Patent US5960170A successfully refreshed from Google Patents.
US5960170A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Event triggered iterative virus detection
Assignee: Trend Micro Inc
•
Filing: 1997-03-18
•
Granted: 1999-09-28
•
Expires: 2017-03-18
Abstract
Abstract The iterative detection and treatment of viruses using virus detection objects and virus treatment objects is disclosed. Pursuant to a request for a virus scan, a virus detection object is produced by a server and is transmitted to a client for execution. The client receives and executes the virus detection object, and the results are transmitted to the server. The server uses the results to produce an additional virus detection object which is also transmitted to the client and executed so that the results can be transmitted to the server. The iterative production and execution of virus detection objects is continued until a determination is made as to whether the targeted file or data includes a virus. Upon a determination that a targeted file or data includes a virus, a vaccine specifically tailored to the conditions presented at the client and the type of virus detected is produced, preferably in the form of a virus treatment object. The request for a virus scan can be directly made or indirectly by a triggering event. One virus detection server embodiment includes a virus information expert system that applies conditional data to predetermined knowledge about virus scanning to make determinations such as when to scan for viruses. A network diagnosis and treatment application includes a diagnostic data module, an expert system, and a maintenance requesting module. The expert system applies the diagnostic data to predetermined knowledge about the diagnosis and maintenance of a network to make determinations upon which maintenance requests are made. Preferably, the expert system includes a virus information expert system.
Inventors
- 👤 Eva Chen
- 👤 Steven Yuen-Lam Lau
- 👤 Yung-Chang Liang
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 19:53
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/50; G06F21/55; G06F21/56; G06F21/562; G06F21/564; H; H04; H04L; H04L63/00; H04L63/14; H04L63/1441; H04L63/145; H04L67/00; H04L67/01
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
113 words
For use in a system wherein a client and a server communicate with each other, a method for detecting viruses, the method comprising: transmitting a first virus detection object from the server to the client; receiving a result based upon execution of the first virus detection object; producing a second virus detection object based upon a result of the execution of the first virus detection object; transmitting the second virus detection object from the server to the client; receiving a result based upon execution of the second virus detection object; and determining whether a virus is present at the client based upon the result of the execution of the second virus detection object.
Claim 2
Dependent Claim
113 words
For use in a system wherein a client and a server communicate with each other, a method for detecting viruses, the method comprising: transmitting a first virus detection object from the server to the client; receiving a result based upon execution of the first virus detection object; producing a second virus detection object based upon a result of the execution of the first virus detection object; transmitting the second virus detection object from the server to the client; receiving a result based upon execution of the second virus detection object; and determining whether a virus is present at the client based upon the result of the execution of the second virus detection object.
Claim 3
Dependent Claim
54 words
The method of claim 1, further comprising: if it is determined that a virus is present at the client, tailoring a remedy for the virus based upon at least one of the result of the execution of the first virus detection object and the result of the execution of the second virus detection object.
Claim 4
Dependent Claim
37 words
The method of claim 2, wherein the tailoring a remedy comprises: producing a virus treatment object and transmitting the virus treatment object from the server to the client; and executing the virus treatment object at the client.
Claim 5
Dependent Claim
31 words
The method of claim 1, further comprising: determining whether a virus scan is to be performed prior to the transmitting a first virus detection object from the server to the client.
Claim 6
Dependent Claim
32 words
The method of claim 4, wherein the determining whether a virus scan is to be performed comprises detecting a request for a virus scan and determining the validity of virus scan request.
Claim 7
Dependent Claim
14 words
The method of claim 5, wherein the request is prompted by a triggering event.
Claim 8
Dependent Claim
28 words
The method of claim 6, wherein the triggering event is the first attempted internet access by the client after a predetermined time interval from a previous virus scan.
Claim 9
Dependent Claim
23 words
The method of claim 1, wherein the first virus detection object and the second virus detection object correspond to a virus scanning stage.
Claim 10
Dependent Claim
55 words
The method of claim 8, wherein the first virus detection object is used to determine whether a first virus signature portion is present in targeted files and the second virus detection object is used to determine whether a second virus signature portion is present in those targeted files that include the first virus string portion.
Claim 11
Dependent Claim
125 words
For use in a system wherein a client and a server communicate with each other, an apparatus for detecting viruses, the apparatus comprising: means for transmitting a first virus detection object from the server to the client; means for receiving a result based upon execution of the first virus detection object; means for producing a second virus detection object based upon a result of the execution of the first virus detection object; means for transmitting the second virus detection object from the server to the client; means for receiving a result based upon execution of the second virus detection object; and means for determining whether a virus is present at the client based upon the result of the execution of the second virus detection object.
