Method and system for detecting viruses on handheld computers

• US 6,842,861 B1
• Filed: 03/24/2000
• Issued: 01/11/2005
• Est. Priority Date: 03/24/2000
• Status: Expired due to Fees

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: Networks Associates Technology, Inc. (McAfee, LLC)
• Inventors: Haagensen, Brandt, Cox, Brian R., Kim, Do
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US09/534,957
• Time in Patent Office: 1,754 Days
• Field of Search: 713/188, 713200-201, 713/193, 713/400, 710/20, 710/40
• US Class Current: 713/188
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/567 using dedicated hardware
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A method and system for detecting viruses on handheld computers. The handheld computer is in communication with a computer system having a virus detection program. The method includes reading data from the handheld computer and writing the data at least temporarily to a database on the computer system. The data is scanned for viruses with the virus detection program. The method further includes updating data on the handheld computer based on results of the scanning.

Claims

1. A method for detecting viruses on a handheld computer in communication with a computer system having a virus detection program, the method comprising:

reading data from the handheld computer;

storing said data at least temporarily on the computer system;

scanning said data for viruses with the virus detection program;

updating data on the handheld computer based on results of the scanning on the computer system;

synchronizing said data between the handheld computer and the computer system; and

determining a priority of the synchronizing and the scanning, and performing the synchronizing or the scanning based on the priority by performing the synchronizing before the scanning if the synchronizing has a higher priority and performing the scanning before the synchronizing if the scanning has a higher priority;

wherein sacrifice of resources on the handheld computer is substantially avoided by scanning said data for the viruses with the virus detection program located on the computer system.

2. The method of claim 1 further comprising cleaning said data of viruses identified during the scanning.

3. The method of claim 2 wherein updating data on the handheld computer comprises writing cleaned data to the handheld computer and deleting infected data.

4. The method of claim 1 wherein updating data on the handheld computer comprises deleting infected data.

5. The method of claim 2 wherein updating data on the handheld computer comprises identifying infected data on the handheld computer.

6. The method of claim 1 wherein reading data comprises reading individual data records.

7. The method of claim 1 wherein reading data comprises reading program files.

8. The method of claim 1 further comprising selecting the type of data to read from the handheld computer.

9. A method for detecting viruses on a handheld computer, the method comprising:

creating a communication link between the handheld computer and a computer system having a virus detection program;

copying data from the handheld computer to the computer system;

scanning the data for viruses with the virus detection program on the computer system while the handheld computer is in communication with the computer system;

synchronizing said data between the handheld computer and the computer system;

performing the synchronizing or the scanning based on an associated priority by performing the synchronizing before the scanning if the synchronizing has a higher priority and performing the scanning before the synchronizing if the scanning has a higher priority;

wherein sacrifice of resources on the handheld computer is substantially avoided by scanning said data for the viruses with the virus detection program located on the computer system.

10. The method of claim 9 further comprising removing viruses identified in the data.

11. The method of claim 10 wherein removing viruses comprises cleaning infected data.

12. The method of claim 11 further comprising copying cleaned data from the computer system to the handheld computer and removing infected data from the handheld computer.

13. The method of claim 10 wherein removing viruses comprises deleting infected data from the handheld computer.

14. The method of claim 10 wherein removing viruses comprises quarantining infected data.

15. The method of claim 9 wherein creating a communication link comprises connecting a serial line between the personal computer and the handheld computer.

16. The method of claim 15 wherein connecting a serial line comprises placing the handheld computer in a cradle connected to the serial line.

17. The method of claim 9 wherein creating a communication link comprises remotely accessing the computer system through a modem connected to the handheld computer.

18. The method of claim 9 creating a communication link comprises creating a wireless connection between the handheld computer and the computer system.

19. The method of claim 9 wherein creating a communication link comprises creating a communication link via a network.

20. The method of claim 9 wherein copying data from the handheld computer comprises writing the data to temporary files on the computer system.

21. The method of claim 9 wherein copying data comprises copying individual data records from the handheld computer to the computer system.

