Technique for detecting suspicious electronic messages

US10572664B2 · kind B2 · utility

Assignee

• retarus GmbH · DE

Inventors

• Martin Hager · Jena, DE
• Michael Grauvogl · Munich, DE

Key dates

• Filing date: Sep 18, 2017
• Grant date: Feb 25, 2020
• Expiry date: Jan 5, 2038

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2463/144
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

The disclosure relates to a method of detecting suspicious electronic messages. The method is performed in a messaging server which is in communication with a plurality of message senders and a plurality of message receivers, and comprises the steps of: receiving electronic messages sent from the plurality of message senders to at least one message receiver; extracting from each received message at least one message sender feature and at least one message content feature; recording the extracted message sender features and message content features in a database; determining, on the basis of the message content features recorded in the database, whether a specific content feature that can be associated with a current message has already been recorded in the past; if the specific content feature has already been recorded in the past, determining, on the basis of the message sender features recorded in the database, a number of message senders that can be associated with the specific content feature; and classifying the current message as suspicious if the determined number of message senders that can be associated with the specific content feature exceeds a predetermined threshold va…