US5448668A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method of detecting changes to a collection of digital signals
Assignee: UNM Rainforest Innovations
•
Filing: 1993-07-08
•
Granted: 1995-09-05
•
Expires: 2013-07-08
Abstract
Abstract A probabilistic method of detecting viral intrusion into an original computer file is disclosed. In the method, a protection file is first created. In the preferred embodiment, the protection files is created by generating a test string. The test string is compared to the original computer file and is discarded in the event of a match. The test string is kept in the event of a non-match. The protection file is created by storing a plurality of non-matching test strings. In the detection stage, the file to be screened for possible viral infection is compared to each of the test strings of the protection file. The computer file being screened is determined to be probabilistically free of a viral infection if all of the test strings in the protection file do not match the file being screened. However, in the event of a match between a test string and the file being screened, then a change in the file being screened is detected.
Inventors
- 👤 Alan S. Perelson
- 👤 Stephanie Forrest
- 👤 Lawrence C. Allen
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 12:13
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/50; G06F21/55; G06F21/56; G06F21/562; G06F21/565
Claims Analysis
Total Claims: 47
Claim 1
Independent Claim
118 words
A method of generating a protection string having a plurality of nonmatching test strings for use in a method of protecting an original string having a plurality of contiguous first digital signals, said method comprising the steps of: a) generating a test string having a plurality of contiguous test digital signals; b) attempting to match said test string qenerated in step (a) to said original string; and c)(1) discarding said test string generated in step (a) in the event of a match, and reverting to step (a) and generating a different test string; or c)(2) retaining said test string as one of the plurality of non-matching test strings of the protection string in the event of a non-match.
Claim 2
Independent Claim
118 words
A method of generating a protection string having a plurality of nonmatching test strings for use in a method of protecting an original string having a plurality of contiguous first digital signals, said method comprising the steps of: a) generating a test string having a plurality of contiguous test digital signals; b) attempting to match said test string qenerated in step (a) to said original string; and c)(1) discarding said test string generated in step (a) in the event of a match, and reverting to step (a) and generating a different test string; or c)(2) retaining said test string as one of the plurality of non-matching test strings of the protection string in the event of a non-match.
Claim 3
Dependent Claim
34 words
The method of claim 1 wherein step (c) (2) further comprising: reverting to the method of step (a) to (c) (2); and terminating the method after a plurality of non-matching test strings are retained.
Claim 4
Dependent Claim
20 words
The method of claim 1 further comprising the step of: parsing said original string into a plurality of contiguous segments.
Claim 5
Dependent Claim
28 words
The method of claim 3 wherein said attempting step comprises attempting to match each of the non-matching test string to each of said segments of said original string.
Claim 6
Dependent Claim
12 words
The method of claim 1 wherein said test string is randomly generated.
Claim 7
Independent Claim
169 words
A method of detecting changes to an original string having a plurality of first contiguous digital signals by a protection string having a plurality of test strings with each test string having a plurality of second contiguous digital signals said protection string created for use in a method to detect changes to said original string, each test string not matching the original string at the time said protection string was created, said method comprising the steps of: (a) comparing the second contiguous digital signals of one test string of said protection string to the plurality of first contiguous digital signals of the original string; and (b)(1) reverting to the method of step (a) and comparing with a different test string, until all of the test strings in said protection string have been compared, in the event of a non-match; and (b)(2) terminating said method and determining the existence of a change in the original string, in the event of a match between a test string and the original string.
Claim 8
Independent Claim
169 words
A method of detecting changes to an original string having a plurality of first contiguous digital signals by a protection string having a plurality of test strings with each test string having a plurality of second contiguous digital signals said protection string created for use in a method to detect changes to said original string, each test string not matching the original string at the time said protection string was created, said method comprising the steps of: (a) comparing the second contiguous digital signals of one test string of said protection string to the plurality of first contiguous digital signals of the original string; and (b)(1) reverting to the method of step (a) and comparing with a different test string, until all of the test strings in said protection string have been compared, in the event of a non-match; and (b)(2) terminating said method and determining the existence of a change in the original string, in the event of a match between a test string and the original string.
Claim 9
Dependent Claim
29 words
The method of claim 6 wherein said original string is parsed into a plurality of contiguous segments with each of said contiguous segments comprising a first contiguous digital signals.
