1. Technical Field
This invention relates to distributed computer services, particularly computer services having online forums.
2. Background Information
An online forum is a communications interchange in which people may communicate with others through successive electronic transmissions between respective computer systems. An online forum, or any other type of distributed computer services may be implemented on a distributed computer system such as that shown in
Each client system 102 runs client software that allows it to communicate in a meaningful manner with corresponding software running on the server system 100. The client systems 102 communicate with the server system 100 through various channels, such as a modem 104 connected to a telephone line 106 or a direct Internet connection using a transfer protocol such as TCP/IP (Transfer Control Protocol/Internet Protocol). The server system 100 is responsible for receiving input from the client systems 102, manipulating the collective body of input information (and possibly information from other sources) into a useful format, and retransmitting the formatted information back to one or more clients 102 for output on an output device, such as a display screen.
Referring to
The chat room 200 shown in
When a participant in a forum, whether public or private, makes a comment that others in the forum regard as offensive, in poor taste, wildly incorrect, or otherwise objectionable, the offending participant most likely will be “flamed” by one or more of the other participants. A “flame” is a reprimand or other stringent response directed at the offending party. One purpose behind flaming another participant is to dissuade the offender, through embarrassment or intimidation, from making further objectionable comments. In this manner, if the offending user chooses to curb his or her behavior in response to the flaming, a forum may be crudely regulated or “policed” by the forum's participants. However, the offending participant may continue to behave in an objectionable manner. Further, a participant who overly “flames” other participants may also be objectionable. Accordingly, participant policing of forums does not always work well. In such cases, offended participants may drop out of “flame-filled” forums, and/or the online service must devote resources to actively police problematic participants.
Other objectionable behavior includes sending one or more messages to “spoof” other users as to the sender's identity in order to try to get confidential information (e.g., credit card numbers or passwords) sent in response (sometimes called “password fishing”).
Another problem that can arise in online systems is “resource hogging”, where a participant uses features such as broadcast or multi-cast messaging to send a large number of messages to other users in a short period of time (sometimes called “spamming”). Such resource hogging deprives other users of server resources, and can slow, an online system response time to undesirable levels.
Accordingly, the inventor has determined that there is a need for a better way to police recalcitrant participants in online forums and to reduce spamming. The present invention provides a method and means for accomplishing this goal.
The invention provides a method and means for self-policing and automatically rate-limiting multiple-user online forums. The preferred embodiment of the invention includes a set of rules that permit users to censure other users. A censured user has one or more “privileges” (which may include access to the online computer system or the effective message rate of a communications connection) taken away or diminished; the privilege is gradually restored if the censured user behaves. The censuring participant and other pertinent participants are notified of the effect of the censuring on the censured user. In another aspect of the invention, the online computer system automatically tracks the rate at which a user sends certain types of messages, and can message rate limit a user who uses too many system resources by sending a large number of messages in rapid succession. The amount of rate limiting may be a function of the amount of censure that has been applied to the user being limited.
Advantages of this invention may include one or more of the following. The techniques described here enable a multiple-user online service (e.g., a chat room or other forum) to be self-policing. Access to the computer service for a particular user is automatically regulated by the computer based on input from other users concerning the conduct of the user under consideration, or based on the message rate of a user. Users of a computer-based system have the ability to sanction a misbehaving user and thereby have the offending user's access to the system denied or curtailed. Unlike the conventional “flaming” approach to policing, which typically fails because it relies on the misbehaving user curbing his or her own behavior or results in retaliatory “flaming”, the policing techniques described here are based on predetermined rules and operate automatically in response to votes cast by other users of the computer system. The offending user has no choice in the matter once he or she chooses to misbehave. Because the operation of these policing techniques are automatic, the computer-based service provider need not expend personnel time and resources to police public forums, direct user communications, and the like.
The details of one or more embodiments of the invention are set forth in the accompanying drawings and the description below. Other features, objects, and advantages of the invention will be apparent from the description and drawings, and from the claims.
