US6154844A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for attaching a downloadable security profile to a downloadable
Assignee: Finjan LLC
•
Filing: 1997-12-22
•
Granted: 2000-11-28
•
Expires: 2017-12-22
Abstract
Abstract A system comprises an inspector and a protection engine. The inspector includes a content inspection engine that uses a set of rules to generate a Downloadable security profile corresponding to a Downloadable, e.g., Java™ applets, ActiveX™ controls, JavaScript™ scripts, or Visual Basic scripts. The content inspection engine links the Downloadable security profile to the Downloadable. The set of rules may include a list of suspicious operations, or a list of suspicious code patterns. The first content inspection engine may link to the Downloadable a certificate that identifies the content inspection engine which created the Downloadable security profile. Additional content inspection engines may generate and link additional Downloadable security profiles to the Downloadable. Each additional Downloadable security profile may also include a certificate that identifies its creating content inspection engine. Each content inspection engine preferably creates a Downloadable ID that identifies the Downloadable to which the Downloadable security profile corresponds. The protection includes a Downloadable interceptor for receiving a Downloadable, a file reader coupled to the interceptor for determining whether the Downloadable includes a Downloadable security profile, an engine coupled to the file reader for determining whether to trust the Downloadable security profile, and a security policy analysis engine coupled to the verification engine for comparing the Downloadable security profile against a security policy if the engine determines that the Downloadable security profile is trustworthy. A Downloadable ID verification engine retrieves the Downloadable ID that identifies the Downloadable to which the Downloadable security profile corresponds, generates the Downloadable ID for the Downloadable and compares the generated Downloadable to the linked Downloadable. The protection engine further includes a certificate authenticator for authenticating the certificate that identifies a content inspection engine which created the Downloadable security profile as from a trusted source. The certificate authenticator can also authenticate a certificate that identifies a developer that created the Downloadable.
Inventors
- 👤 Shlomo Touboul
- 👤 Nachshon Gal
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 23:26
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/102; G; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F21/52; G06F21/53; G06F21/54; H04L63/14; H04L63/1441; H04L63/145; H04L63/16; H04L63/168; H04L9/00; H04L9/40; G06F2211/00; G06F2211/009; G06F2221/00; G06F2221/03; G06F2221/033; G06F2221/21; G06F2221/2115; G06F2221/2141
Claims Analysis
Total Claims: 53
Claim 1
Independent Claim
50 words
A method comprising: receiving by an inspector a Downloadable; generating by the inspector a first Downloadable security profile that identifies suspicious code in the received Downloadable; and linking by the inspector the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 2
Independent Claim
50 words
A method comprising: receiving by an inspector a Downloadable; generating by the inspector a first Downloadable security profile that identifies suspicious code in the received Downloadable; and linking by the inspector the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 3
Dependent Claim
18 words
The method of claim 1, wherein the first Downloadable security profile is linked to the Downloadable via attachment.
Claim 4
Dependent Claim
19 words
The method of claim 1, wherein the first Downloadable security profile is linked to the Downloadable via a pointer.
Claim 5
Dependent Claim
24 words
The method of claim 1, further comprising the step of linking to the first Downloadable security profile a Downloadable ID that identifies the Downloadable.
Claim 6
Dependent Claim
12 words
The method of claim 1, wherein the Downloadable includes a Java™ applet.
Claim 7
Dependent Claim
12 words
The method of claim 1, wherein the Downloadable includes an ActiveX™ control.
Claim 8
Dependent Claim
12 words
The method of claim 1, wherein the Downloadable includes a JavaScript™ script.
Claim 9
Dependent Claim
13 words
The method of claim 1, wherein the Downloadable includes a Visual Basic script.
Claim 10
Dependent Claim
24 words
The method of claim 1, further comprising the step of linking to the Downloadable a certificate that identifies the developer which created the Downloadable.
Claim 11
Dependent Claim
30 words
The method of claim 1, further comprising the step of linking to the Downloadable a certificate that identifies a first content inspection engine which generated the first Downloadable security profile.
Claim 12
Dependent Claim
21 words
The method of claim 1, wherein the first Downloadable security profile includes a list of operations deemed suspicious by the inspector.
Claim 13
Dependent Claim
27 words
The method of claim 1, further comprising the steps of generating a second Downloadable security profile, and linking the second Downloadable security profile to the received Downloadable.
Claim 14
Dependent Claim
47 words
The method of claim 12, further comprising the steps of linking a first certificate that identifies a first content inspection engine which generated the first Downloadable security profile, and linking an second certificate that identifies a second content inspection engine which generated the second Downloadable security profile.
