Multi-Network Virus Immunization

• US 20120185941A1
• Filed: 03/27/2012
• Published: 07/19/2012
• Est. Priority Date: 04/27/2006
• Status: Active Grant

• Current Assignee: The Invention Science Fund I, L.L.C. (Intellectual Ventures LLC)
• Original Assignee: The Invention Science Fund I, L.L.C. (Intellectual Ventures LLC)
• Inventors: Jung, Edward K.Y., Levien, Royce A., Lord, Robert W., Malamud, Mark A., Rinaldo, John D. Jr., Wood, Lowell L. Jr.
• Granted Patent: US 8,839,437 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

An apparatus, device, methods, computer program product, and system are described that determine a virus associated with a communications network, and distribute an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one of a higher transmission speed, a higher transmission reliability, a higher transmission security, and/or a physically-separate transmission path, relative to transmission of the virus on the communications network.

Claims

1-70. -70. (canceled)

71. A system comprising:

circuitry for determining a virus associated with a communications network; and

circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network, wherein the distributing comprises providing the anti-viral agent to the communications network based on a determination of a potential path of the virus, the determination based on a topological analysis of the communications network.

72. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for detecting an effect of the virus with respect to the communications network.

73. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for receiving a notification of the virus from a virus detection program; and

circuitry for determining the virus, based at least partially on the notification.

74. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining a fault pattern associated with the virus and/or with the communications network; and

circuitry for determining the virus, based at least partially on the fault pattern.

75. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining a signature associated with a network device on which the virus is present, and/or was previously present; and

circuitry for determining the virus, based at least partially on the signature.

76. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for performing a comparison of a signature associated with the virus with one or more known signatures; and

circuitry for determining the virus, based at least partially on the comparison.

77. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for performing a comparison of an expected characteristic of the communications network with an actual characteristic of the communications network; and

circuitry for determining the virus, based at least partially on the comparison.

78. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining the virus associated with the communications network, the communications network including an entity-assured network.

79. The system of claim 71 wherein the circuitry for determining a virus associated with a communications network comprises:

circuitry for determining the virus associated with the communications network, the communications network including a subset of a larger network, and provided in association with the larger network.

80. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for providing the anti-viral agent to a network device of the communications network in advance of an infection of the network device by the virus, using the bypass network.

81. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for providing a reference to the anti-viral agent to a network device of the communications network, wherein the reference provides access to the anti-viral agent.

82. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is at least partially logically separate from the communications network.

83. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is associated with an entity sponsorship thereof.

84. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is associated with sponsorship by an entity, the sponsorship including assurance and/or provision of the transmission of the anti-viral agent with the at least one of a higher transmission speed, a higher transmission reliability, the higher transmission security, and/or a physically-separate transmission path.

85. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one of higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, using a network device that is in communications with both the communications network and the bypass network.

86. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, using a network traffic management device that is operable to implement rules governing the distributing of the anti-viral agent onto the communications network.

87. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, using a network traffic management device that is operable to prioritize transmission of the anti-viral agent with respect to communications data of the communications network.

88. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one of higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, using a network traffic management device that is operable to suppress and/or delay transmission of the virus relative to transmission of the anti-viral agent.

89. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one of higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, the bypass network including at least one of;

a virtual local area network, a virtual private network, a peer-to-peer network, and/or an intranet.

90. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, the bypass network including at least one of;

a satellite network, a satellite radio network, a cellular network, and/or a paging network.

91. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for providing the anti-viral agent to at least one network device of the communications network that is ahead of a propagation path of the virus on the communications network.

92. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one a higher transmission security, relative to transmission of the virus on the communications network, wherein the distributing comprises providing the anti-viral agent to the communications network based on a determination of a potential path of the virus, the determination based on a topological analysis of the communications network comprises:

circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one a higher transmission security, relative to transmission of the virus on the communications network, wherein the distributing comprises providing the anti-viral agent to the communications network based on a determination of a potential path of the virus, the determination based at least partially on a pre-existing knowledge of the communications network.

93. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission reliability wherein the bypass network is configured to provide a more reliable point-to-point transmission of the anti-viral agent between a first network device and a second network device than the communications network.

94. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission reliability wherein the bypass network is configured to provide a more reliable end-to-end transmission of the anti-viral agent between a first network device and a second network device than the communications network.

95. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is configured to provide a transmission of the anti-viral agent with a greater quality of service (QoS) than the communications network.

96. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one of higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is configured to provide a transmission of the anti-viral agent with at least one of;

a lesser number of dropped packets, a shorter delay, a lesser likelihood of out-of-order delivery, and/or fewer errors than the communications network.

97. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent to the communications network using the bypass network, wherein the bypass network is configured to provide a higher level of data encryption than that provided by the communications network.

98. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is configured to provide a more secure point-to-point transmission of the anti-viral agent between a first network device and a second network device than the communications network.

99. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is configured to provide a more secure end-to-end transmission of the anti-viral agent between a first network device and a second network device than the communications network.

100. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is configured to provide point-to-point transmission of the anti-viral agent between a first network device and a second network device using a physically-separate path from that used by the communications network to transmit the virus from the first network device to the second network device.

101. The system of claim 71 wherein the circuitry for distributing an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network further comprises:

circuitry for distributing the anti-viral agent onto the communications network using the bypass network, wherein the bypass network is configured to provide end-to-end transmission of the anti-viral agent over a physically-separate network path than that used by the communications network to transmit the virus.

102. A first system comprising:

circuitry for performing at least one of a reception or a transmission of one or more instructions in relation to a second system that includes at least;

at least one processing device; and

one or more instructions that when executed on the at least one processing device cause the at least one processing device to;

(a) determine a virus associated with a communications network, and

(b) distribute an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network, wherein the distributing the anti-viral agent onto the communications network is based on a determination of a potential path of the virus, wherein the determination includes a statistical analysis of the determination.

103. The first system of claim 102, wherein the one or more instructions of the second system that when executed on the at least one processing device cause the at least one processing device to distribute an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network, wherein the distributing the anti-viral agent onto the communications network is based on a determination of a potential path of the virus, wherein the determination includes a statistical analysis of the determination, comprises:

one or more instructions of the second system that when executed on the at least one processing device cause the at least one processing device to distribute an anti-viral agent onto the communications network using a bypass network, the bypass network configured to provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the communications network, wherein the distributing the anti-viral agent onto the communications network is based on a determination of a potential path of the virus, wherein the determination is based at least partially on a pre-existing knowledge of the communications network.

104. A method comprising:

determining a virus associated with a network, and distributing an anti-viral agent onto the network using a bypass network, the bypass network configured to;

provide transmission of the anti-viral agent with at least one higher transmission security, relative to transmission of the virus on the network; and

provide a more secure point-to-point transmission of the anti-viral agent between a first network device and a second network device.

105. The method of claim 104, further comprising:

selecting the anti-viral agent from more than one possible anti-viral agents, the selecting being at least partially based upon one or more response rules.

106. The method of claim 105, further comprising:

implementing one or more response rules associated with selecting the anti-viral agent; and

providing the anti-viral agent to the network using the bypass network.

107. The method of claim 104, wherein distributing an anti-viral agent onto the network using a bypass network comprises:

distributing an anti-viral agent onto the network based at least partially on a pre-existing knowledge of the network.