Like reference numbers and designations in the various drawings indicate like elements.
The prospect of millions of concurrent users of an online computer system puts great pressure on the ability of the system provider to police abusive participants. Accordingly, the invention provides a self-policing online environment that makes participants responsible for their behavior. That is, other participants can express an opinion about that behavior, and have that opinion affect the offending user in a negative way and be “visible” to other participants. Providing such a self-policing user feedback mechanism lowers the cost of providing online services to users and provides a more “user-friendly” environment for participants.
In another aspect of the invention, the online computer system automatically tracks the rate at which a user sends certain types of messages, and can “rate limit” a user who “hogs” too many system resources by sending a large number of messages (or messages of selected types) in rapid succession.
The online system receives event E and checks a database to see whether user B has the right to “evil” user A (STEP 306). For example, this step can limit users who themselves have been restricted from “eviling” other users.
If user B does not have the right to “evil” user A, then user B is notified of the affect of user B's action on user A's “evil index”—a value of how restricted user A is with respect to use of resources on the online system (STEP 308). In this case, user B's action has no affect on user A.
If user B does have the right to “evil” user A, then user A's “evil index” is modified by a suitable amount, which will affect further actions by user A (STEP 310), as described below. The amount of modification can be based on the past behavior of user A, or of users A and B. The amount of modification may also depend on the type of “eviling” asserted by user B. For example, user B may wish to assert an “eviling” event E anonymously rather than be identified. Anonymous “eviling” may be accorded lesser weight. That is, an anonymous “eviling” response may count as fewer evil “votes” than it would if the eviling user's identity was revealed. In one embodiment, an “eviling” user may set up an automatic “eviling” response to all communications from another specific user. In this case, the effect of the “eviling”, which is intended to discourage communication from the specific user, is given very low weight (equivalently, counts as very few evil “votes”) because of its automatic invocation.
User A's “evil index” is “broadcast” to other users who “know about” user A (STEP 312). For example, such users might be all of the participants in a private chat room, or all visitors to a public chat room. In one embodiment, a modified “evil index” is reported to each user in a current chat room's user list and to each user who has the “eviled” users on his or her “buddy list” (described in co-pending U.S. patent application Ser. No. 08/803,692, filed Feb. 24, 1997, entitled “User Definable On-line Co-user Lists”, hereby incorporated by reference). Thus, an “eviled” user is publicly chastised.
Thereafter, user A's “evil index” begins to gradually “decay” back to normal over time (STEP 314). Such decay may be linear, exponential, step-wise, or some other function. Meanwhile, user B is notified of the affect of user B's action on user A's “evil index” (STEP 308). In this case, user B's action has had an affect on user A.
Some of the steps noted above may be done in different order without substantially changing the effect of the process. For example, STEPS 312, and 314, and 308 may be performed in different order.
A basic “penalty” for having a non-normal “evil index” is denial of access to a forum or the online service until the user's “evil index” has decayed back to normal. In a more refined embodiment, a user's “evil index” affects a rate limit which governs a user's ability to send (and/or receive) messages. This feature allows other participants to “evil” a user who “flames” or “spams” them, and thus reduce the rate at which the recalcitrant user can send and/or receive messages. A description of rate limiting is set forth below.
A server database (which may be centralized or distributed) stores a user's “evil index”. A user's “evil index” can be maintained in a user-record as a global total, or by forum, or both. The value of each “evil index” can be used to control the user's ability to log on to the online computer system or access selected forums, and/or the effective rate of message or file transmissions.
Other rules may applied in different embodiments. For example, the following rules can be implemented:
When a user's “evil index” is modified, the user is notified that privileges, such as rate of messaging, have been limited. In one embodiment, a message is sent from the server that contains the user's current “evil index” to the “eviled” user, and optionally includes the current rate of decay back to normal. Such information allows a wide range of feedback to be presented to the user about his or her ability to interact with the online computer system. For example, a graphical “power meter” or “power bar graph” can be used to indicate the “evil index” of the user. For instance, a color-coded bar graph can be divided into (1) a green zone to represent that the user's “evil index” is normal; (2) a yellow zone to represent that the user's “evil index” has been modified slightly; (3) a red zone to represent that the user's “evil index” has been modified significantly; and (4) a black zone to represent that access or message privileges have been suspended for a time. However, other methods of informing a recalcitrant user of his or her “evil index” can be used.