Claim 10
Dependent Claim
45 words
The method of claim 7 wherein said comparing step compares the plurality of second contiguous digital signals of one test string of said protection string to each of the plurality of first contiguous digital signals of each of the contiguous segments of the original string.
Claim 11
Independent Claim
241 words
A method of protecting an original string having a first plurality of contiguous digital signals comprising the steps of: a) generating a test string having a second plurality of contiguous digital signals; b) comparing said second plurality of contiguous digital signals of said test string to said first plurality of contiguous digital signals of said original string; c)(1) reverting to the method of step (a) and generating a different test string, in the event said comparing step results in a match between said second plurality of contiguous digital signals of said test string to said first plurality of contiguous digital signals of said original string; and c)(2) retaining said test string in the event of a non-match and reverting to the method of step (a) until a protection string comprising a plurality of non-matching test strings are retained; (d) comparing the second plurality of contiguous digital signals of one test string of said protection string to the first plurality of contiguous digital signals of the original string; and (e)(1) reverting to the method of step (d) and comparing with a test string different from said one test string of said protection string, until all of the test strings in said protection string have been compared, in the event of a non-match; and (e)(2) terminating said method and determining the existence of a change in the original string, in the event of a match between a test string and the original string.
Claim 12
Independent Claim
241 words
A method of protecting an original string having a first plurality of contiguous digital signals comprising the steps of: a) generating a test string having a second plurality of contiguous digital signals; b) comparing said second plurality of contiguous digital signals of said test string to said first plurality of contiguous digital signals of said original string; c)(1) reverting to the method of step (a) and generating a different test string, in the event said comparing step results in a match between said second plurality of contiguous digital signals of said test string to said first plurality of contiguous digital signals of said original string; and c)(2) retaining said test string in the event of a non-match and reverting to the method of step (a) until a protection string comprising a plurality of non-matching test strings are retained; (d) comparing the second plurality of contiguous digital signals of one test string of said protection string to the first plurality of contiguous digital signals of the original string; and (e)(1) reverting to the method of step (d) and comparing with a test string different from said one test string of said protection string, until all of the test strings in said protection string have been compared, in the event of a non-match; and (e)(2) terminating said method and determining the existence of a change in the original string, in the event of a match between a test string and the original string.
Claim 13
Dependent Claim
33 words
The method of claim 9 further comprising the step of: parsing said original string into a plurality of contiguous segments, with each segment being one of said first plurality of contiguous digital signals.
Claim 14
Dependent Claim
41 words
The method of claim 10 wherein said comparing step (b) comprises attempting to match the second plurality of contiguous digital signals of said test string to said plurality of contiguous digital signals of each of said segments of said original string.
Claim 15
Dependent Claim
41 words
The method of claim 10 wherein said comparing step (d) comprises attempting to match the second plurality of contiguous digital signals of said test string to said plurality of contiguous digital signals of each of said segments of said original string.
Claim 16
Dependent Claim
12 words
The method of claim 9 wherein said test string is randomly generated.
Claim 17
Independent Claim
271 words
A method of protecting a plurality of identical original computer files, stored in a plurality of computers, each of said original computer files having a plurality of contiguous digital signals, said method at each computer comprising the steps of: a) randomly generating a test string having a plurality of contiguous digital signals; b) comparing said plurality of contiguous digital signals of said test string to said plurality of contiguous digital signals of said original computer file; c)(1) reverting to the method of step (a), in the event said comparing step results in a match between said plurality of contiguous digital signals of said test string and said plurality of contiguous digital signals of said original computer file; and c)(2) storing said test string in a computer protection file in the event of a non-match and reverting to the method of step (a) until a plurality of non-matching test strings are stored in said computer protection file; (d) comparing the plurality of contiguous digital signals of one of said plurality of nonmatching test strings of said computer protection file to the plurality of contiguous digital signals of the original computer file; and (e)(1) reverting to the method of step (d) and comparing with a test string different from said one of said plurality of non-matching test string, until all of the plurality of non-matching test strings in said computer protection file have been compared, in the event of a non-match; and (e)(2) terminating said method and determining the existence of a change in the original computer file, in the event of a match between a test string and the original computer file.
