Anti-virus protection system and method

• US 6,732,279 B2
• Filed: 01/16/2003
• Issued: 05/04/2004
• Est. Priority Date: 03/14/2001
• Status: Active Grant

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Terry George Hoffman
• Inventors: Hoffman, Terry G.
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): Baum, Ronald
• Application Number:
  US10/346,025
• Publication Number:
  US 20030131249A1
• Time in Patent Office: 474 Days
• Field of Search: 713/201, 209/229
• US Class Current: 726/24
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An anti-virus protection system and method for use within a data transmission network to protect against the transfer of viruses from a transmission originator having a discrete transmission originator code to a subscriber/recipient having a discrete subscriber/recipient IP address code over the data transmission network comprising the steps of assigning a discrete security code to the transmission originator, generating a transmission pack including a discrete subscriber/recipient IP address code element corresponding to the discrete subscriber/recipient IP address code of the subscriber/recipient, a discrete security code element corresponding to the discrete security code assigned to the transmission originator, a file extension element and a data packet element; transmitting the transmission pack to a data transfer control; authenticating the transmission pack with the discrete subscriber/recipient IP address code element, discrete security code element and discrete transmission originator code; transferring the authenticated transmission pack to the subscriber/recipient and isolating the subscriber/recipient from an unauthenticated transmission pack received by the data transfer control from a transmission originator to prevent the transfer of an unauthenticated transmission pack to the subscriber/recipient.

Claims

1. An anti-virus protection method for use within a data transmission network to protect against the transmission of unwanted data from a transmission originator having a plurality of assigned security codes corresponding to a plurality of data security levels to a subscriber/recipient having a plurality of assigned discrete subscriber/recipient IP address codes over the data transmission network including a data transfer control means and a plurality of data transmission ports corresponding to the plurality of security levels, wherein said plurality of assigned security codes includes a first data security level code element and a second data security level code element and said plurality of data transmission ports include a first data transmission port and a second data transmission port such that data are transmitted through the first data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a first data security code level element and data are transmitted through the second data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a second data security level code element, whereas the anti-virus protection method comprising the steps of:

generating a transmission pack including a discrete security code element corresponding to the data security level selected by the transmission originator of the data to be transmitted and a discrete subscriber/recipient IP address code element corresponding to the discrete subscriber/recipient IP address code of the subscriber/recipient, transmitting data and said transmission pack to the data transfer control means that includes circuitry and logic to scan said transmission packets from the transmission originator for discrete security code elements and discrete subscriber/recipient IP address code elements to control the transfer of data from transmission originators to subscriber/recipients through said data transfer control means;

scanning said transmission pack to authenticate discrete subscriber/recipient IP address code elements and discrete security code elements;

transferring data in authenticated transmission packs to the subscriber/recipient through the data transmission port corresponding to the data security level.

2. The anti-virus protection method of claim 1 wherein said plurality of assigned security codes further includes a third data security level code element such that data are transmitted through a third data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a third security level code element.

3. The anti-virus protection method of claim 1 wherein said plurality of assigned security codes further includes a third data security level code element such that transmitted data is isolated from the subscriber/recipient when an unauthenticated transmission pack is sent to prevent the transfer of the transmission pack to the subscriber/recipient.

4. The anti-virus protection method of claim 1 wherein said first data transmission port comprises a secure data port to transfer the data to the subscriber/recipient and said second data transmission port comprises a controlled data port wherein authenticated data are held for selective review by the subscriber/recipient before downloading by the subscriber/recipient.

5. The anti-virus protection method of claim 4 wherein said plurality of assigned security codes further includes a third data security level code element such that data are transmitted through a third data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a third security level code element.

6. The anti-virus protection method of claim 4 wherein said plurality of assigned security codes further includes a third data security level code element such that transmitted data is isolated from the subscriber/recipient when an unauthenticated transmission pack is sent to prevent the transfer of the transmission pack to the subscriber/recipient.

7. An anti-virus protection method for use within a data transmission network to protect against the transmission of unwanted data from a transmission originator having a plurality of assigned security codes corresponding to a plurality of data security levels to a subscriber/recipient having an assigned discrete subscriber/recipient IP address code over the data transmission network including a data transfer control means and a plurality of data transmission ports corresponding to the plurality of security levels, wherein said plurality of assigned security codes includes a first data security level code element and a second data security level code element and said plurality of data transmission ports include a first data transmission port and a second data transmission port such that data are transmitted through the first data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a first data security code level element and data are transmitted through the second data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a second data security level code element, whereas the anti-virus protection method comprising the steps of:

generating a transmission pack including a discrete security code element corresponding to the data security level selected by the transmission originator of the data to be transmitted and a discrete subscriber/recipient IP address code element corresponding to the discrete subscriber/recipient IP address code of the subscriber/recipient, a file extension element and a data packet element;

transmitting data and said transmission pack to the data transfer control means that includes circuitry and logic to scan the transmission packets from the transmission originator for discrete security code elements and discrete subscriber/recipient IP address code elements to control the transfer of data from transmission originators to subscriber/recipients through the data transfer control means;

scanning said transmission pack for discrete subscriber/recipient IP address code elements and discrete security code elements;

transferring data from authenticated transmission packs to the subscriber/recipient through the data transmission port corresponding to the data security level.

8. The anti-virus protection method of claim 7 wherein said plurality of assigned security codes further includes a third data security level code element such that data are transmitted through a third data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a third security level code element.

9. The anti-virus protection method of claim 7 wherein said plurality of assigned security codes further includes a third data security level code element such that data is isolated from the subscriber/recipient when an unauthenticated transmission pack to prevent the transfer of to the subscriber/recipient.

10. The anti-virus protection method of claim 7 wherein said first data transmission port comprises a secure data port to transfer the data to the subscriber/recipient and said second data transmission port comprises a controlled data port wherein authenticated data are held for selective review by the subscriber/recipient before downloading by the subscriber/recipient.

11. The anti-virus protection method of claim 10 wherein said plurality of assigned security codes further includes a third data security level code element such that data are transmitted through a third data transmission port to the subscriber/recipient when said discrete security code element is authenticated as a third security level code element.

12. The anti-virus protection method of claim 10 wherein said plurality of assigned security codes further includes a third data security level code element such that transmitted data is isolated from the subscriber/recipient when an unauthenticated transmission pack is sent to prevent the transfer of the transmission pack to the subscriber/recipient.