complexity while maintaining detection accuracy for malicious clusters.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If message data is continuously analyzed in real-time streams, then clusters spreading over time are detected, but data processing load and resource consumption increase

Engineering Contradiction:
Improvedetection reliabilityVSAvoiddata processing energy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements partial analysis by applying clustering algorithms only to message subsets that meet specific criteria, such as messages containing certain keywords, from particular senders, or exhibiting suspicious patterns. This selective processing reduces the overall data volume requiring intensive analysis while maintaining reliable detection of spam clusters, thereby lowering energy consumption without compromising detection reliability.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent discards messages that have been processed and determined to be benign or already accounted for in existing clusters. By identifying and eliminating redundant or non-threatening messages from further processing, the system reduces the continuous data processing load and associated energy consumption while maintaining reliable detection of new or evolving spam clusters through ongoing stream analysis.

Inventive Principle:
Principle #34Discarding and recovering

Data Source

PatentUS11716335B2Detection and restriction of unwanted messages through time interval cluster analysis
Publication Date: 2023.08.01 SYNIVERSE TECHNOLOGIES LLC
  • US11716335B2 patent drawing
  • US11716335B2 patent drawing
  • US11716335B2 patent drawing

AI summary

Detecting and restricting floods of unwanted messages is implemented by cluster analysis over time intervals. Application of streaming machine learning clustering algorithms enables finding clusters of messages (P2P text messages, WHATSAPP, tweets) sharing the same content. Such clusters may be analyzed for finding out offensive messages, unwanted or spam messages, and rumors and take corrective actions as needed. The solution enables visualization of data and/or messages and identification of clusters as the solution works on the data and aggregates data into clusters over time intervals. Corrective actions may be applied on selected clusters based on visualized data clusters or by automated application of defined rules.