Updating computer files

• US 7,086,050 B2
• Filed: 09/04/2001
• Issued: 08/01/2006
• Est. Priority Date: 08/04/2000
• Status: Expired due to Term

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Pine, Kristian John, Gartside, Paul Nicholas, Barton, Christopher Andrew
• Primary Examiner(s): Chaki, Kakali
• Assistant Examiner(s): MITCHELL, JASON D
• Application Number:
  US09/944,114
• Publication Number:
  US 20020016959A1
• Time in Patent Office: 1,792 Days
• Field of Search: 717168-173, 717102-103, 717120-122, 717174-178
• US Class Current: 717/173
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A computer file update triggering technique uses tags embedded within e-mail messages sent to connected computers to indicate the existence of an updated version of a computer file to those connected computers. The connected computers may then automatically download the updated version of the computer file. The notification via e-mail of the existence of the updated computer files may be provided as a subscription service by the computer file provider.

Claims

1. A method performed by a provider of a computer file to trigger updating of said computer file used by a computer in a database of computers, said method comprising the steps of:

(i) providing an updated version of said computer file at a location from which it may be downloaded by said computer;

(ii) sending a tag indicative of availability of said updated computer file to said database of computers utilizing email addresses associated with computers in said database such that said tag is sent to said computers in said database utilizing said email addresses; and

(iii) maintaining said database of computers to which said tag is to be sent when an updated version of said computer file is made available, wherein said database of computers includes priority data indicating a priority level associated with an address, said priority level being used to control how rapidly after said updated version of said computer file is made available said tag is sent to said database of computers, said priority level controlling selection of one of a plurality of different finite delay periods after said updated version of said computer file is made available following which said tag is sent to said database of computers;

wherein said tag includes data indicative of a version level of said computer file, data indicative of a version level of a software program associated with said computer file, and data indicative of a version level of an engine associated with said software program;

wherein said tag is encrypted;

wherein said tag is part of an e-mail message header;

wherein sending said tag to said database of computers further comprises;

transmitting said tag through at least one local server and at least one mail gateway connected to said computers in said database such that said at least one local server reads said tag to determine if said data indicative of said version level of said computer file is more recent than a second version level of a computer file located on said at least one local server, and further such that said at least one mail gateway reads said tag to determine if said data indicative of said version level of said computer file is more recent than a third version level of a computer file located on said at least one mail gateway;

if said tag includes data indicative of a more recent version level than said second version level of said computer file located on said at least one local server, said at least one local server initiating a download of said computer file associated with said tag; and

if said tag includes data indicative of a more recent version level than said third version level of said computer file located on said at least one mail gateway, said at least one mail gateway initiating a download of said computer file associated with said tag.

2. A method as claimed in claim 1, wherein said computer is connected to said location via an internet link.

3. A method as claimed in claim 1, wherein computer file is computer virus definition data.

4. A method as claimed in claim 1, wherein said computer file is an anti-virus computer program file.

5. A method as claimed in claim 1, wherein sending of said tag upon availability of an updated version of said computer file is provided as a subscription service by said provider.

16. A method as claimed in claim 1, wherein said tag further includes parameter data indicating options previously applied to said e-mail message.

17. A method as claimed in claim 16, wherein said parameter data indicates scan options previously applied to said e-mail message including at least one of scan all files, scan utilizing macro heuristics, and scan utilizing all heuristics.

18. A method as claimed in claim 1, wherein each computer that receives said tag determines whether said data indicative of said version level of said computer file is more recent than said version level of a computer file located on said each computer, such that if said data indicative of said version level of said computer file is more recent, said each computer that receives said tag further determines whether said data indicative of said version level of said computer file is larger than a threshold number of versions ahead of said version level of said computer file located on said each computer, and if said threshold is met, said message is identified as possibly malicious and said e-mail message is scanned by said each computer.