Claim 15
Dependent Claim
27 words
The method of claim 13, wherein each of the first Downloadable security profile and the second Downloadable security profile includes a Downloadable ID identifying the received Downloadable.
Claim 16
Dependent Claim
58 words
An inspector system comprising: memory storing a first rule set; and a first content inspection engine for using the first rule set to generate a first Downloadable security profile that identifies suspicious code in a Downloadable, and for linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 17
Dependent Claim
58 words
An inspector system comprising: memory storing a first rule set; and a first content inspection engine for using the first rule set to generate a first Downloadable security profile that identifies suspicious code in a Downloadable, and for linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 18
Dependent Claim
16 words
The system of claim 15, wherein the first rule set includes a list of suspicious operations.
Claim 19
Dependent Claim
17 words
The system of claim 15, wherein the first rule set include a list of suspicious code patterns.
Claim 20
Dependent Claim
31 words
The system of claim 15, wherein the first content inspection engine links to the Downloadable a certificate that identifies the first content inspection engine which created the first Downloadable security profile.
Claim 21
Dependent Claim
30 words
The system of claim 15, further comprising a second content inspection engine for generating a second Downloadable security profile, and for linking the second Downloadable security profile to the Downloadable.
Claim 22
Dependent Claim
60 words
The system of claim 15, wherein the first content inspection engine links to the Downloadable a first certificate that identifies the first content inspection engine which created the first Downloadable security profile, and wherein the second content inspection engine links to the Downloadable a second certificate that identifies the second content inspection engine which created the second Downloadable security profile.
Claim 23
Dependent Claim
38 words
The system of claim 15, wherein the first content inspection engine creates a first Downloadable ID that identifies the Downloadable to which the first Downloadable security profile corresponds, and links the Downloadable ID to the Downloadable security profile.
Claim 24
Independent Claim
55 words
A method performed by a network gateway comprising: receiving a Downloadable with a linked Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client; and comparing the Downloadable security profile against a security policy.
Claim 25
Independent Claim
55 words
A method performed by a network gateway comprising: receiving a Downloadable with a linked Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client; and comparing the Downloadable security profile against a security policy.
Claim 26
Independent Claim
74 words
A method performed by a network gateway comprising: receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client: determining whether to trust the first Downloadable security profile; and comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.
Claim 27
Independent Claim
74 words
A method performed by a network gateway comprising: receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client: determining whether to trust the first Downloadable security profile; and comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.
Claim 28
Dependent Claim
22 words
The method of claim 23, wherein the step of determining includes determining whether the first Downloadable security profile corresponds to the Downloadable.
Claim 29
Dependent Claim
39 words
The method of claim 24, wherein a Downloadable ID that identifies the Downloadable to which the Downloadable security profile corresponds is linked to the Downloadable security profile, and wherein the step of determining includes retrieving the linked Downloadable ID.
Claim 30
Dependent Claim
26 words
The method of claim 25, further comprising the steps of generating the Downloadable ID for the Downloadable, and comparing the generated Downloadable to the linked Downloadable.
Claim 31
Dependent Claim
27 words
The method of claim 23, further comprising the step of generating a Downloadable security profile for the Downloadable if the first Downloadable security profile is not trustworthy.
Claim 32
Dependent Claim
37 words
The method of claim 23, wherein a certificate that identifies a content inspection engine which created the Downloadable security profile is linked to the Downloadable security profile, and wherein the step of determining includes retrieving the certificate.
Claim 33
Dependent Claim
20 words
The method of claim 28, wherein the step of determining further includes authenticating the certificate as from a trusted source.
Claim 34
Dependent Claim
31 words
The method of claim 23, wherein a certificate that identifies a developer that created the Downloadable is linked to the Downloadable, and wherein the step of determining includes retrieving the certificate.
Claim 35
Dependent Claim
20 words
The method of claim 30, wherein the step of determining further includes authenticating the certificate as from a trusted developer.
Claim 36
Dependent Claim
111 words
A network gateway system comprising: a Downloadable interceptor for receiving a Downloadable; a file reader coupled to the interceptor for determining whether the Downloadable includes a linked Downloadable security profile that identifies suspicious code in the Downloadable, wherein if the Downloadable includes a linked Downloadable security profile, the Downloadable was linked before the web server makes the Downloadable available to the web client; an engine coupled to the file reader for determining whether to trust the Downloadable security profile; and a security policy analysis engine coupled to a verification engine for comparing the Downloadable security profile against a security policy if the engine determines that the Downloadable security profile is trustworthy.
