System and method for rules-based selection of network transmission interception means

• US 10,172,004 B2
• Filed: 04/27/2016
• Issued: 01/01/2019
• Est. Priority Date: 12/19/2014
• Status: Active Grant

• Current Assignee: Lab A.O. Kaspersky
• Original Assignee: Lab A.O. Kaspersky
• Inventors: Filatov, Konstantin M., Eliseev, Evgeny Y., Yablokov, Victor V.
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US15/139,798
• Publication Number:
  US 20160242037A1
• Time in Patent Office: 979 Days
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

Disclosed are systems and methods for selecting means for intercepting network transmissions. An exemplary method includes determining one or more rules associated with transmission of data by a device; determining one or more network transmission intercepting means that satisfy the one or more determined rules; selecting a network transmission intercepting means based on the determined one or more network transmission intercepting means; and causing transmissions by the device to be processed by the selected network transmission intercepting means.

Claims

1. A method for selecting a means for intercepting network transmissions for a device, the method comprising:

determining parameters of the device associated with access rights to resources of an operating system of the device and presence of resources of the operating system;

determining characteristics of available network transmission intercepting means, the available network transmission intercepting means comprising one or more of a proxy server, a virtual private network (VPN) client, and a firewall;

selecting a network transmission intercepting means whose characteristics satisfy the parameters of the operating system of the device based on one or more selection rules related to availability of the resources of the operating system, Wherein the selection rules comprise one or more of a rule associated with at least one of a security level of data transmitted by the device, an ability to process a source of intercepted data, and an ability to process data transmitted by hypertext transfer protocol (HTTP);

causing transmission by the device to be processed by the selected network transmission intercepting means in order to optimize utilization of the resources of the operating system.

2. The method of claim 1, further comprising:

installing the selected network transmission intercepting means in an operating system of the device.

3. The method of claim 1, further comprising:

updating the selected network transmission intercepting means.

4. The method of claim 1, further comprising:

determining information that is associated with at least one of the device or the transmission of data by the device,

wherein the selection of the network transmission intercepting means is further based on the determined information.

5. The method of claim 4, wherein the information comprises at least one of a type of data transmission network, a type of transmission data, or a type of data transmission protocol.

6. The method of claim 1, wherein the one or more rules include a rule specifying a minimum security level threshold for the data being transmitted in a network provided by the network transmission interception means.

7. The method of claim 1, wherein the one or more rules include at least one rule associated with the ability to determine the source from which the data was intercepted or the ability to determine for whom the intercepted data is intended.

8. A system for selecting a means for intercepting network transmissions for a device, the system comprising:

a processor configured to;

determine parameters of the device associated with access rights to resources of an operating system of the device and presence of resources of the operating system;

determine characteristics of available network transmission intercepting means, the available network transmission intercepting means comprising one or more of a proxy server, a virtual private network (VPN) client, and a firewall;

select a network transmission intercepting means whose characteristics satisfy the parameters of the operating system of the device based on one or more selection rules related to availability of the resources of the operating system, wherein the selection rules comprise one or more of a rule associated with at least one of a security level of data transmitted by the device, an ability to process a source of intercepted data, and an ability to process data transmitted by hypertext transfer protocol (HTTP);

cause transmission by the device to be processed by the selected network transmission intercepting means in order to optimize utilization of the resources of the operating system.

9. The system of claim 8, wherein the processor further configured to install the selected network transmission intercepting means.

10. The system of claim 8, wherein the processor further configured to update the selected network transmission intercepting means.

11. The system of claim 8, wherein the processor further configured to determine information that is associated with at least one of the device or the transmission of data by the device, wherein the selection of the network transmission intercepting means is further based on the determined information.

12. The system of claim 11, wherein the information comprises at least one of a type of data transmission network, a type of transmission data, or a type of data transmission protocol.

13. The system of claim 8, wherein the one or more rules include a rule-specifying a minimum security level threshold for the data being transmitted in a network provided by the network transmission interception means.

14. The system of claim 8, wherein the one or more rules include at least one rule associated with the ability to determine the source from which the data was intercepted or the ability to determine for whom the intercepted data is intended.

15. A non-transitory, computer-readable medium storing computer-executable instructions for selecting a means for intercepting network transmission, including instructions for:

determining parameters of the device associated with access rights to resources of an operating system of the device and presence of resources of the operating system;

determining characteristics of available network transmission intercepting means, the available network transmission intercepting means comprising one or more of a proxy server, a virtual private network (VPN) client, and a firewall;

selecting a network transmission intercepting means whose characteristics satisfy the parameters of the operating system of the device based on one or more selection rules related to availability of the resources of the operating system, wherein the selection rules comprise one or more of a rule associated with at least one of a security level of data transmitted by the device, an ability to process a source of intercepted data, and an ability to process data transmitted by hypertext transfer protocol (HTTP);

causing transmission by the device to be processed by the selected network transmission intercepting means in order to optimize utilization of the resources of the operating system.

16. The computer-readable medium of claim 15, wherein the selection of the network transmission intercepting means is further based on at least one or more of a type of data transmission network, a type of transmission data, and a type of data transmission protocol.

17. The computer-readable medium of claim 15, wherein the one or more rules include a rule specifying a minimum security level threshold for the data being transmitted in a network provided by the network transmission interception means.

18. The computer-readable medium of claim 15, wherein the one or more rules include at least one rule associated with the ability to determine the source from which the data was intercepted or the ability to determine for whom the intercepted data is intended.