Computer virus screening methods and systems

• US 7,363,655 B2
• Filed: 11/10/2004
• Issued: 04/22/2008
• Est. Priority Date: 02/12/1998
• Status: Expired due to Fees

• Current Assignee: Intellectual Ventures I LLC (Intellectual Ventures LLC)
• Original Assignee: Auctnyc 8 LLC (Intellectual Ventures LLC)
• Inventors: Bennett, Raymond Walden III, Bretscher, John Thomas, Franczek, Edward J.
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US10/985,642
• Publication Number:
  US 20050132216A1
• Time in Patent Office: 1,259 Days
• Field of Search: 726 22- 26, 709/224, 709/229, 713/187, 713/188
• US Class Current: 726/22
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A virus screening method includes steps of routing a call between a calling party and a called party of a telephone network, receiving computer data from a first party of the calling party and the called party, and detecting a virus in the computer data. In response to detecting the virus, a step of inhibiting communication of at least a portion the computer data to a second party of the calling party and the called party is performed. A virus screening system is also disclosed.

Claims

1. A method comprising:

receiving computer data from a first computer for transmission to a second computer via a telephone network; and

screening the computer data for at least one virus within the telephone network before communicating the computer data to the second computer, wherein screening the computer data comprises forming a program from the computer data and executing the program utilizing a model corresponding to the second computer.

2. The method of claim 1 further comprising:

if the at least one virus is not detected, communicating the computer data to the second computer.

3. The method of claim 1 further comprising:

if the at least one virus is detected, performing at least one of the following;

(i) inhibiting communication of at least a portion of the computer data to the second computer;

(ii) removing the at least one virus from the computer data prior to transferring the computer data to the second computer;

(iii) communicating a message indicating that the at least one virus was detected to the second computer;

(iv) communicating a message indicating that the at least one virus was detected to the first computer; and

(v) writing data to a database indicating that the at least one virus was detected.

4. The method of claim 1 further comprising:

receiving computer data from the second computer for transmission to the first computer via the telephone network; and

screening the computer data received from the second computer for at least one virus within the telephone network before communicating the computer data received from the second computer to the first computer.

5. A system comprising:

a telephone network;

a first computer; and

a second computer in communication with the first computer via the telephone network;

wherein the telephone network is operative to screen computer data received from the first computer for at least one virus within the telephone network before communicating the computer data to the second computer, wherein screening the computer data comprises forming a program from the computer data and executing the program utilizing a model corresponding to the second computer.

6. The system of claim 5, wherein the telephone network comprises a public telephone network.

7. The system of claim 5, wherein the telephone network comprises a private telephone network.

8. The system of claim 5, wherein the telephone network comprises a virtual telephone network.

9. The system of claim 5, wherein the telephone network comprises an end office, and wherein the end office screens the computer data for the at least one virus.

10. The system of claim 5, wherein the telephone network comprises a central office, and wherein the central office screens the computer data for the at least one virus.

11. The system of claim 5, wherein the telephone network comprises a tandem office, and wherein the tandem office screens the computer data for the at least one virus.

12. The system of claim 5, wherein the telephone network comprises a service switching point, and wherein the service switching point screens the computer data for the at least one virus.

13. The system of claim 5, wherein the telephone network comprises a processor remote to at least one of an end office, a central office, a tandem office, or a service switching point, and wherein the processor screens the computer data for the at least one virus.

14. The system of claim 5, wherein the telephone network is further operative to screen computer data received from the second computer for at least one virus within the telephone network before communicating the computer data received from the second computer to the first computer.

15. The system of claim 5, wherein the telephone network is further operative to communicate the computer data to the second computer if the at least one virus is not detected.

16. The system of claim 5, wherein the telephone network is further operative to perform at least one of the following if the at least one virus is detected:

(i) inhibiting communication of at least a portion of the computer data to the second computer;

(ii) removing the at least one virus from the computer data prior to transferring the computer data to the second computer;

(iii) communicating a message indicating that the at least one virus was detected to the second computer;

(iv) communicating a message indicating that the at least one virus was detected to the first computer; and

(v) writing data to a database indicating that the at least one virus was detected.

17. A computer-readable medium having computer-readable data operative to screen computer data sent from a first computer for transmission to a second computer via a telephone network for at least one virus, the screening being performed within the telephone network before the computer data is communicated to the second computer, the screening comprising forming a program from the computer data and executing the program utilizing a model corresponding to the second computer.

18. The computer-readable medium of claim 17, wherein the computer-readable data is further operative to communicate the computer data to the second computer if the at least one virus is not detected.

19. The computer-readable medium of claim 17, wherein the computer-readable data is further operative to perform at least one of the following if the at least one virus is detected:

(i) inhibiting communication of at least a portion of the computer data to the second computer;

(ii) removing the at least one virus from the computer data prior to transferring the computer data to the second computer;

(iii) communicating a message indicating that the at least one virus was detected to the second computer;

(iv) communicating a message indicating that the at least one virus was detected to the first computer; and

(v) writing data to a database indicating that the at least one virus was detected.

20. The computer-readable medium of claim 17, wherein the computer-readable data is further operative to screen computer data sent from the second computer to the first computer via the telephone network for at least one virus, the screening being performed within the telephone network before the computer data received from the second computer is communicated to the first computer.

21. A method, comprising:

receiving, via a first network, computer data from a first computer intended for transmission to a second computer on a second network, wherein the computer data is received at a gateway computer associated with the second network; and

screening the computer data for at least one virus at a third computer coupled to the gateway computer before communicating the computer data to the second computer, wherein screening the computer data comprises forming a program from the computer data and executing the program utilizing a model corresponding to the second computer.

22. The method of claim 21, comprising sending the computer data from the third computer to the gateway computer and from the gateway computer to the second computer if the at least one virus is not detected.

23. The method of claim 21, comprising sending the computer data from the third computer to the second computer if the at least one virus is not detected.

24. The method of claim 21, comprising sending a set of changes caused by the program from the third computer to the second computer if the at least one virus is not detected.

25. A method, comprising:

receiving computer data from a first computer for transmission to a second computer via a network; and

screening the computer data for at least one virus within the network before communicating the computer data to the second computer, wherein screening the computer data comprises forming a program from the computer data and executing the program utilizing a model corresponding to the second computer.

26. The method of claim 25, comprising sending a set of changes caused by the program from the third computer to the second computer if the at least one virus is not detected.

27. A method comprising:

receiving, via a first network, computer data from a first computer intended for transmission to a second computer on a second network, wherein the computer data is received at a gateway computer associated with the second network; and

screening the computer data for at least one virus at the gateway computer before communicating the computer data to the second computer, wherein screening the computer data comprises forming a program from the computer data and executing the program utilizing a model corresponding to the second computer.

28. The method of claim 27, comprising sending the computer data to the second computer if the at least one virus is not detected.

29. The method of claim 27, comprising sending a set of changes caused by the program from the gateway computer to the second computer if the at least one virus is not detected.