System and method for automatically detecting and then self-repairing corrupt, modified or non-existent files via a communication medium

• US 20020091924A1
• Filed: 12/17/2001
• Published: 07/11/2002
• Est. Priority Date: 12/18/2000
• Status: Active Grant

• Current Assignee: Citibank NA (Citigroup Incorporated)
• Original Assignee: BioNetrix Systems Corporation
• Inventors: Vlcan, Steve, Bakshi, Bikram S.
• Granted Patent: US 8,347,086 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/565 by checking file integrity
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method of guaranteeing the presence of secure and tamper-proof remote files over a distributed communication medium, such as the Internet, is provided. The system and method automatically detects, and then self-repairs corrupt, modified or non-existent remote files. The method first performs an integrity check on a remote file and then determines whether the integrity check passed. If the integrity check passed, then the user goes through the authentication process as normal. If the integrity check fails, then the present invention redirects to an install module in order to prepare to reinstall the remote file. Via the install module, the present invention then reinstalls the remote file and the user is then taken through the authentication process as normal.

Claims

1. A method for maintaining the integrity of a file at a remote location via a communication medium, comprising the steps of:

performing an integrity check on the file;

redirecting to a install module if said integrity check fails; and

reinstalling the file at the remote location via the communication medium, thereby maintaining the integrity of the file.

2. The method of claim 1, wherein the step of performing the integrity check comprises the steps of:

using an algorithm on the file to produce a remote value;

communicating the remote value to an integrity module via the communication medium;

using the algorithm on a mirror file to produce a secure value, wherein the mirror file is a valid copy of the file; and

communicating that the integrity check passed if the remote value and the secure value are equivalent.

3. The method of claim 2, wherein said algorithm is a hash algorithm.

4. The method of claim 1, wherein the step of redirecting to the install module comprises the steps of:

modifying the address of the install module to include a parameter to indicate the remote location of the file;

producing, from the remote location, a request based on the modified address; and

communicating the request to the install module in the login page that instantiated the file at the remote location.

5. The method of claim 1, wherein the step of reinstalling the remote file comprises the steps of:

generating a reinstallation web page, by the install module, based on a request from the remote location;

communicating the reinstallation web page, via the communication medium, to the remote location; and

reinstalling the remote file at the remote location.

6. The method of claim 1, wherein the communication medium is the Internet.

7. The method of claim 1, wherein the communication medium is a local network.

8. The method of claim 1, wherein the communication medium is a wireless network.

9. The method of claim 1, wherein the remote location is an authentication control component.

10. A system for maintaining the integrity of a file at a remote location via a communication medium, comprising:

an integrity module;

a redirect module coupled to said integrity module via the communication medium; and

an install module coupled to said redirect module via the communication medium,

wherein said integrity module performs an integrity check on the file,

wherein said redirect module redirects to said install module when the integrity check fails, and

wherein said install module reinstalls the file at the remote location thereby maintaining the integrity of the remote file.

11. The system of claim 10, further comprising an authentication control component that uses an algorithm on the file to produce a remote value, wherein said integrity module uses the algorithm on a mirror file to produce a secure value, wherein the mirror file is a valid copy of the file, and wherein said integrity module compares the remote value and the secure value to determine whether the integrity check has been passed.

12. The system of claim 10, wherein said redirect module modifies the address of said install module to include a parameter to indicate the remote location of the file, wherein the remote location produces a request based on the modified address, and wherein said remote location communicates the request to said install module in the login page that instantiated the file at the remote location.

13. The system of claim 10, wherein said install module generates a reinstallation web page based on a request from the remote location to be used to reinstall the remote file at the remote location.

14. The system of claim 10, wherein the communication medium is the Internet.

15. The system of claim 10, wherein the communication medium is a local network.

16. The system of claim 10, wherein the communication medium is a wireless network.

17. The system of claim 10, wherein the remote location is an authentication control component.

18. The system of claim 11, wherein the algorithm is a hash algorithm.