Software virus protection

• US 20070220608A1
• Filed: 03/15/2007
• Published: 09/20/2007
• Est. Priority Date: 08/31/2000
• Status: Active Grant

• Current Assignee: F-Secure Oyj
• Original Assignee: F-Secure Oyj
• Inventors: Lahti, Pasi, Bergroth, Ismo, Huopio, Simo
• Granted Patent: US 8,925,086 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/564 by virus signature recognition

Abstract

A method of protecting a wireless device against viruses, comprising maintaining a database of virus signatures on the device, updating the database by downloading virus signatures in a Short Message Service (SMS) Message, and searching for virus signatures in the memory of or files stored on the wireless device by comparison with the database.

Claims

1. A method of providing incremental updates to a virus signature database stored in the memory of a mobile wireless platform and used by anti-virus software operating on the mobile wireless platform, the method comprising:

at a network server, maintaining a server database containing signatures for identified viruses;

when a new virus is identified, adding a signature for that virus to said server database;

generating a Short Message Service or Unstructured Supplementary Services Data message containing said signature, and sending said message to the mobile wireless platform over a cellular radio access network; and

upon receipt of said message at the mobile wireless platform, adding the signature to the virus signature database.

2. A method as claimed in claim 1, wherein the message carrying the update data is cryptographically signed.

3. A method as claimed in claim 1, wherein the mobile platform comprises a mobile telephone, communicator, PDA, palmtop or laptop computer.

4. A method as claimed in claim 1, and comprising sending the update data in response to a request from the mobile platform.

5. A method as claimed in claim 4, wherein said request identifies the current status of a virus signature database.

6. A method as claimed in claim 1, wherein said message containing a signature for the identified virus is sent to the mobile wireless platform substantially immediately after the virus is identified.

7. A method according to claim 1, wherein said message is generated and sent some predefined time period after a previous signature containing message was sent and contains signatures for all or some viruses identified during that time period.

8. A method according to claim 1, wherein said message is one of a set of messages, the set of messages containing signatures for all viruses identified since a previous signature containing message was sent.

9. A method of protecting a mobile wireless platform against viruses, comprising:

maintaining a database of virus signatures on the platform;

updating the database by receiving virus signatures contained in one or more Short Message Service or Unstructured Supplementary Services Data messages sent over a cellular radio access network; and

searching for virus signatures contained in the database.

10. A mobile wireless platform arranged in use to provide anti-virus protection by maintaining a database of virus signatures, receiving over a cellular radio network Short Message Service or Unstructured Supplementary Services Data messages containing virus signatures for newly identified viruses, incrementally updating said database with the received virus signatures, and scanning data held by or received on the platform for viruses matching signatures contained in the database.

11. A method of providing incremental updates to a virus signature database stored in the memory of a mobile wireless platform and used by anti-virus software operating on the mobile wireless platform, the method comprising:

at a network server, maintaining a server database containing signatures for identified viruses;

when a new virus is identified, adding a signature for that virus to said server database, and making the signature available at a Multimedia Messaging Service Center;

generating a Multimedia Messaging Service notification containing a link to said signature at said Center, and sending the notification to said mobile wireless platform;

upon receipt of said notification at said mobile wireless platform, establishing a data connection over a cellular radio network, and using said link to download the signature; and

adding the signature to the virus signature database.

12. A mobile wireless platform arranged in use to provide anti-virus protection by maintaining a database of virus signatures, receiving a Multimedia Messaging Service notification containing a link to a storage location for signatures corresponding to newly identified viruses, establishing a data connection over a cellular radio network and using said link to download the virus signature(s), incrementally updating said database with the downloaded virus signature(s), and scanning data held by or received on the platform for viruses matching signatures contained in the database.