Patent ID: 7657616

Claim:
A computer-implemented method comprising: intercepting a first message from a client device associated with an actual user, the first message being generated according to an instant messaging protocol, said first message being associated with a first screen name usable in conjunction with said instant messaging rogue protocol; determining a name of the actual user, said determining comprising: obtaining from the first message a network address of the client device; using the network address to access user identification information stored in a registry of the client device; and using the user identification information to request a name of the actual user from a domain controller; storing data representing an association between the actual user name and the first screen name in computer storage; intercepting a second message associated with the instant messaging protocol, the second message being associated with a second screen name of the actual user; storing a second association between the actual user name and the second screen name in the computer storage; and enforcing a policy rule based on said first and second associations, said enforcing the policy rule comprising restricting the actual user from sending or receiving a predetermined number of messages associated with the instant messaging protocol.