Method and system for providing automated updating and upgrading of antivirus applications using a computer network

• US 6,035,423 A
• Filed: 12/31/1997
• Issued: 03/07/2000
• Est. Priority Date: 12/31/1997
• Status: Expired due to Term

• Current Assignee: McAfee, LLC
• Original Assignee: Network Associates, Inc.
• Inventors: O'Donnell, Shawn, Hodges, Vernon
• Primary Examiner(s): Palys, Joseph E.
• Assistant Examiner(s): MARTIN, WILLIE R
• Application Number:
  US09/001,611
• Time in Patent Office: 797 Days
• Field of Search: 395/185, 395/4, 395/300, 709/217, 709/219, 709/225, 709/229, 709/230, 709/250, 713/201, 714/38
• US Class Current: 714/38.1
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A method for updating antivirus files on a computer using push technology is disclosed. In a preferred embodiment, updated virus signature files or other updated antivirus information is loaded onto a central antivirus server, while local push agent software is installed on the client computer. When the user of the client computer is connected to the Internet, the push agent software operates in the background to receive updated antivirus files from the central antivirus sever across the Internet, in a manner which is substantially transparent to the user. In another preferred embodiment, antivirus files on a plurality of client computers on a corporate computer network are automatically updated using push technology and automated network installation scripts. A service computer associated with the plurality of client computers receives one or batches of antivirus updates from a central antivirus server across the Internet using push technology. An automatic installation script is executed to install the antivirus updates on the client computers of the corporate computer network with a minimum of involvement from a corporate system administrator or, optionally, no involvement from the corporate system administrator.

Claims

1. A method for providing updated antivirus files to a plurality of client computers on a local area network, the client computers being supported by a common service computer on the local area network, the common service computer being operated by a system administrator, the method for providing allowing for minimal affirmative involvement by the system administrator in updating antivirus files on the plurality of client computers, the method for providing comprising the steps of:

installing the updated antivirus files on a central antivirus server, said central antivirus server comprising;

an antivirus database, said antivirus database comprising;

an identifier for the local area network;

an identifier for each of the plurality of client computers on the local area network;

a first field for storing an identifier of the operating system used by each of the plurality of client computers on the local area network; and

a second field for storing the identity of the last updated antivirus file received by each of said plurality of computers on the local area network;

transmitting the updated antivirus files from said central antivirus server to a push administration computer connected to the Internet;

transmitting the updated antivirus files from said push administration computer to said service computer using push technology; and

executing an automatic installation script at said service computer for automatically installing updated antivirus information on said plurality of client computers across the local area network;

wherein said transmitting steps include;

transmitting a ping signal from said service computer to said push administration computer, said ping signal including information identifying said service computer;

transmitting a first query from said push administration computer to said central antivirus server, said first query requesting an identity of updated antivirus files appropriate for the service computer;

transmitting a first response from said central antivirus computer to said push administration computer identifying said appropriate updated antivirus files; and

transmitting said appropriate updated antivirus files from said push administration computer to said service computer.

2. A method for providing updated antivirus files to a plurality of client computers on a local area network, the client computers being supported by a common service computer on the local area network, the common service computer being operated by a system administrator, the method for providing allowing for minimal affirmative involvement by the system administrator in updating antivirus files on the plurality of client computers, the method for providing comprising the steps of:

Installing the updated antivirus files on a central antivirus server;

receiving, at a push administration computer connected to the internet, a ping signal from said service computer, said ping signal including information identifying said service computer;

transmitting a first query from said push administration computer to said central antivirus server, said first query for requesting updated antivirus files appropriate for the service computer;

transmitting a first response from said central antivirus computer to said push administration computer including said appropriate updated antivirus files;

transmitting said appropriate updated antivirus files from said push administration computer to said service computer using push technology; and

executing an automatic installation script at said service computer for automatically installing updated antivirus information on said plurality of client computers across the local area network.