Systems and methods for determining anti-virus protection status

• US 7,707,636 B2
• Filed: 06/03/2008
• Issued: 04/27/2010
• Est. Priority Date: 08/21/2002
• Status: Expired due to Fees

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Catanzano, M. Bernard
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US12/132,138
• Publication Number:
  US 20080235800A1
• Time in Patent Office: 693 Days
• Field of Search: 726/24, 713/188
• US Class Current: 726/24
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A method to automatically determine a computer'"'"'s current level of anti virus protection is described. When a client machine submits a request, a request filter determines if the version of the anti-virus protection software present on the user'"'"'s computer is sufficient to allow access to the requested destination. If the version of anti virus software on client machine is not sufficient, then the request filter directs the request to an alternate location.

Claims

1. A method for handling computerized requests comprising:

receiving a request to an external network from a computer comprising a user agent string and a specified destination in the external network, in a network component;

extracting anti-virus data from the user agent string;

comparing the anti-virus data with a standard; and

directing the request based on a result of the comparison by redirecting the request to an alternate destination with respect to the specified destination in the external network and the network component when the anti-virus data does not meet the standard, wherein the alternate destination comprises a server in communication with the network component over an internal network and wherein the server, upon receiving the redirected request, severs a connection between the computer and the server comprising the alternate destination without informing the computer why the request was denied.

2. The method of claim 1, wherein the request comprises a hypertext transfer protocol request.

3. The method of claim 1, wherein directing the request comprises directing the request to an original destination of the request when the anti-virus data meets the standard.

4. The method of claim 1, wherein directing the request comprises directing the request to an original destination of the request when the anti-virus data exceeds the standard.

5. The method of claim 1, further comprising modifying the user agent string to include the antivirus data, wherein the anti-virus data comprises an anti-virus version date, wherein the user agent string has been modified by the computer to include the anti-virus version date, wherein the anti-virus version date has been converted by the computer to a coordinated universal time-expressed version date value, and wherein the coordinated universal time-expressed version date value is at the end of the user agent string.

6. The method of claim 1, further comprising automating system updates to update one or more standards accessed for use in the comparison.

7. The method of claim 1, further comprising:

determining if the user agent string and the standard are in comparable formats; and

converting the user agent string to a format which enables comparison with the standard.

8. The method of claim 1, further comprising:

determining if the user agent string and the standard are in comparable formats, wherein the standard is dependent upon a resource being requested in the request; and

converting the standard to a format which enables comparison with the user agent string.

9. A system for handling computerized requests comprising:

a computer network;

a processor in communication with the computer network;

a request filter installed on the processor for comparing anti-virus data in a request to an external network received from a computer with a standard and directing the request based on the comparison by redirecting the request to an alternate destination with respect to a destination in the external network specified in the request and the request filter when the anti-virus data does not meet the standard, wherein the alternate destination comprises a server in communication with the request filter over an internal network and wherein the server, upon receiving the redirected request, severs a connection between the computer and the server comprising the alternate destination without informing the computer why the request was denied.

10. The system of claim 9, wherein the processor comprises a layer 7 switch.

11. The system of claim 9, wherein the processor comprises a server.

12. The system of claim 9, further comprising:

a client computer in communication with the computer network; and

a browser installed on the client computer, wherein the browser is operable for including antivirus data in a user agent string of a request.

13. A computer-readable medium on which is encoded computer program code for handling computerized requests comprising:

program code for receiving a request to an external network from a computer comprising a user agent string and a specified destination in the external network, in a network component from a computer;

program code for extracting anti-virus data from the user agent string;

program code for comparing the anti-virus data with a standard; and

program code for directing the request based on a result of the comparison, wherein directing the request based on a result of the comparison by redirecting the request to an alternate destination with respect to the specified destination and the network component when the anti-virus data does not meet the standard, wherein the alternate destination comprises a server in communication with the network component over an internal network and wherein the server, upon receiving the redirected request, severs a connection between the computer and the server comprising the alternate destination without informing the computer why the request was denied.

14. The computer-readable medium of claim 13, wherein the request comprises a hypertext transfer protocol request.

15. The computer-readable medium of claim 13, wherein the anti-virus data comprises an antivirus version date.

16. The computer-readable medium of claim 15, wherein the anti-virus version date comprises a coordinated universal time-expressed version date, wherein the coordinated universal time-expressed version date value is at the end of the user agent string.

17. The computer-readable medium of claim 13, wherein the program code for directing the request comprises program code for directing the request to an original destination of the request when the anti-virus data meets the standard.

18. The computer-readable medium of claim 13, wherein the program code for directing the request comprises program code for directing the request to an original destination of the request when the anti-virus data exceeds the standard.

19. The computer-readable medium of claim 13, wherein the program code for directing the request comprises program code for redirecting the request to an alternate destination when the standard exceeds the anti-virus data.

20. The computer-readable medium of claim 13, further comprising program code for modifying the user agent string to include the anti-virus data.