Claim 12
Dependent Claim
125 words
For use in a system wherein a client and a server communicate with each other, an apparatus for detecting viruses, the apparatus comprising: means for transmitting a first virus detection object from the server to the client; means for receiving a result based upon execution of the first virus detection object; means for producing a second virus detection object based upon a result of the execution of the first virus detection object; means for transmitting the second virus detection object from the server to the client; means for receiving a result based upon execution of the second virus detection object; and means for determining whether a virus is present at the client based upon the result of the execution of the second virus detection object.
Claim 13
Dependent Claim
45 words
The apparatus of claim 10, further comprising: means for tailoring a remedy for a detected virus based upon at least one of the result of the execution of the first virus detection object and the result of the execution of the second virus detection object.
Claim 14
Dependent Claim
27 words
The apparatus of claim 10, further comprising: means for detecting a request for a virus scan; and means for determining the validity of the virus scan request.
Claim 15
Dependent Claim
14 words
The apparatus of claim 12, wherein the request is prompted by a triggering event.
Claim 16
Dependent Claim
28 words
The apparatus of claim 13, wherein the triggering event is the first attempted internet access by the client after a predetermined time interval from a previous virus scan.
Claim 17
Dependent Claim
23 words
The apparatus of claim 10, wherein the first virus detection object and the second virus detection object correspond to a virus scanning stage.
Claim 18
Dependent Claim
55 words
The apparatus of claim 15, wherein the first virus detection object is used to determine whether a first virus signature portion is present in targeted files and the second virus detection object is used to determine whether a second virus signature portion is present in those targeted files that include the first virus string portion.
Claim 19
Dependent Claim
128 words
A virus detection server for detecting viruses, the virus detection server comprising: a processor; and a memory, in communication with the processor, the memory providing instructions which, when executed by the processor, cause the processor to transmit a first virus detection object from the virus detection server to a client; receive a result based upon execution of the first virus detection object; produce a second virus detection object based upon a result of the execution of the first virus detection object; transmit the second virus detection object from the server to the client; receive a result based upon execution of the second virus detection object; and determine whether a virus is present at the client based upon the result of the execution of the second virus detection object.
Claim 20
Dependent Claim
128 words
A virus detection server for detecting viruses, the virus detection server comprising: a processor; and a memory, in communication with the processor, the memory providing instructions which, when executed by the processor, cause the processor to transmit a first virus detection object from the virus detection server to a client; receive a result based upon execution of the first virus detection object; produce a second virus detection object based upon a result of the execution of the first virus detection object; transmit the second virus detection object from the server to the client; receive a result based upon execution of the second virus detection object; and determine whether a virus is present at the client based upon the result of the execution of the second virus detection object.
Claim 21
Dependent Claim
57 words
The virus detection server of claim 17, wherein the first virus detection object is used to determine whether a first virus signature portion is present in targeted files and the second virus detection object is used to determine whether a second virus signature portion is present in those targeted files that include the first virus string portion.
Claim 22
Dependent Claim
187 words
A network diagnosis and maintenance apparatus for diagnosing and maintaining a network, the apparatus comprising: a diagnostic data module which provides diagnostic data pertaining to the network; an expert system, in communication with the diagnostic data module, which provides knowledge for the diagnosis and maintenance of the network, which applies the diagnostic data to the knowledge, and which makes determinations based upon the application of the diagnostic data to the knowledge; and a maintenance requesting module, in communication with the expert system, which requests network maintenance based upon the determinations made by the expert system; wherein the expert system is a virus information expert system which comprises: a virus knowledge module, which provides virus scanning rules, the virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope and type of virus scanning; and an inference engine, in communication with the virus knowledge module, which accesses the diagnostic data, which applies the diagnostic data to the virus scanning rules, and which makes virus scanning determinations based upon the application of the diagnostic data to the rules.
Claim 23
Dependent Claim
187 words
A network diagnosis and maintenance apparatus for diagnosing and maintaining a network, the apparatus comprising: a diagnostic data module which provides diagnostic data pertaining to the network; an expert system, in communication with the diagnostic data module, which provides knowledge for the diagnosis and maintenance of the network, which applies the diagnostic data to the knowledge, and which makes determinations based upon the application of the diagnostic data to the knowledge; and a maintenance requesting module, in communication with the expert system, which requests network maintenance based upon the determinations made by the expert system; wherein the expert system is a virus information expert system which comprises: a virus knowledge module, which provides virus scanning rules, the virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope and type of virus scanning; and an inference engine, in communication with the virus knowledge module, which accesses the diagnostic data, which applies the diagnostic data to the virus scanning rules, and which makes virus scanning determinations based upon the application of the diagnostic data to the rules.