22. The method of claim 9 wherein copying data comprises copying program files.

23. A system for detecting viruses on a handheld computer in communication with a computer system, the virus detection system comprising:

a file transfer manager operable to receive data from a handheld computer and at least temporarily store said data on the computer system;

a virus detection program located on the computer system and operable to scan said data for viruses; and

an antivirus controller operable to update data on the handheld computer to remove viruses identified by the virus detection program on the computer system;

wherein sacrifice of resources on the handheld computer is substantially avoided by scanning said data for the viruses with the virus detection program located on the computer system;

wherein said data is synchronized between the handheld computer and the computer system, a priority of the scanning and the synchronizing is determined, and the scanning or the synchronizing is performed based on the priority by performing the synchronizing before the scanning if the synchronizing has a higher priority and performing the scanning before the synchronizing if the scanning has a higher priority.

24. The system of claim 23 further comprising a data cleaner operable to clean infected data identified by the virus detection program.

25. A computer product for detecting viruses on a handheld computer in communication with a computer system, comprising:

computer code that reads data from the handheld computer,

computer code that stores said data at least temporarily on the computer system;

computer code that scans said data for viruses;

computer code that updates data on the handheld computer to remove viruses identified during scanning; and

a computer readable medium that stores said computer codes;

wherein sacrifice of resources on the handheld computer is substantially avoided by scanning said data for the viruses with the virus detection program located on the computer system;

wherein said data is synchronized between the handheld computer and the computer system, a priority of the scanning and the synchronizing is determined, and the scanning or the synchronizing is performed based on the priority by performing the synchronizing before the scanning if the synchronizing has a higher priority and performing the scanning before the synchronizing if the scanning has a higher priority.

26. The computer product of claim 25 wherein the computer readable medium is selected from the group consisting of CD-ROM, floppy disk, tape, flash memory, system memory, hard drive, and a data signal embodied in a carrier wave.

27. The computer product of claim 25 further comprising code that cleans infected data.

28. The computer product of claim 25 further comprising code that selects data to read from the handheld computer.

29. A method for updating software on a handheld computer in communication with a client computer system operable to connect to a network, the method comprising:

identifying software installed on the handheld computer with the client computer and transmitting information on the identified software from the client computer to a server connected to the network;

transferring updated versions of the software installed on the handheld computer from the server to the client computer based on the information on the identified software that is installed on the handheld computer, and

updating the software installed on the handheld computer with the updated versions transferred to the client computer;

wherein data is synchronized between the handheld computer and the client computer, said data is scanned, and the synchronization or the scanning is performed based on an associated priority by performing the synchronizing before the scanning if the synchronizing has a higher priority and performing the scanning before the synchronizing if the scanning has a higher priority.

30. The method of claim 29 further comprising initiating communication between the handheld computer and the client computer.

31. The method of claim 30 wherein initiating communication comprises connecting a serial line between the handheld computer and the client computer.

32. The method of claim 31 wherein connecting a serial line comprises placing the handheld computer in a cradle connected to the serial line.

33. The method of claim 29 wherein the network is the Internet.

34. The method of claim 29 wherein the network is a local area network.

35. The method of claim 29 further comprising notifying a user of the handheld computer that the installed software has been updated.

36. A computer product for updating software on a handheld computer in communication with a client computer operable to connect to a network, the product comprising:

computer code that reads data from the handheld computer to identify software installed on the handheld computer;

computer code that transmits information on the identified software from the client computer to a server connected to the network;

computer code that transfers updated versions of the software installed on the handheld computer from the server to the client computer based on the information on the identified software that is installed on the handheld computer,

computer code that updates the software installed on the handheld computer with the updated versions transferred to the client computer; and

a computer readable medium that stores said computer codes;

wherein data is synchronized between the handheld computer and the client computer, said data is scanned, and the synchronization or the scanning is performed based on an associated priority by performing the synchronizing before the scanning if the synchronizing has a higher priority and performing the scanning before the synchronizing if the scanning has a higher priority.