Message Filtering Notifications via DNS Correlation and Push Alerts

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing mobile device systems struggle to efficiently filter malicious SMS messages, particularly those using local analysis which are resource-intensive and outdated, and remote analysis which lacks user notification of filtering actions.

Innovation Solution

A message filtering server that correlates DNS requests with message filtering requests to provide push notifications to users, using a centralized system to identify and notify users of blocked messages without revealing personal identifiable information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If local analysis is used to filter malicious messages, then message filtering can be performed on the user device, but resource consumption increases and detection capability becomes outdated

Engineering Contradiction:

Improvemessage filtering capabilityVSAvoiddevice resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent introduces a message filtering server as an intermediary between the user device and the message filtering function. Instead of performing analysis locally on the device, the system uses a centralized server that receives messages, performs sophisticated analysis including zero-day attack detection, and returns filtering decisions to the device. This mediator approach transfers the resource-intensive computational burden from the user device to the server infrastructure.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If local analysis is used to filter malicious messages, then filtering can be performed on the user device, but detection of new smishing techniques becomes insufficient

Engineering Contradiction:

Improvemessage filtering capabilityVSAvoiddetection of new attack techniques

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system performs preliminary actions by pre-loading updated filtering rules, signatures, and threat intelligence databases onto the message filtering server before actual message analysis occurs. This allows the server to have access to the latest security knowledge and attack patterns ready for immediate analysis, enabling detection of zero-day attacks and emerging smishing techniques without requiring real-time updates on the user device.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent replaces the mechanical/local processing system with a networked/cloud-based system. Instead of relying on device-based rule matching that is easily outdated, the system uses server-based analysis that can incorporate machine learning models, behavioral analysis, and real-time threat intelligence feeds to detect sophisticated and evolving malicious message patterns.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Use of energy by moving object

If remote analysis is used to filter messages, then device resources are conserved, but user notification of filtering actions is not provided

Engineering Contradiction:

Improvedevice resource consumptionVSAvoiduser awareness of filtering actions

Core Design Contradiction:

Use of energy by moving objectVSLoss of information

Solution Approach 1:

The patent implements a feedback mechanism where the message filtering server communicates filtering decisions and actions taken back to the user device. When a message is identified as malicious and filtered, the system sends a notification alert to the user device informing the user that their message was blocked and why. This feedback loop maintains user awareness and transparency while preserving the resource efficiency of remote analysis.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20260006102A1Methods and apparatus to enable message filtering notifications

Publication Date: 2026.01.01 MCAFEE LLC

AI summary

Systems, apparatus, articles of manufacture, and methods to enable message filtering notifications are disclosed. Example machine readable instructions cause at least one processor circuit to cause storage of a record of a domain name service request transmitted by a user device, the record of the domain name service request including device identifying information to enable identification of the user device, determine whether a message associated with a message filtering request is to be filtered, the message filtering request transmitted by the user device, provide an indication to the user device indicating whether the message is to be filtered, determine whether the message filtering request is temporally correlated with the record of the domain name service request, and cause transmission of a push notification to the user device based on the device identifying information recorded in connection with the domain name service request.