Information processing system

• US 7,155,461 B2
• Filed: 04/21/2003
• Issued: 12/26/2006
• Est. Priority Date: 12/17/2002
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Hitachi, Ltd.
• Inventors: Horiuchi, Takashi, Miyata, Kenichi
• Primary Examiner(s): Coby, Frantz
• Application Number:
  US10/420,972
• Publication Number:
  US 20040117401A1
• Time in Patent Office: 1,345 Days
• Field of Search: 707/102, 707/1, 707/200, 707/205, 707/10, 707/104.1, 713/200, 713/201, 713/188, 714/38, 482/4, 138/33
• US Class Current: 1/1
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99953 Recoverability

Abstract

Information such as a last scan time and a last update is encrypted and added to a file system that a CPU 132 on a host computer 13 manages. In accordance with the information, host 13 and a scan server work cooperatively. A scan is omitted for a file that is dated earlier than the last scan time, accelerating file access. When a file to be accessed is virus-infected, the user causing the virus infection is specified. Predetermined countermeasures can also be taken.

Claims

1. An information processing system comprising:

a storage system to store data;

a host computer to read and write a file configuring data to the storage system; and

a server computer to execute a process for detecting a virus for the file, the server computer including a database for managing virus patterns, the database having a last update time of a virus pattern indicating a time when the pattern of a virus was last updated;

wherein the storage system receives, from the server computer, the data of the file to store the data;

wherein the host computer is provided with file attribute information indicating an attribute of the file, the file attribute information including a last scan time indicating a time when the file was last processed for virus detection and location information indicating where the data of the file is located in the storage system; and

wherein the host computer determines whether a file is scanned or not on the basis of the last scan time in the file attribute information and the last update time of the virus pattern from the database of the server computer; and

if the last scan time is earlier than the last update time, the host computer asks the server computer to scan for virus in the file; and

if the last scan time is not earlier than the last update time, the host computer opens the file without virus scanning.

2. The information processing system of claim 1 wherein if the file scanned is not infected with a virus, the file server system updates the last scan time in the file configuration information.

3. The information processing system of claim 1 wherein the file scanned is not infected with a virus;

wherein if the open request contains a read request, the file server system reads the file; and

wherein if the open request contains a write request, the file server system writes to the file and updates a last updater based on an identification number of a user submitting the write request, the last updater being included in the file configuration information of the file to indicate a user who last updated contents of the file.

4. The information processing system of claim 1 wherein when the file is updated, the computer updates the last scan time to a specified value which is earlier than the last update time.

5. The information processing system of claim 1 wherein if the file scanned is infected with a virus, the file server system locates a source of the virus infection and notifies the computer of an unsuccessful open operation of the file.

6. The information processing system of claim 2 wherein the host computer uses the last updater to take security countermeasures against a user corresponding to the last updater.

7. The information processing system of claim 6 wherein the host computer encrypts the file attribute information.

8. The information processing system of claim 7 wherein the host computer uses an apparatus'"'"' serial number as an encryption key.

21. The information processing system of claim 1, further comprising:

a client computer to request an open request for a file;

wherein the host computer executes the determination whether a file is scanned or not when the host computer receives the open request for a file.

22. The information processing system of claim 21,

wherein the host computer compares the last scan time and the last update time.

23. The information processing system of claim 22,

wherein when the file is updated, the host computer changes value of the last scan time to a specified value is earlier than the last update time;

and

wherein the host computer asks the server computer to scan for virus in the file when the host computer refers to the file attribute information including the last scan time indicating the specified value.

24. The information processing system of claim 23,

wherein the host computer encrypts the file attribute information.

9. An information processing system comprising:

a scan server; and

a storage system coupled to the scan server to store data, the storage system storing a last update time of a virus pattern indicating a time when the pattern of a virus was last updated; and

a file server system including files to be accessed by a computer and file configuration information of the files, the file configuration information including a last scan time indicating a time when the file was last processed for virus detection and location information indicating where the data of the file is located in the storage system;

wherein the storage system receives, from the scan server, the data of the file to store the data;

wherein the file server system determines whether a file is scanned or not on the basis of the last scan time in the file configuration information and the last update time of the virus pattern from the storage system; and

if the last scan time is earlier than the last update time, the file server system asks the scan server to scan for virus in the file; and

if the last scan time is not earlier than the last update time, the file server system opens the file without virus scanning.

10. The information processing system of claim 9 wherein if the file scanned is not infected with a virus, the file server system updates the last scan time in the file configuration information.

11. The information processing system of claim 9 wherein the file scanned is not infected with a virus;

wherein if the open request contains a read request, the file server system reads the file; and

wherein if the open request contains a write request, the file server system writes to the file and updates a last updater based on an identification number of a user submitting the write request, the last updater being included in the file configuration information of the file to indicate a user who last updated contents of the file.

12. The information processing system of claim 11 wherein the file server system uses the last updater to take security countermeasures against a user corresponding to the last updater.

13. The information processing system of claim 12 wherein the file server system encrypts the file configuration information.

14. The information processing system of claim 9 wherein when the file is updated, the file server system updates the last scan time to a specified value which is earlier than the last update time.

15. The information processing system of claim 9 wherein if the file scanned is infected with a virus, the file server system locates a source of the virus infection and notifies the computer of an unsuccessful open operation of the file.

16. A method for processing information, comprising:

providing files to be accessed and file configuration information of the files, the file configuration information including a last scan time indicating a time when the file was last processed for virus detection and location information indicating where the data of the file is located in a storage system that receives the data of the file to store the data;

providing a scan server which includes a last update time of a virus pattern indicating a time when the pattern of a virus was last updated;

receiving an open request for a file;

determining whether a file is scanned or not on the basis of the last scan time in the file configuration information and the last scan time of the virus pattern; and

if the last scan time is earlier than the last update time, causing the scan server to scan for virus in the file; and

if the last scan time is not earlier than the last update time, opening the file without virus scanning.

17. The method of claim 16 wherein if the file scanned is not infected with a virus, updating the last scan time in the file configuration information.

18. The method of claim 16 wherein the file scanned is not infected with a virus;

and further comprising;

if the open request contains a read request, reading the file; and

if the open request contains a write request, writing to the file and updating a last updater based on an identification number of a user submitting the write request, the last updater being included in the file configuration information of the file to indicate a user who last updated contents of the file.

19. The method of claim 18 further comprising using the last updater to take security countermeasures against a user corresponding to the last updater.

20. The method of claim 19 further comprising encrypting the file configuration information.