6. A computer program product recorded on a computer readable medium for use by a provider of a computer file to trigger updating of said computer file used by a computer said provider having provided an updated version of said computer file at a location from which it may be downloaded by said computer, said computer program product comprising:

(i) tag sending code operable to send a tag indicative of availability of said updated computer file to said computer utilizing an email address associated with said computer such that said tag is sent to said computer utilizing said email address; and

(ii) database code operable to maintain a database of computers to which said tag is to be sent when an updated version of said computer file is made available, wherein said database includes priority data indicating a priority level associated with an address, said priority level being used to control how rapidly after said updated version of said computer file is made available said tag is sent to said computer, said priority level controlling selection of one of a plurality of different finite delay periods after said updated version of said computer file is made available following which said tag is sent to said database of computers;

wherein said tag includes data indicative of a version level of said computer file, data indicative of a version level of a software program associated with said computer file, and data indicative of a version level of an engine associated with said software program;

wherein said tag is encrypted;

wherein said tag is part of an e-mail message header;

wherein sending said tag to said computer further comprises;

transmitting said tag through a local server and a mail gateway connected to said computer such that said at least one local server reads said tag to determine if said data indicative of said version level of said computer file is more recent than a second version level of a computer file located on said at least one local server, and further such that said at least one mail gateway reads said tag to determine if said data indicative of said version level of said computer file is more recent than a third version level of a computer file located on said at least one mail gateway;

if said tag includes data indicative of a more recent version level than said second version level of said computer file located on said local server, said local server initiating a download of said computer file associated with said tag; and

if said tag includes data indicative of a more recent version level than said third version level of said computer file located on said mail gateway, said mail gateway initiating a download of said computer file associated with said tag.

7. A computer program product as claimed in claim 6, wherein said computer is connected to said location via an internet link.

8. A computer program product as claimed in claim 6, wherein computer file is computer virus definition data.

9. A computer program product as claimed in claim 6, wherein said computer file is an anti-virus computer program file.

10. A computer program product as claimed in claim 6, wherein sending of said tag upon availability of an updated version of said computer file is provided as a subscription service by said provider.

11. Apparatus for use by a provider of a computer file to trigger updating of said computer file used by a computer said provider having provided an updated version of said computer file at a location from which it may be downloaded by said computer, said apparatus comprising:

(i) a tag sender operable to send a tag indicative of availability of said updated computer file to said computer utilizing an email address associated with said computer such that said tag is sent to said computer utilizing said email address; and

(ii) database logic operable to maintain a database of computers to which said tag is to be sent when an updated version of said computer file is made available, wherein said database includes priority data indicating a priority level associated with an address, said priority level being used to control how rapidly after said updated version of said computer file is made available said tag is sent to said computer, said priority level controlling selection of one of a plurality of different finite delay periods after said updated version of said computer file is made available following which said tag is sent to said database of computers;

wherein said tag includes data indicative of a version level of said computer file, data indicative of a version level of a software program associated with said computer file, and data indicative of a version level of an engine associated with said software program;

wherein said tag is encrypted;

wherein said tag is part of an e-mail message header;

wherein sending said tag to said computer further comprises;

transmitting said tag through a local server and a mail gateway connected to said computer such that said at least one local server reads said tag to determine if said data indicative of said version level of said computer file is more recent than a second version level of a computer file located on said at least one local server, and further such that said at least one mail gateway reads said tag to determine if said data indicative of said version level of said computer file is more recent than a third version level of a computer file located on said at least one mail gateway;

if said tag includes data indicative of a more recent version level than said second version level of said computer file located on said local server, said local server initiating a download of said computer file associated with said tag; and

if said tag includes data indicative of a more recent version level than said third version level of said computer file located on said mail gateway, said mail gateway initiating a download of said computer file associated with said tag.

12. Apparatus as claimed in claim 11, wherein said computer is connected to said location via an internet link.

13. Apparatus as claimed in claim 11, wherein computer file is computer virus definition data.

14. Apparatus as claimed in claim 11, wherein said computer file is an anti-virus computer program file.

15. Apparatus as claimed in claim 11, wherein sending of said tag upon availability of an updated version of said computer file is provided as a subscription service by said provider.