Claim 18
Independent Claim
271 words
A method of protecting a plurality of identical original computer files, stored in a plurality of computers, each of said original computer files having a plurality of contiguous digital signals, said method at each computer comprising the steps of: a) randomly generating a test string having a plurality of contiguous digital signals; b) comparing said plurality of contiguous digital signals of said test string to said plurality of contiguous digital signals of said original computer file; c)(1) reverting to the method of step (a), in the event said comparing step results in a match between said plurality of contiguous digital signals of said test string and said plurality of contiguous digital signals of said original computer file; and c)(2) storing said test string in a computer protection file in the event of a non-match and reverting to the method of step (a) until a plurality of non-matching test strings are stored in said computer protection file; (d) comparing the plurality of contiguous digital signals of one of said plurality of nonmatching test strings of said computer protection file to the plurality of contiguous digital signals of the original computer file; and (e)(1) reverting to the method of step (d) and comparing with a test string different from said one of said plurality of non-matching test string, until all of the plurality of non-matching test strings in said computer protection file have been compared, in the event of a non-match; and (e)(2) terminating said method and determining the existence of a change in the original computer file, in the event of a match between a test string and the original computer file.
Claim 19
Dependent Claim
21 words
The method of claim 14 further comprising the step of: parsing said original computer file into a plurality of contiguous segments.
Claim 20
Dependent Claim
34 words
The method of claim 15 wherein said comparing step (b) comprises attempting to match the plurality of contiguous digital signals of said test string to each of said segments of said original computer file.
Claim 21
Dependent Claim
36 words
The method of claim 15 wherein said comparing step (d) compares the plurality of contiguous digital signals of one test string of said computer protection file to each of the segments of the original computer file.
Claim 22
Dependent Claim
15 words
The method of claim 14 wherein said plurality of computers are interconnected in a network.
Claim 23
Independent Claim
135 words
A method of generating a protection string having a first plurality of contiguous digital signals for use in a method to protect an original string having a second plurality of contiguous digital signals, said method comprising the steps of: a) generating a test string having a plurality of contiguous digital signals fewer in number than said second plurality of contiguous signals of said original string; b) attempting to match said plurality of contiguous digital signals of said test string to portions of said second plurality of contiguous digital signals of said original string; and c)(1) discarding said test string in the event of a non-match, and reverting to the method of step (a) to generate a different test string; or c)(2) storing said test string in said protection string in the event of a match.
Claim 24
Independent Claim
135 words
A method of generating a protection string having a first plurality of contiguous digital signals for use in a method to protect an original string having a second plurality of contiguous digital signals, said method comprising the steps of: a) generating a test string having a plurality of contiguous digital signals fewer in number than said second plurality of contiguous signals of said original string; b) attempting to match said plurality of contiguous digital signals of said test string to portions of said second plurality of contiguous digital signals of said original string; and c)(1) discarding said test string in the event of a non-match, and reverting to the method of step (a) to generate a different test string; or c)(2) storing said test string in said protection string in the event of a match.
Claim 25
Dependent Claim
34 words
The method of claim 19 wherein step (c)(2) further comprising: reverting to the method of step (a); and terminating the method after a plurality of matching test strings are stored in said protection string.
Claim 26
Dependent Claim
30 words
The method of claim 19 further comprising the step of: parsing said original string into a plurality of contiguous segments, with each segment comprising a plurality of contiguous digital signals.
Claim 27
Dependent Claim
39 words
The method of claim 21 wherein said attempting step comprises attempting to match the plurality of contiguous digital signals of said test string to said plurality of contiguous digital signals of each of said segments of said original string.
Claim 28
Dependent Claim
37 words
The method of claim 19 further comprising the step of (c)(3) storing the location of the position in said second plurality of contiguous digital signals of said original string where said test string matches said original string.
Claim 29
Dependent Claim
11 words
The method of claim 19 wherein test string is randomly generated.
Claim 30
Independent Claim
165 words
A method of detecting changes to an original string having a plurality of contiguous first digital signals by a protection string having a plurality of test strings, with each of said test strings having a plurality of contiguous second digital signals, matching to a portion of said plurality of contiguous first digital signals of said original string at the time said protection string was created, said method comprising the steps of: (a) comparing the plurality of contiguous second digital signals of one test string of said protection string to the plurality of first contiguous digital signals of the original string; and (b)(1) reverting to the method of step (a) and comparing with a different test string, until all of the test strings in said protection string have been compared, in the event of a match; and (b)(2) terminating said method and determining the existence of a change in the original string, in the event of a non-match between a test string and the original string.
