Virus Scanning Executed Within a Storage Device to Reduce Demand on Host Resources

• US 20100154062A1
• Filed: 12/16/2008
• Published: 06/17/2010
• Est. Priority Date: 12/16/2008
• Status: Abandoned Application

• Current Assignee: SanDisk IL Ltd. (Western Digital Corporation)
• Original Assignee: SanDisk IL Ltd. (Western Digital Corporation)
• Inventors: Baram, Elad, Duzly, Yacov
• Application Number:
  US12/336,310
• Publication Number:
  US 20100154062A1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/564 by virus signature recognition

Abstract

Protection against computer viruses is provided by a storage device having a memory, a controller, and a content scanning module used for scanning files for viruses. Infected files are indicated to a virus handling module that resides external to the storage device. The virus handling module may alter access to the infected files and/or indicate their presence to other system components. Such virus scanning mechanism can be built within the controller of the storage device. The protection against computer viruses may be provided by a method that includes transferring file data from the memory to the controller, reconstructing the files from the file data, activating the controller to check the reconstructed files for viruses, and indicating the infected files to the virus handling module. By using the controller within the storage device to scan for viruses, the burden on the host can be greatly reduced.

Claims

1. A storage device for a host having a host controller, the storage device comprising:

a memory configured to store file data;

a storage device controller configured to aid in the execution of read, write, and erase operations on files reconstructed from the file data; and

a content scanning module configured for execution by the storage device controller (1) to scan the files with reference to a database of virus signatures to find files infected with viruses and (2) to indicate the infected files to a virus handling module that resides external to the storage device,

wherein the virus handling module is configured to process the infected files by (1) altering access of the host to the infected files, (2) modifying the infected files, and/or (3) indicating the presence of the infected files.

2. The storage device of claim 1, wherein the memory is a non-volatile memory.

3. The storage device of claim 2, wherein the non-volatile memory is flash memory.

4. The storage device of claim 1 further comprising:

the database of virus signatures referenced by the content scanning module.

5. The storage device of claim 1, wherein the database of virus signatures referenced by the content scanning module resides in another storage device that is peripheral to the host.

6. The storage device of claim 1, wherein the virus handling module is configured to reside on the host and to be executed by the host controller.

7. The storage device of claim 1, wherein the virus handling module alters the access of the host to the infected files by deleting the infected files and/or by modifying the access rights of the infected files.

8. The storage device of claim 1 further comprising:

a file management system configured for utilization by the storage device controller to read sectors of the non-volatile memory and to reconstruct the files for the content scanning module to scan.

9. A storage device for a host having a host controller, the storage device comprising:

memory means for storing file data;

controller means for aiding in the execution of read, write, and erase operations on files reconstructed from the file data; and

content scanning means, configured for execution by the controller means, (1) for scanning the files with reference to a database of virus signatures to find files infected with viruses and (2) for indicating the infected files to a virus handling means that resides external to the storage device,

wherein the virus handling means is a means for processing the infected files by (1) altering access of the host to the infected files, (2) modifying the infected files, and/or (3) indicating the presence of the infected files.

10. The storage device of claim 9 further comprising:

the database of virus signatures referenced by the content scanning means.

11. The storage device of claim 9, wherein the database of virus signatures referenced by the content scanning means resides in another storage device that is peripheral to the host.

12. The storage device of claim 9, wherein the virus handling means is configured to reside on the host and to be executed by the host controller.

13. The storage device of claim 9 further comprising:

a file management means, configured for utilization by the controller means, for reading sectors of the memory means and for reconstructing files for the content scanning means to scan.

14. A controller for a storage device, the controller comprising:

a first interface for communication with a host of the storage device, the host having a host controller;

a second interface for communication with a memory that is configured to store file data;

a content scanning module configured (1) to scan files reconstructed from the file data with reference to a database of virus signatures to find files infected with viruses and (2) to indicate the infected files to a virus handling module that resides external to the storage device, the virus handling module being configured to process the infected files, the processing (1) altering access of the host to the infected files, (2) modifying the infected files, and/or (3) indicating to a user of the storage device the presence of the infected files; and

a processor configured (1) to aid in the execution of read, write, and erase operations on the files and (2) to execute the content scanning module.

15. The controller of claim 14, wherein the memory is a non-volatile memory.

16. The controller of claim 15, wherein the non-volatile memory is a flash memory.

17. The controller of claim 14 further comprising:

the database of virus signatures referenced by the content scanning module.

18. The controller of claim 14, wherein the database of virus signatures referenced by the content scanning module resides in another storage device that is peripheral to the host.

19. The controller of claim 14, wherein the virus handling module resides on the host and is executed by the host controller.

20. The controller of claim 14, wherein the virus handling module alters the access of the host to the infected files by deleting the infected files and/or by modifying the access rights of the infected files.

21. The controller of claim 14 further comprising:

a file management system configured for utilization by the processor to read sectors of the non-volatile memory and to reconstruct the files for the content scanning module to scan.

22. A method of scanning for viruses within a storage device having a controller and a memory, the method comprising:

transferring file data from the memory to the controller;

reconstructing files from the file data;

activating the controller to check the files for virus infections;

indicating infected files to a virus handling module that is external to the storage device,

wherein the virus handling module is configured to (1) alter access of a host of the storage device to the infected files, (2) modify the infected files, and/or (3) indicate to a user of the storage device the presence of the infected files.

23. The method of claim 22, wherein the reconstructing of the files from the file data is performed by the controller within the storage device.

24. The method of claim 22, wherein the memory is a non-volatile memory.

25. The method of claim 24, wherein the non-volatile memory is a flash memory.

26. The method of claim 22, wherein activating the controller to check the files for virus infections includes accessing a database of virus signatures that resides in the storage device.

27. The method of claim 22, wherein activating the controller to check the files for virus infections includes accessing a database of virus signatures that resides in another storage device that is separate from the host.