Workstation virus lockdown in a distribution environment

• US 7,752,317 B1
• Filed: 07/29/2002
• Issued: 07/06/2010
• Est. Priority Date: 07/29/2002
• Status: Active Grant

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Beus, David, Haeger, Edward S., Cox, Richard H., Anderson, Brad R., Buckley, Martin
• Primary Examiner(s): Thomas; Joseph
• Assistant Examiner(s): HIGA, BRENDAN Y
• Application Number:
  US10/206,627
• Time in Patent Office: 2,899 Days
• Field of Search: 709217-229, 726 22- 27, 726 1- 6
• US Class Current: 709/229
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

Systems and methods for insuring that a client computer has up-to-date virus protection are provided, and include initiating a boot sequence pursuant to a boot image on a client computer for accessing a network, accessing a remote management server according to a preliminary instruction from the boot image, determining whether the client includes a latest virus file and forwarding the latest virus file if the client does not include the latest virus file.

Claims

1. A method for ensuring that a client computer has up-to-date virus protection by accessing a server for a latest virus file prior to booting a disk image on the client computer, the method comprising:

receiving, during a pre-boot process of the client computer, an access request from the client computer for a latest virus file resident on a server, the server;

i) determining whether the client computer includes the latest virus file; and

ii) forwarding to the client computer the latest virus file if the client computer does not include the latest virus file;

receiving from the server and storing the latest virus file at the client computer;

running a local virus scan at the client computer using the latest virus file;

subsequently booting the disk image on the client computer in accordance with the disk image boot up process, and wherein the disk image boot up process includes the server;

determining whether the client computer has performed the local virus scan using the latest virus file; and

providing notification for granting the client computer network access based on determination that the client computer has performed the local virus scan using the latest virus file.

2. The method according to claim 1, wherein the latest virus file is at least one of the group selected from:

a virus engine application and a virus pattern file.

3. The method according to claim 1, wherein upon the determination that the client computer has performed the local scan for viruses using the latest virus file, the server provides notification to a DHCP server for approving the forwarding of a net address to the client computer upon an address request by the client computer.

4. The method according to claim 3, further comprising forwarding a net address from the DHCP server to the client computer, wherein the net address allows the client computer to access the network.

5. The method according to claim 3, wherein network access by the client computer is denied based on the determination that the client computer has not performed a local scan using the latest virus file.

6. The method according to claim 1, wherein network access by the client computer is denied based on the determination that the client computer has not performed a local scan using the latest virus file.

7. The method according to claim 1, wherein upon the determination that the client computer has not performed the local scan using the latest virus file, the server forwards an alternate boot image to the client computer.

8. The method according to claim 7, wherein the alternate boot image comprises a partial boot image which includes instructions for booting the client computer to provide a browser to the client computer with access to a specified web server.

9. The method according to claim 8, wherein the specified web server transmits virus software to the client computer.

10. The method according to claim 9, wherein upon a transmission of the virus software, the client computer is re-booted to scan for viruses using the virus software.

11. The method according to claim 1, wherein upon the determination that the client has not performed the local scan using the latest virus file, the server provides notification to a DHCP server to deny a net address to the client computer upon a net address request by the client computer.

12. The method according to claim 11, further comprising forwarding a sub-net address from the DHCP server to the client computer upon being denied the net address, based on request from the client computer.

13. The method according to claim 12, wherein the sub-net address allows the client computer to access limited resources selected from the group consisting of:

the internet only and a specified web server only.

14. The method according to claim 1, wherein the client computer is booted from a network via a connection protocol.

15. The method according to claim 14, wherein the connection protocol is TCP/IP.

16. The method according to claim 1, wherein upon determination that the client computer does not include the latest virus file during the pre-boot process, the server notifies a DHCP server to grant a restricted sub-net address to the client computer, the restricted sub-net address allowing access to a virus software server to obtain the latest virus file.