In one embodiment, a user can “rehabilitate” his or her “evil index” by visiting advertisements displayed on the online computer system; “visits” can be determined by requiring the user to “click” on an advertisement. The user is rewarded with more “power” by adjusting the value of the user's “evil index” more towards normal.
In one embodiment, both input and output messaging rates of a user are limited based on the behavior of the user and/or available system resources. Such rate limiting can stop malicious users and errant client computers from consuming more than a fair share of online system resources. However, preferably the rate limiting system is weighted to tolerate brief bursts of messaging activity while penalizing unacceptably large rates of messaging. Rate limiting can also limit aggregate input to a server to a level at which the system is reasonably loaded under normal conditions. Rate limiting can also be combined with “eviling” by automatically adjusting a users rate limit parameters based on their “evil index.”
In one embodiment, input rate limiting—from user to server—is conducted on a per user connection basis, and within a user connection on a per-message type bases (that is, rate limits for different types of messages may be set to different values). In one embodiment, rate limiting for a user is achieved in accordance with the following algorithm:
If A is not less than the warning threshold W (STEP 412), and A is less than a clear threshold C (STEP 420), a determination is made as to whether the user is rate limited (STEP 421). If not, the message is sent (STEP 423). Otherwise, the message is dropped and the user is warned that the rate limited has been exceeded (STEP 418).
Finally, if A is not less than the clear threshold C (STEP 420), the rate limit flag for the user is cleared (STEP 422) and the message is sent (STEP 423).
The rate limiting algorithm supports several “tunable” parameters:
In one embodiment, the values for C, W, R, and D are selected such that C>W>R>D. The initial average rate I can be weighted to increase the algorithm's tolerance of bursts of activity, such as “chatty startups” when a user joins a forum and sends several messages in succession. The threshold rates can be set globally for all user's, or “tuned” for each user.
In one embodiment, the difference between the clear threshold C and the rate limit threshold R can be “tuned” by the online computer system to alter the interval between commencement of rate limiting for a user and the resumption of normal activity. The difference between C and R may be automatically increased, for example, if the user sends excessive “spamming” type messages at too great a rate. Further, the threshold values C, W, R, and D can be dynamically modified by the online system as a way of limiting system resource usage if too many users are simultaneously using the system.
As noted above, when a user's message rate is limited, the user is notified. In one embodiment, a message is sent from the server to a rate limited user that contains values for each of the parameters outlined above, and another message is sent the next time that the server will accept messages from the user without restriction. Such information allows a wide range of feedback to be presented to the user about his or her ability to interact with the online computer system. For example, a graphical “power meter” or “power bar graph” can be used to indicate the “health” or “power” of the user. For instance, a color-coded bar graph can be divided into (1) a green zone to represent that no rate limiting is in effect; (2) a yellow zone to represent that the user's message rate is near the point where rate limiting would take effect; (3) a red zone to represent that message rate limiting is in effect; and (4) a black zone to represent that access privileges have been suspended for a time. However, other methods can be used to inform a recalcitrant user of his or her message rate limit status.
In one embodiment, a user can “rehabilitate” his or her message rate limit status by visiting advertisements displayed on the online computer system. The user is rewarded with more “power” by adjusting the parameters.
In one embodiment, output rate limiting—from server to user—is performed in a similar manner, with the following differences:
The algorithms described above prevent abuse of online system resources without causing undue “pain” to users, including “power users” and users who are subject to delays and input/output timing changes by non-ideal networks (which can cause otherwise normal user activity to appear to be unacceptable activity).
