Virus pattern update for mobile device

• US 7,634,262 B1
• Filed: 03/07/2006
• Issued: 12/15/2009
• Est. Priority Date: 03/07/2006
• Status: Expired due to Fees

• Current Assignee: Trend Micro Inc.
• Original Assignee: Trend Micro Inc.
• Inventors: Li, Zhonglei
• Primary Examiner(s): Pérez-Gutiérrez; Rafael
• Assistant Examiner(s): Arevalo; Joseph
• Application Number:
  US11/369,704
• Time in Patent Office: 1,379 Days
• Field of Search: 709/225, 709/224, 709/433.12, 709/206, 370/235, 370/252, 370/311, 370/352, 370/389, 370/392, 370/394, 370/236, 370/315, 455/575.4, 455/418, 455/424, 455/456.24, 455/406, 455/408, 713/188, 713/201, 713/200, 713/182, 710/20.4, 726/24, 726/22, 726/23
• US Class Current: 455/419
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading

Abstract

An updated virus pattern file is developed at an update server. A mobile management center (MMC) has a list of mobile telephone numbers and receives the new virus pattern from the update server. A Multimedia Message Service Center receives the new virus pattern and the list of mobile telephone numbers from the MMC and sends an MMS message to each of the wireless devices, including the new virus pattern as an attachment. Each wireless device replaces the old virus pattern with the new virus pattern. A unique identifier (a cryptographic signature or magic number) is added to each MMS message to enable the wireless device to recognize a new virus pattern. The pattern version and the pattern itself are merged into a single file. The file is also encrypted at the MMC and decrypted at the wireless device.

Claims

1. A method of updating a virus pattern in a handheld, wireless device, said method comprising:

receiving a new virus pattern that is arranged to aid in the detection of malware on said wireless device;

sending said new virus pattern and a telephone number of said wireless device to a Multimedia Message Service Center (MMSC);

relaying said new virus pattern from said MMSC to said wireless device, said new virus pattern being attached to an MMS message as an attachment;

adding a unique identifier to said MMS message at said MMSC;

receiving said MMS message and said new virus pattern at said wireless device;

verifying said unique identifier at said wireless device, whereby said wireless device determines that said MMS message incorporates said new virus pattern;

extracting said attachment from said MMS message at said wireless device to obtain said new virus pattern; and

replacing an old virus pattern of said wireless device with said new virus pattern, whereby antivirus software on said wireless device is updated.

2. A method as recited in claim 1 wherein said wireless device is a smart telephone, a mobile telephone, a personal digital assistant, a Blackberry or an electronic personal organizer.

3. A method as recited in claim 1 further comprising:

encrypting said new virus pattern before said new virus pattern is sent to said MMSC; and

decrypting said encrypted new virus pattern at said wireless device.

4. A method as recited in claim 1 further comprising:

merging a version number of said new virus pattern, said new virus pattern and a magic number into a single file;

sending said single file to said MMSC for relaying to said wireless device as part of said MMS message; and

extracting said version number, said new virus pattern and said magic number from said single file at said wireless device.

5. A method as recited in claim 1 further comprising:

determining a list of mobile telephone numbers, each of said mobile telephone numbers representing a handheld, wireless device;

sending said new virus pattern and said list of mobile telephone numbers to said Multimedia Message Service Center (MMSC); and

relaying said new virus pattern from said MMSC to said wireless devices using said list of mobile telephone numbers, said new virus pattern being integrated with a single MMS message destined for each of said wireless devices.

6. A method as recited in claim 1 wherein said new virus pattern is an entire virus pattern, whereby a differential pattern need not be created.

7. A method as recited in claim 1 wherein said new virus pattern has a size of at least about 40 kB.

8. A method of updating a virus pattern in a handheld, wireless device, said method comprising:

installing an old virus pattern in said wireless device, said old virus pattern arranged to aid in the detection of malware on said wireless device;

receiving an MMS message over a wireless network;

determining a unique identifier of said MMS message;

verifying that said unique identifier indicates that said MMS message includes a new virus pattern, said new virus pattern included as an attachment;

extracting said attachment from said MMS message to obtain said new virus pattern; and

replacing said old virus pattern with said new virus pattern.

9. A method as recited in claim 8 wherein said wireless device is a smart telephone, a mobile telephone, a personal digital assistant, a Blackberry or an electronic personal organizer.

10. A method as recited in claim 8 further comprising:

decrypting said new virus pattern at said wireless device.

11. A method as recited in claim 8 further comprising:

extracting a version number and a magic number from said MMS message that incorporates said new virus pattern; and

verifying that said magic number indicates that said MMS message incorporates said new virus pattern.

12. A method as recited in claim 8 wherein said new virus pattern is an entire virus pattern, whereby a differential pattern need not be created.

13. A method as recited in claim 8 wherein said new virus pattern has a size of at least about 40 kB.

14. A system for updating a virus pattern in handheld, wireless devices, said system comprising:

an update server that includes a new virus pattern, said new virus pattern arranged to aid in the detection of malware on said wireless devices;

a mobile management center (MMC) that includes a list of mobile telephone numbers, each of said mobile telephone numbers identifying one of said wireless devices, said MMC being arranged to receive said new virus pattern from said update server, wherein said MMC is further arranged to add a unique identifier to said new virus pattern before said new virus pattern is sent to said MMSC;

a Multimedia Message Service Center arranged to send MMS messages to said wireless devices, said MMSC being further arranged to receive said new virus pattern and said list of mobile telephone numbers from said MMC, and wherein said MMSC is further arranged to attach said new virus pattern to each of said MMS messages as an attachment; and

at least one of said wireless devices, said wireless device including an old virus pattern and being arranged to receive one of said MMS messages from said MMSC that incorporates said new virus pattern, said at least one wireless device being further arranged to extract said new virus pattern from said one MMS message and to verify said unique identifier of said new virus pattern, and being further arranged to replace said old virus pattern with said new virus pattern.

15. A system as recited in claim 14 wherein at least one of said wireless devices is a smart telephone, a mobile telephone, a personal digital assistant, a Blackberry or an electronic personal organizer.

16. A system as recited in claim 14 wherein said MMC is further arranged to encrypt said new virus pattern before said new virus pattern is sent to said MMSC, and wherein said wireless device being further arranged to decrypt said encrypted new virus pattern.

17. A system as recited in claim 14 wherein said MMC is further arranged to merge a version number of said new virus pattern, said new virus pattern and a magic number into a single file, and to send said single file to said MMSC for relaying to said wireless devices.

18. A system as recited in claim 14 wherein said new virus pattern is an entire virus pattern, whereby a differential pattern need not be created.

19. A method as recited in claim 14 wherein said new virus pattern has a size of at least about 40 kB.