SECURED HOME NETWORK

• US 20170180395A1
• Filed: 12/21/2015
• Published: 06/22/2017
• Est. Priority Date: 12/21/2015
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Stransky-Heilkron, Philippe
• Granted Patent: US 10,257,223 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

Malware detection logic executed by a secured device residing in a home network may receive a message from an unsecured device of a first unsecured network and intended for a destination device of the home network, the destination device comprising a security client. The malware detection logic may establish a secure communication channel between the malware detection logic of the secured device and the security client of the destination device. The malware detection logic may execute a validation test on the message to determine that the message includes malware. The malware detection logic may report an alarm to the security client of the destination device. The malware detection logic may transmit information related to the malware to a cloud computing server. The malware detection logic may prevent an application associated with the destination device from processing the message.

Claims

1. A method comprising:

receiving, by malware detection logic executed by a secured device residing in a home network, a message from an unsecured device of a first network and intended for a destination device of the home network, the destination device comprising a security client;

establishing, by the malware detection logic, a secure communication channel between the malware detection logic of the secured device and the security client of the destination device;

executing, by the malware detection logic, a validation test on the message to determine that the message includes malware;

reporting, by the malware detection logic, an alarm to the security client of the destination device;

transmitting, by the malware detection logic, information related to the malware to a cloud computing server; and

preventing, by the malware detection logic, an application associated with the destination device from processing the message.

2. The method of claim 1, further comprising before the transmitting, encrypting, by the malware detection logic, the message.

3. The method of claim 1, wherein the application resides on the secured device.

4. The method of claim 1, wherein the determining that the message includes malware comprises conducting one or more validation tests comprising at least one of a port verification, content verification for virus detection, or a deep packet inspection for detection of known attacks.

5. The method of claim 1, further comprising transmitting, by the malware detection logic, an indication of the presence of the malware to a cloud computing server.

6. The method of claim 1, further comprising transmitting, by the malware detection logic, an alarm indicative of the presence of the malware to the security client of the destination device.

7. The method of claim 1, wherein the malware detection logic is to provide one or more of a secure booting process, a secure download process, or a generation process for generating one or more keys to encrypt the message.

8. A system comprising:

a memory to store instructions; and

a processing device operatively coupled to the memory;

the processing device residing in a home network, the processing device to;

receive a message from an unsecured device of a first network and intended for a destination device of the home network, the destination device comprising a security client;

establish a secure communication channel between the secured device and the security client of the destination device;

execute a validation test on the message to determine that the message includes malware;

report an alarm to the security client of the destination device;

transmit information related to the malware to a cloud computing server; and

prevent an application associated with the destination device from processing the message.

9. A method comprising:

receiving, by malware detection logic executed by a secured device residing in a home network, a message from an unsecured device of a first network and intended for a destination device of the home network, the destination device comprising a security client;

responsive to the malware detection logic not determining whether the message includes malware;

transmitting, by the malware detection logic, the message to a cloud computing server;

responsive to receiving, from the cloud computing server, an indication that the message contains malware;

reporting, by the malware detection logic, an alarm to the security client of the destination device; and

preventing, by the malware detection logic, an application associated with the destination device from processing the message.

10. The method of claim 9, further comprising before the transmitting, encrypting, by the malware detection logic, the message.

11. The method of claim 9, further comprising determining that the secured device has insufficient processing power or needs more expertise to determine whether the message includes malware.

12. The method of claim 9, further comprising receiving an indication that an alert level of the home network has increased.

13. The method of claim 9, wherein not determining whether the message includes malware is in view of a security sensitivity of the secured device.

14. The method of claim 9, wherein the application resides on the secured device.

15. The method of claim 9, further comprising conducting one or more validation tests comprising at least one of a port verification, content verification for virus detection, or a deep packet inspection for detection of known attacks.

16. The method of claim 9, further comprising transmitting, by the malware detection logic, an indication of the presence of the malware to a cloud computing server.

17. The method of claim 9, further comprising transmitting, by the malware detection logic, an alarm indicative of the presence of the malware to the security client of the destination device.

18. The method of claim 9, wherein the malware detection logic is to provide one or more of a secure booting process, a secure download process, or a generation process for generating one or more keys to encrypt the message.

19. A system comprising:

a memory to store instructions; and

a processing device operatively coupled to the memory;

the processing device residing in a home network, the processing device to;

receive a message from an unsecured device of a first network and intended for a destination device of the home network, the destination device comprising a security client;

responsive to a malware detection logic not determining whether the message includes malware;

transmit the message to a cloud computing server;

responsive to receiving, from the cloud computing server, an indication that the message contains malware;

report an alarm to the security client of the destination device; and

prevent an application associated with the destination device from processing the message.

20. The system of claim 19, further comprising before the transmitting, the processing device is further to encrypt the message.