Claim 31
Independent Claim
165 words
A method of detecting changes to an original string having a plurality of contiguous first digital signals by a protection string having a plurality of test strings, with each of said test strings having a plurality of contiguous second digital signals, matching to a portion of said plurality of contiguous first digital signals of said original string at the time said protection string was created, said method comprising the steps of: (a) comparing the plurality of contiguous second digital signals of one test string of said protection string to the plurality of first contiguous digital signals of the original string; and (b)(1) reverting to the method of step (a) and comparing with a different test string, until all of the test strings in said protection string have been compared, in the event of a match; and (b)(2) terminating said method and determining the existence of a change in the original string, in the event of a non-match between a test string and the original string.
Claim 32
Dependent Claim
30 words
The method of claim 25 wherein said protection string is parsed into a plurality of contiguous segments with each of said segments comprising a plurality of contiguous third digital signals.
Claim 33
Dependent Claim
42 words
The method of claim 26 wherein said comparing step compares the plurality of second contiguous digital signals of one test string of said protection string to the plurality of contiguous third digital signals of each of the segments of the original string.
Claim 34
Independent Claim
268 words
A method of protecting an original computer file, having a plurality of first contiguous digital signals, comprising the steps of: a) generating a test string, said test string having a plurality of second contiguous digital signals, fewer in number than said plurality of first contiguous signals of said original computer file; b) comparing said plurality of second contiguous digital signals of said test string to said plurality of first contiguous digital signals of said original computer file; c)(1) reverting to the method of step (a) and generating a different test string, in the event said comparing step results in a non-match between said plurality of second contiguous digital signals of said test string and said plurality of first contiguous digital signals of said original computer file; and c)(2) storing said test string in a protection file in the event of a match; and c)(3) reverting to the method of step (a) to c(2) until a plurality of matching test strings are stored in said protection file; (d) comparing the plurality of second contiguous digital signals of one of said plurality of matching test strings of said protection file to the plurality of first contiguous digital signals of the original computer file; and (e)(1) reverting to the method of step (d) and comparing with a different test string, until all of the test strings in said protection file have been compared, in the event of a match; and (e)(2) terminating said method and determining the existence of a change in the original computer file, in the event of a nonmatch between a test string and the original computer file.
Claim 35
Independent Claim
268 words
A method of protecting an original computer file, having a plurality of first contiguous digital signals, comprising the steps of: a) generating a test string, said test string having a plurality of second contiguous digital signals, fewer in number than said plurality of first contiguous signals of said original computer file; b) comparing said plurality of second contiguous digital signals of said test string to said plurality of first contiguous digital signals of said original computer file; c)(1) reverting to the method of step (a) and generating a different test string, in the event said comparing step results in a non-match between said plurality of second contiguous digital signals of said test string and said plurality of first contiguous digital signals of said original computer file; and c)(2) storing said test string in a protection file in the event of a match; and c)(3) reverting to the method of step (a) to c(2) until a plurality of matching test strings are stored in said protection file; (d) comparing the plurality of second contiguous digital signals of one of said plurality of matching test strings of said protection file to the plurality of first contiguous digital signals of the original computer file; and (e)(1) reverting to the method of step (d) and comparing with a different test string, until all of the test strings in said protection file have been compared, in the event of a match; and (e)(2) terminating said method and determining the existence of a change in the original computer file, in the event of a nonmatch between a test string and the original computer file.
Claim 36
Dependent Claim
32 words
The method of claim 28 further comprising the step of: parsing said original computer file into a plurality of contiguous segments, with each segment comprising a plurality of third contiguous digital signals.
Claim 37
Dependent Claim
43 words
The method of claim 29 wherein said comparing step (b) comprises attempting to match the plurality of second contiguous digital signals of said test string to said plurality of third contiguous digital signals of each of said segments of said original computer file.
Claim 38
Dependent Claim
43 words
The method of claim 29 wherein said comparing step (d) comprises attempting to match the plurality of second contiguous digital signals of said test string to said plurality of third contiguous digital signals of each of said segments of said original computer file.
