System and method for certifying that data received over a computer network has been checked for viruses

• US 7,107,618 B1
• Filed: 09/25/2001
• Issued: 09/12/2006
• Est. Priority Date: 09/25/2001
• Status: Expired due to Term

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Zandstra, Gary, Gordon, Bryson, Kannan, Ravi
• Primary Examiner(s): Louis-Jacques, Jacques H.
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US09/965,562
• Time in Patent Office: 1,813 Days
• Field of Search: 713/188, 713/176, 709206-207, 726/24
• US Class Current: 726/24
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A method for certifying that data sent from a computer is free from viruses identified by an anti-virus database. The method includes scanning data for viruses before it is sent from the computer and attaching a certificate identifying the data as being scanned for viruses if no viruses are found during scanning. The data is sent with the certificate from the computer to a recipient computer. A method for certifying that content available on a host site is free from viruses is also disclosed.

Claims

1. A method for certifying that e-mail sent from a computer is free from viruses identified by an anti-virus database, the method comprising:

scanning an e-mail for viruses before the e-mail is sent from the computer;

attaching a certificate identifying the e-mail as being scanned for viruses if no viruses are found during scanning;

wherein the certificate includes an entity selected from the group consisting of a company logo, an icon, and a water marked seal; and

sending the e-mail with the certificate from the computer to a recipient computer;

wherein the certificate includes a link to a web site, the web site describing the virus scanning performed on the e-mail by including a type and a version of a virus scanner utilized in scanning the e-mail for viruses, in addition to information on obtaining digital signature verification software utilized in reading a digital signature added to the e-mail if no viruses are found;

wherein the computer is a network server;

wherein attaching the certificate comprises attaching the certificate at the server;

wherein the virus scanner is incorporated within a mail application that is utilized in creating the email;

wherein the email received at the recipient computer displays certificate and only displays the digital signature if the digital signature verification software is installed on the recipient computer.

2. The method of claim 1 wherein scanning the e-mail for viruses comprising scanning attachments contained within the e-mail.

3. The method of claim 1 wherein scanning the e-mail comprises automatically scanning the e-mail after a user sends the e-mail.

4. The method of claim 1 wherein the computer is connected to the Internet.

5. The method of claim 1 further comprising receiving the email at the recipient computer.

6. The method of claim 5 further comprising reading the digital signature with the digital signature verification application at the recipient computer and verifying that the e-mail has not been tampered with.

7. The method of claim 1 wherein scanning the e-mail for viruses comprises scanning the e-mail for viruses at the server.

8. The method of claim 1, wherein the e-mail and at least one attachment is scanned for viruses.

9. The method of claim 1, wherein the digital signature verification software is incorporated within the mail application for reading digital signatures included in received e-mails.

10. The method of claim 1, wherein the digital signature verification software is incorporated within the virus scanner for reading digital signatures included in received e-mails.

11. The method of claim 1, wherein the e-mail received at the recipient computer only displays the digital signature if the digital signature verification software is installed on the recipient computer and if the digital signature verification software verifies the digital signature.

12. A system for certifying that e-mail sent from a computer is free from viruses identified by an anti-virus database, the system comprising:

an anti-virus application configured to scan e-mails;

a certification application configured to add a certificate to the e-mail identifying the e-mail as being scanned for viruses if no viruses are found during scanning;

wherein the certificate includes an entity selected from the group consisting of a company logo, an icon, and a water marked seal; and

a storage medium configured to store the anti-virus database used by the antivirus application;

wherein the certificate includes a link to a web site, the web site describing the virus scanning performed on the e-mail by including a type and a version of the anti-virus application utilized in scanning the e-mail for viruses, in addition to information on obtaining digital signature verification software utilized in reading a digital signature added to the e-mail if no viruses are found;

wherein the computer is a network server;

wherein adding the certificate comprises adding the certificate at the server;

wherein the anti-virus application is incorporated within a mail application that is utilized in creating the e-mail;

wherein the email received at a recipients computer displays the certificate and only displays the digital signature if the digital signature verification software is installed on the recipient computer.

13. The system of claim 12 further comprising a processor operable to send the e-mail to the recipient computer.

14. The system of claim 13 wherein the computer sending the e-mail and the recipient computer are servers located within a computer network.

15. A computer product for certifying that e-mail sent from a computer is free from viruses identified by an anti-virus database, the product comprising:

computer code that scans an, e-mail for viruses before the e-mail is sent from the computer;

computer code that attaches a certificate identifying the e-mail as being scanned for viruses if no viruses are found during scanning;

computer code that sends the e-mail with the certificate from the computer to a recipient computer;

wherein the certificate includes an entity selected from the group consisting of a company logo, an icon, and a water marked seal; and

a computer readable medium that stores said computer codes;

wherein the certificate includes a link to a web site, the web site describing the virus scanning performed on the e-mail by including a type and a version of a virus scanner utilized in scanning the e-mail for viruses, in addition to information on obtaining digital signature verification utilized in reading a digital signature added to the e-mail if no viruses are found;

wherein the computer is a network server;

wherein attaching the certificate comprises attaching the certificate at the server;

wherein the virus scanner is incorporated within a mail application that is utilized in creating the email;

wherein the email received at the recipient computer displays the certificate and only displays the digital signature if the digital signature verification software is installed on the recipient computer.

16. The computer product of claim 15 wherein the computer readable medium is selected from the group consisting of CD-ROM, floppy disk, tape, flash memory, system memory, and hard drive.

17. The computer product of claim 15 further comprising computer code that cleans infected data.