The concepts of automatic rate limiting and modification of a user's “evil index” can be combined to provide a refined self-policing, automatic rate limiting system that can regulate an “eviled” user's ability to participate in forums without requiring total exclusion from the forum. Further, a user's current global or forum “evil index” can be used to modify the parameters used to effect automatic (i.e., “non-eviled” basis) rate limiting for the user. For example, a user's ability to interact in a forum can be rate limited by modifying the values for A, C, W, R, and/or D as a function of whether the user's “evil index” has been modified, or as a function of the current value of the user's “evil index”. Conversely, the amount of modification of a user's “evil index” can be a function of the current value of A. Thus, conceptually, a user's permitted message rate Rp is a function of the user's “evil index” EI plus the user's rate of attempted message activity A: Rp=f(EI)+g(A)
Conceptually, each user's user-record thus may look like the following table:
Separate “lifetime” and “session” records may be kept where useful. Of course, other or different information may be recorded for each user, and other ways of organizing such data may be used. Further, users may be assigned a “class” designation (such as “sysop” (system operator), corporate users, paying members, non-paying members, etc.) which can be given weight in making a determination of right to “evil” or absolute or relative immunity from being “eviled” in STEP 306 of
In setting rate parameter values for a user, a global rate table can be used which is indexed by a user's “evil index”; that is, message rate parameters are a function of the user's global or forum “evil index”. A conceptual example of one such table might be the following (ΔA represents an optional adjustment to be applied to the calculated value of A):
The values for A, C, W, R, and D in this table can be defined globally or by forum. If by forum, the values can be defined in absolute terms or as relative offsets to a global table. Multiple tables of this form also can be defined, indexed by message type, so that misuse of certain types of messages are punished more than misuse of other message types.
Alternatively, a non-tabular implementation could be used instead of the global rate table described above. For example, a user's rate parameter values (ΔA, C, W, R, D) could be defined as a function describing a relation between these quantities.
The methods and mechanisms described here are not limited to any particular hardware or software configuration, but rather they may find applicability in any computing or processing environment used in connection with online computer services.
The invention may be implemented in hardware or software, or a combination of both. However, preferably, the invention is implemented in computer programs executing on programmable computers each comprising at least one processor, at least one data storage system (including volatile and non-volatile memory and/or storage elements), at least one input device, and at least one output device. Program code is applied to input data to perform the functions described herein and generate output information. The output information is applied to one or more output devices, in known fashion.
Each program is preferably implemented in a high level procedural or object oriented programming language to communicate with a computer system. However, the programs can be implemented in assembly or machine language, if desired. In any case, the language may be a compiled or interpreted language.
Each such computer program is preferably stored on a storage media or device (e.g., ROM or magnetic diskette) readable by a general or special purpose programmable computer, for configuring and operating the computer when the storage media or device is read by the computer to perform the procedures described herein. The inventive system may also be considered to be implemented as a computer-readable storage medium, configured with a computer program, where the storage medium so configured causes a computer to operate in a specific and predefined manner to perform the functions described herein.
A number of embodiments of the present invention have been described. Nevertheless, it will be understood that various modifications may be made without departing from the spirit and scope of the invention. Accordingly, other embodiments are within the scope of the following claims.
This application is a continuation of U.S. patent application Ser. No. 10/876,603, filed Jun. 28, 2004, now allowed, which is a continuation of U.S. patent application Ser. No. 09/968,539, filed Oct. 2, 2001, now U.S. Pat. No. 6,826,618, which is a continuation of U.S. patent application Ser. No. 09/076,484, filed May 13, 1998, now U.S. Pat. No. 6,339,784, which claims priority from provisional application No. 60/047,235 filed May 20, 1997, the entire contents of the prior applications being incorporated herein by reference.
Number | Date | Country | |
---|---|---|---|
60047235 | May 1997 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 10876603 | Jun 2004 | US |
Child | 12574989 | US | |
Parent | 09968539 | Oct 2001 | US |
Child | 10876603 | US | |
Parent | 09076484 | May 1998 | US |
Child | 09968539 | US |