Claim 39
Dependent Claim
40 words
The method of claim 28 wherein said storing step of (c)(2) further stores the location of the position in said plurality of first contiguous digital signals of said original computer file where said test string matches said original computer file.
Claim 40
Dependent Claim
12 words
The method of claim 28 wherein said test string is randomly generated.
Claim 41
Independent Claim
287 words
A method of protecting a plurality of identical original computer files, stored in a plurality of computers, each of said original computer files having a plurality of first contiguous digital signals, said method at each computer comprising the steps of: a) randomly generating a test string, said test string having a plurality of second contiguous digital signals, fewer in number than said plurality of first contiguous signals of said original computer file; b) comparing said plurality of second contiguous digital signals of said test string to said plurality of first contiguous digital signals of said original computer file; c)(1) reverting to the method of step (a), in the event said comparing step results in a non-match between said plurality of second contiguous digital signals of said test string and said plurality of first contiguous digital signals of said original computer file; and c)(2) storing said test string in a computer protection file in the event of a match; and c)(3) reverting to the method of step (a) to (c)(2) until a plurality of matching test strings are stored in said computer protection file; (d) comparing the plurality of second contiguous digital signals of one of said plurality of matching test strings of said computer protection file to the plurality of first contiguous digital signals of the original computer file; and (e)(1) reverting to the method of step (d) and comparing with a different test string, until all of the test strings in said computer protection file have been compared, in the event of a match; and (e)(2) terminating said method and determining the existence of a change in the original computer file, in the event of a nonmatch between a test string and the original computer file.
Claim 42
Independent Claim
287 words
A method of protecting a plurality of identical original computer files, stored in a plurality of computers, each of said original computer files having a plurality of first contiguous digital signals, said method at each computer comprising the steps of: a) randomly generating a test string, said test string having a plurality of second contiguous digital signals, fewer in number than said plurality of first contiguous signals of said original computer file; b) comparing said plurality of second contiguous digital signals of said test string to said plurality of first contiguous digital signals of said original computer file; c)(1) reverting to the method of step (a), in the event said comparing step results in a non-match between said plurality of second contiguous digital signals of said test string and said plurality of first contiguous digital signals of said original computer file; and c)(2) storing said test string in a computer protection file in the event of a match; and c)(3) reverting to the method of step (a) to (c)(2) until a plurality of matching test strings are stored in said computer protection file; (d) comparing the plurality of second contiguous digital signals of one of said plurality of matching test strings of said computer protection file to the plurality of first contiguous digital signals of the original computer file; and (e)(1) reverting to the method of step (d) and comparing with a different test string, until all of the test strings in said computer protection file have been compared, in the event of a match; and (e)(2) terminating said method and determining the existence of a change in the original computer file, in the event of a nonmatch between a test string and the original computer file.
Claim 43
Dependent Claim
32 words
The method of claim 34 further comprising the step of: parsing said original computer file into a plurality of contiguous segments, with each segment comprising a plurality of third contiguous digital signals.
Claim 44
Dependent Claim
43 words
The method of claim 35 wherein said comparing step (b) comprises attempting to match the plurality of second contiguous digital signals of said test string to said plurality of third contiguous digital signals of each of said segments of said original computer file.
Claim 45
Dependent Claim
50 words
The method of claim 35 wherein said comparing step (d) compares the plurality of second contiguous digital signals of one of said plurality of matching test strings of said computer protection file to the plurality of third contiguous digital signals of each of the segments of the original computer file.
Claim 46
Dependent Claim
15 words
The method of claim 34 wherein said plurality of computers are interconnected in a network.
Claim 47
Dependent Claim
40 words
The method of claim 34 wherein said storing step of (c)(2) further stores the location of the position in said plurality of first contiguous digital signals of said original computer file where said test string matches said original computer file.
References Cited (Backward Citations)
US4788684A
Cited
US4835774A
Cited
US5212697A
Cited
US5121345A
Cited
US5163057A
Cited
US5054035A
Cited
US5319776A
Cited
US5210754A
Cited
NL9101181A
Cited
US5278901A
Cited
WO1993025024A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-09-04 | 1999-03-06 | 1999-09-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-09-04 | 2003-03-06 | 2003-09-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-09-04 | 2007-03-06 | 2007-09-05 | $7700.00 | Window Closed / Lapsed |