17. The method according to claim 1, wherein the network access is granted to a local area network.

18. A computer program product for assuring that a client computer has up-to-date virus protection by accessing a server for a latest virus file prior to booting a disk image on the client computer, the computer program product embodied in a non-transitory computer readable media comprising computer instructions for:

receiving, during a pre-boot process of the client computer, an access request from the client computer for a latest virus file resident on a server, the server;

i) determining whether the client computer includes the latest virus file; and

ii) forwarding to the client computer the latest virus file if the client computer does not include the latest virus file;

receiving from the server and storing the latest virus file at the client computer;

running a local virus scan at the client computer using the latest virus file;

subsequently booting the disk image on the client computer in accordance with the disk image boot up process, and wherein the disk image boot up process includes the server;

determining whether the client computer has performed the local virus scan using the latest virus file; and

providing notification for granting the client computer network access based on determination that the client computer has performed the local virus scan using the latest virus file.

19. The computer program product according to claim 18, wherein the computer instructions also include instructions for denying network access by the client computer based on the determination that the client computer has not performed a local scan using the latest virus file.

20. The computer program product according to claim 18, wherein upon the determination that the client computer has not performed the local scan using the latest virus file, the computer instructions also include instructions for forwarding an alternate boot image from the server to the client computer.

21. The computer program product according to claim 18, wherein upon a determination that the client computer has not performed the local scan using the latest virus file, the computer instructions also include instructions for providing notification to a DHCP server to deny a net address to the client computer upon a request by the client.

22. The computer program product according to claim 18, wherein upon the determination that the client computer does not include the latest virus file during the pre-boot process, the computer instructions further include the server notifying a DHCP server to grant a restricted sub-net address to the client computer, the restricted sub-net address allowing access to a virus software server to obtain the latest virus file.

23. The computer program product according to claim 18, further comprising computer instructions for booting the client computer from a network via a connection protocol.

24. The computer program product according to claim 18, wherein upon the determination that the client computer has performed the local scan using the latest virus file, the computer instructions also include providing notification to a DHCP server for approving the forwarding of a net address to the client computer upon an address request by the client computer.

25. The computer program product according to claim 24, further comprising computer instructions for forwarding a net address from the DHCP server to the client computer upon such a request, wherein the net address allows the client computer to access the network.

26. The computer program product according to claim 24, wherein the computer instructions further include instructions for denying network access by the client computer based on the determination that the client computer has not performed a local scan using the latest virus file.

27. A system for ensuring that a client computer has up-to-date virus protection prior to booting a disk image on the client computer, the system comprising:

a server in communication with the client computer, wherein the server includes;

computer receiving code for receiving, from the client computer during a pre-boot process of the client computer, an access request for a latest virus file resident on the server;

first computer determining code for determining whether the client computer includes the latest virus file; and

computer forwarding code for forwarding to the client computer the latest virus file if the client does not include the latest virus file; and

a non-transitory computer readable media coupled to the client computer, wherein the non-transitory computer readable media coupled to the client computer includes;

computer receiving code for receiving the latest virus file from the server and storing the latest virus file at the client computer;

computer running code for running a local virus scan at the client computer using the latest virus file;

computer booting code for subsequently booting the disk image on the client computer in accordance with the disk image boot up process, wherein for the disk image boot up process, the server further includes;

second computer determining code for determining whether the client computer has performed the local virus scan using the latest virus file; and

computer notifying code for providing notification for granting the client computer network access based on determination that the client computer has performed the local virus scan using the latest virus file.

28. The system according to claim 27, wherein the computer notifying code provides notification to a DHCP server to approve or disapprove the forwarding of a net address to the client computer upon an address request by the client.

29. The system according to claim 27, wherein the computer booting code comprises computer instructions for booting the client computer from a network via a connection protocol.

30. The system according to claim 29, wherein the connection protocol is TCP/IP.

31. The system according to claim 27, wherein the network access is granted to a local area network.