Claim 24
Dependent Claim
42 words
The network diagnosis and maintenance apparatus of claim 19 wherein the apparatus resides within a local area network, and the maintenance requesting module directs a request for virus scanning to a virus detection server that resides outside of the local area network.
Claim 25
Independent Claim
110 words
A method for diagnosing and maintaining a network, the method comprising: providing diagnostic data pertaining to the network; providing knowledge for the diagnosis and maintenance of the network; applying the diagnostic data to the knowledge; making determinations based upon the application of the diagnostic data to the knowledge; requesting network maintenance based upon the determinations; providing virus scanning rules, the virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope of virus scanning; applying the diagnostic data to the virus scanning rules; and making virus scanning determinations based upon the application of the diagnostic data to the rules.
Claim 26
Independent Claim
110 words
A method for diagnosing and maintaining a network, the method comprising: providing diagnostic data pertaining to the network; providing knowledge for the diagnosis and maintenance of the network; applying the diagnostic data to the knowledge; making determinations based upon the application of the diagnostic data to the knowledge; requesting network maintenance based upon the determinations; providing virus scanning rules, the virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope of virus scanning; applying the diagnostic data to the virus scanning rules; and making virus scanning determinations based upon the application of the diagnostic data to the rules.
Claim 27
Dependent Claim
27 words
The method of claim 21, wherein the request for virus scanning is directed to a virus detection server based upon the step of making virus scanning determinations.
Claim 28
Dependent Claim
138 words
A virus detection server capable of communicating with a client over a network, the virus detection server comprising: an access managing module which receives requests for virus scanning, the request corresponding to a client to be scanned for viruses; a virus scanning module which provides routines used in the detection of viruses; and a virus information expert system, in communication with the access managing module and the virus scanning module, which provides conditional data pertaining to clients to be scanned for viruses; which provides virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope and type of virus scanning; which applies the conditional data to the virus scanning rules; and which makes virus scanning determinations based upon the application of the conditional data to the rules.
Claim 29
Dependent Claim
138 words
A virus detection server capable of communicating with a client over a network, the virus detection server comprising: an access managing module which receives requests for virus scanning, the request corresponding to a client to be scanned for viruses; a virus scanning module which provides routines used in the detection of viruses; and a virus information expert system, in communication with the access managing module and the virus scanning module, which provides conditional data pertaining to clients to be scanned for viruses; which provides virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope and type of virus scanning; which applies the conditional data to the virus scanning rules; and which makes virus scanning determinations based upon the application of the conditional data to the rules.
Claim 30
Dependent Claim
30 words
The virus detection server of claim 23, further comprising: a virus cleaning module, in communication with the virus information expert system which provides routines used in the treatment of viruses.
Claim 31
Dependent Claim
41 words
The virus detection server of claim 24, further comprising: means for selecting routines for the detection and treatment of viruses based upon the virus scanning determinations made by the virus information expert system and transmitting the selected routines to the client.
Claim 32
Independent Claim
99 words
A method for detecting viruses, the method comprising: receiving requests for virus scanning, the request corresponding to a client to be scanned for viruses; providing a plurality of routines used in the detection of viruses; providing conditional data pertaining to clients to be scanned for viruses; providing virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope and type of virus scanning; applying the conditional data to the virus scanning rules; and making virus scanning determinations based upon the application of the diagnostic data to the rules.
Claim 33
Independent Claim
99 words
A method for detecting viruses, the method comprising: receiving requests for virus scanning, the request corresponding to a client to be scanned for viruses; providing a plurality of routines used in the detection of viruses; providing conditional data pertaining to clients to be scanned for viruses; providing virus scanning rules including interval rules for determining whether a virus scan should be requested and diagnostic rules for determining the scope and type of virus scanning; applying the conditional data to the virus scanning rules; and making virus scanning determinations based upon the application of the diagnostic data to the rules.
Claim 34
Dependent Claim
18 words
The method of claim 26, further comprising: providing a plurality of routines used in the treatment of viruses.
Claim 35
Dependent Claim
31 words
The method of claim 27, further comprising: selecting routines for the detection and treatment of viruses based upon the making virus scanning determinations; and transmitting the selected routines to the client.
References Cited (Backward Citations)
US5159685A
Cited
US5319776A
Cited
US5475625A
Cited
US5473769A
Cited
WO1993025024A1
Cited
US5440723A
Cited
US5544308A
Cited
US5485575A
Cited
US5491791A
Cited
US5696822A
Cited
US5696701A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-09-27 | 2003-03-29 | 2003-09-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-09-27 | 2007-03-29 | 2007-09-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-09-27 | 2011-03-29 | 2011-09-28 | $7700.00 | Window Closed / Lapsed |