Claim 37
Dependent Claim
111 words
A network gateway system comprising: a Downloadable interceptor for receiving a Downloadable; a file reader coupled to the interceptor for determining whether the Downloadable includes a linked Downloadable security profile that identifies suspicious code in the Downloadable, wherein if the Downloadable includes a linked Downloadable security profile, the Downloadable was linked before the web server makes the Downloadable available to the web client; an engine coupled to the file reader for determining whether to trust the Downloadable security profile; and a security policy analysis engine coupled to a verification engine for comparing the Downloadable security profile against a security policy if the engine determines that the Downloadable security profile is trustworthy.
Claim 38
Dependent Claim
19 words
The system of claim 32, wherein the engine determines whether the first Downloadable security profile corresponds to the Downloadable.
Claim 39
Dependent Claim
43 words
The system of claim 33, wherein a Downloadable ID that identifies the Downloadable to which the Downloadable security profile corresponds is linked to the Downloadable security profile, and wherein the engine includes a Downloadable ID verification engine for retrieving the linked Downloadable ID.
Claim 40
Dependent Claim
27 words
The system of claim 34, wherein the Downloadable ID verification engine generates the Downloadable ID for the Downloadable and compares the generated Downloadable to the linked Downloadable.
Claim 41
Dependent Claim
33 words
The system of claim 32, further comprising a content inspection engine coupled to the engine for generating a Downloadable security profile for the Downloadable if the first Downloadable security profile is not trustworthy.
Claim 42
Dependent Claim
34 words
The system of claim 32, wherein a certificate that identifies a content inspection engine which created the Downloadable security profile is linked to the Downloadable security profile, and wherein the engine retrieves the certificate.
Claim 43
Dependent Claim
21 words
The system of claim 37, wherein the engine includes a certificate authenticator for authenticating the certificate as from a trusted source.
Claim 44
Dependent Claim
28 words
The system of claim 32, wherein a certificate that identifies a developer that created the Downloadable is linked to the Downloadable, and wherein the engine retrieves the certificate.
Claim 45
Dependent Claim
21 words
The system of claim 39, wherein the engine includes a certificate authenticator for authenticating the certificate as from a trusted developer.
Claim 46
Dependent Claim
59 words
A computer-readable storage medium storing program code for causing a data processing system on an inspector to perform the steps of: receiving a Downloadable; generating a first Downloadable security profile that identifies suspicious code in the received Downloadable; and linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 47
Dependent Claim
59 words
A computer-readable storage medium storing program code for causing a data processing system on an inspector to perform the steps of: receiving a Downloadable; generating a first Downloadable security profile that identifies suspicious code in the received Downloadable; and linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 48
Dependent Claim
88 words
A computer-readable storage medium storing program code for causing a data processing system on a network gateway to perform the steps of: receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client: determining whether to trust the first Downloadable security profile; and comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.
Claim 49
Dependent Claim
88 words
A computer-readable storage medium storing program code for causing a data processing system on a network gateway to perform the steps of: receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client: determining whether to trust the first Downloadable security profile; and comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.
Claim 50
Dependent Claim
48 words
An inspector system comprising: means for receiving a Downloadable; means for generating a first Downloadable security profile that identifies suspicious code in the received Downloadable; and means for linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 51
Dependent Claim
48 words
An inspector system comprising: means for receiving a Downloadable; means for generating a first Downloadable security profile that identifies suspicious code in the received Downloadable; and means for linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.
Claim 52
Dependent Claim
77 words
A network gateway system comprising: means for receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client: means for determining whether to trust the first Downloadable security profile; and means for comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.
Claim 53
Dependent Claim
77 words
A network gateway system comprising: means for receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client: means for determining whether to trust the first Downloadable security profile; and means for comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.
References Cited (Backward Citations)
US5077677A
Cited
US5485409A
Cited
US5359659A
Cited
US5361359A
Cited
US5724425A
Cited
US5720033A
Cited
US5864683A
Cited
US5485575A
Cited
US5638446A
Cited
US5623600A
Cited
US5859966A
Cited
US5572643A
Cited
US5692047A
Cited
US5765205A
Cited
US5761421A
Cited
US5850559A
Cited
US5784459A
Cited
US5692124A
Cited
US5832208A
Cited
US5805829A
Cited
US5740248A
Cited
US5892904A
Cited
US5956481A
Cited
US5796952A
Cited
US5974549A
Cited
US5983348A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-11-28 | 2004-05-29 | 2004-11-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-11-28 | 2008-05-29 | 2008-11-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-11-28 | 2012-05-29 | 2012-11-28 | $7700.00 | Window Closed / Lapsed |