Messaging Server Alerts for Real-Time Malicious Message Screening

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cybersecurity solutions struggle to provide timely and relevant information to end users about potentially malicious messages, particularly in mobile computing environments with limited processing power and network bandwidth, while balancing resource consumption.

Innovation Solution

A computing platform monitors messages in real-time, identifies potentially malicious content using machine learning models, and generates instream alerts to messaging servers, which deliver warnings to intended recipients before or alongside the malicious messages, and also notifies external entities and system logs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If real-time message monitoring is implemented to identify malicious messages, then security protection effectiveness is improved, but computing resource consumption increases

Engineering Contradiction:
Improvesecurity protection effectivenessVSAvoidcomputing resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

A protection server is introduced as an intermediary between the messaging server and user devices. The protection server performs machine learning-based analysis of messages to identify phishing and spam content, generating alert messages that are injected into the message stream. This intermediary approach shifts the computational burden from resource-constrained user devices to a centralized server with sufficient processing power, thereby maintaining security effectiveness while preserving device resource efficiency.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Loss of time

If real-time message monitoring is implemented to identify malicious messages, then detection timeliness is improved, but network bandwidth consumption increases

Engineering Contradiction:
Improvedetection timelinessVSAvoidnetwork bandwidth consumption
Core Design Contradiction:
Loss of timeVSLoss of energy

Solution Approach 1:

The system extracts only the essential message content and metadata needed for malicious message detection, rather than transmitting entire message streams for analysis. The protection server receives selected message data, performs rapid machine learning-based classification to identify phishing and spam messages, and generates compact alert messages. This extraction approach reduces network bandwidth consumption while maintaining real-time detection capability.

Inventive Principle:
Principle #2Taking out (Extraction)

3Measurement precision

If comprehensive message analysis is performed to improve detection accuracy, then measurement precision is improved, but device processing power requirements increase

Engineering Contradiction:
Improvedetection accuracyVSAvoidprocessing power requirements
Core Design Contradiction:
Measurement precisionVSPower

Solution Approach 1:

The protection server serves as an intermediary that performs comprehensive machine learning-based message analysis using sophisticated models for detecting phishing and spam. Instead of requiring user devices to execute these computationally intensive analysis algorithms, the protection server handles all heavy processing tasks and returns simplified results. This architecture enables high detection accuracy through comprehensive analysis while keeping user device processing power requirements minimal.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12500926B2Executing real-time message monitoring to identify potentially malicious messages and generate instream alerts
Publication Date: 2025.12.16 GOLDMAN SACHS BANK USA
  • US12500926B2 patent drawing
  • US12500926B2 patent drawing
  • US12500926B2 patent drawing

AI summary

Aspects of the disclosure relate to identifying potentially malicious messages and generating instream alerts based on real-time message monitoring. A computing platform may monitor a plurality of messages received by a messaging server associated with an operator. Subsequently, the computing platform may detect that a message of the plurality of messages is potentially malicious. In response to detecting that the message of the plurality of messages is potentially malicious, the computing platform may execute one or more protection actions. In executing the one or more protection actions, the computing platform may generate an alert message comprising information indicating that the message of the plurality of messages is potentially malicious. Then, the computing platform may send the alert message to the messaging server, which may cause the messaging server to deliver the alert message to a computing device associated with an intended recipient of the message.