System and method for remote virus scanning in wireless networks

• US 20040158741A1
• Filed: 02/07/2003
• Published: 08/12/2004
• Est. Priority Date: 02/07/2003
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Schneider, Peter
• Application Number:
  US10/360,514
• Publication Number:
  US 20040158741A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

A system and method for outsourcing received content from a user terminal for virus scanning purposes. The received content may either be received via a direct download or from peer-to-peer distribution known as superdistribution. A Digital Rights Management (DRM) agent executing within the user terminal may be provisioned with a service number or a Unique Resource Link (URL) to a network server. The DRM agent forwards content to be virus scanned to the network server and receives a notification as to the results of the scan. The DRM agent then deletes the content from the user terminal in the event that the content is virus contaminated and may request a copy of a cleaned content if the network server is capable of cleaning the content.

Claims

1. A method for providing a remote virus scanning function to a user of a terminal within a network, comprising:

sending content to a network server from a digital rights management (DRM) agent executing within the terminal;

scanning the content at the network server to identify viruses that match virus signatures provided by a virus definition repository;

providing a scan result from the network server to the DRM agent; and

regulating access to the content in response to the scan result.

2. The method of claim 1, wherein sending content to the network server comprises automatically sending the content without user intervention.

3. The method of claim 1, wherein sending content to the network server comprises sending the content in response to a user intervention.

4. The method of claim 1, wherein sending content to a network server comprises accessing a Wireless Application Protocol (WAP) gateway.

5. The method of claim 1, wherein sending content to a network server comprises communicating using at least one of a Short Message Service (SMS), an Enhanced Messaging Service (EMS), a Multimedia Messaging Service (MMS), and a General Packet Radio Service (GPRS).

6. The method of claim 5, further comprising provisioning the terminal with a service number associated with the network server prior to sending the content.

7. The method of claim 5, further comprising provisioning the terminal with a Unique Resource Link (URL) associated with the network server prior to sending the content.

8. The method of claim 5, further comprising providing identification information for identifying the network server with the content received at the terminal.

9. The method of claim 1, further comprising provisioning the terminal with a service number associated with the network server prior to sending the content.

10. The method of claim 1, further comprising provisioning the terminal with a Unique Resource Link (URL) associated with the network server prior to sending the content.

11. The method of claim 1, further comprising providing identification information for identifying the network server with the content received at the terminal.

12. The method of claim 1, wherein scanning the content comprises decrypting the content prior to scanning.

13. The method of claim 12, wherein the decrypted content is provided to a virus scanning function for comparison against virus signatures.

14. The method of claim 13, wherein the virus signatures include up-to-date virus definitions.

15. The method of claim 13, wherein the comparison against virus signatures results in a scan result.

16. The method of claim 15, wherein the scan result indicates the existence of a malicious presence within the content.

17. The method of claim 1, wherein providing the scan result comprises accessing the WAP gateway from the network server to report the scan result to the DRM agent.

18. The method of claim 1, wherein the DRM agent optionally signals the scan result to the user via the terminal.

19. The method of claim 18, wherein the signaling comprises visually alerting the user to the scan result.

20. The method of claim 18, wherein the signaling comprises audibly alerting the user to the scan result.

21. The method of claim 1, wherein regulating access to the content comprises deleting the content from the terminal.

22. The method of claim 21, further comprising obtaining a cleaned copy of the content from the network server.

23. A content distribution system, comprising:

at least one content sending terminal to dispatch content;

at least one content receiving terminal coupled to receive the content, wherein the content receiving terminal comprises a digital rights management (DRM) agent coupled to receive the content and to invoke a virus scanning operation to be remotely performed on the received content; and

a network server coupled to provide the virus scanning operation on the received content and to provide an indication of a malicious presence within the content, wherein the at least one content receiving terminal regulates further access to the received content in response to the indication of a malicious presence.

24. The content distribution system of claim 23, further comprising a download server coupled to provide content to the at least one content receiving terminal.

25. The content distribution system of claim 23, further comprising a scanning software provider coupled to the network server to provide up-to-date virus signatures.

26. The content distribution system of claim 23, further comprising a Wireless Application Protocol (WAP) gateway coupled to the at least one content receiving terminal to provide access to the network server.

27. The content distribution system of claim 26, wherein a Short Message Service Center (SMSC) is coupled to the WAP gateway to provide SMS messaging.

28. The content distribution system of claim 26, wherein a Multi-Media Message Service Center (MMSC) is coupled to the WAP gateway to provide MMS messaging.

29. A mobile terminal wirelessly coupled to a network which includes a network element capable of performing a virus scan function, the mobile terminal comprising:

a memory capable of storing at least a digital rights management (DRM) agent;

a processor coupled to the memory and configured by the DRM agent to enable transfer of content to the network element for virus scan; and

a transceiver configured to transfer the content to the network element and to receive a scan result from the network element.

30. The mobile terminal of claim 29, wherein the mobile terminal receives the content via the transceiver from other mobile terminals operating within the network.

31. The mobile terminal of claim 29, wherein the mobile terminal receives the content via the transceiver from a download server operating within the network.

32. The mobile terminal of claim 29, wherein the DRM agent instigates automatic transfer of received content to the network element for virus scan.

33. The mobile terminal of claim 29, wherein the DRM agent provides an option as to whether content is to be transferred to the network element for virus scan.

34. The mobile terminal of claim 29, wherein the DRM agent provides an option as to whether the scan result is to be reported to a user of the mobile terminal.

35. The mobile terminal of claim 34, wherein the scan result is reported visually to the user.

36. The mobile terminal of claim 34, wherein the scan result is reported audibly to the user.

37. A computer-readable medium having instructions stored thereon which are executable by a computing system for providing virus scan functionality to a terminal operable on a wireless network by performing steps comprising:

transmitting content from a digital rights management (DRM) agent executing on the terminal to a network element coupled to the wireless network;

scanning the content at the network element to identify viruses inflicting the transmitted content;

providing a scan result from the network element to the DRM agent; and

regulating access to the content at the terminal in response to the scan result.