Methods, computer networks and computer program products for reducing the vulnerability of user devices

• US 8,161,559 B2
• Filed: 08/27/2010
• Issued: 04/17/2012
• Est. Priority Date: 06/14/2005
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Aslaksen, Eric, Bowden, Steve, Ho, Spencer
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US12/870,093
• Publication Number:
  US 20100333205A1
• Time in Patent Office: 599 Days
• Field of Search: 726 22- 25, 726/2, 726/3, 713/188, 713/194
• US Class Current: 726/25
• CPC Class Codes: G06F 21/568 eliminating virus, restoring damaged files
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

Methods, computer networks, and computer program products that reduce the vulnerability of network user devices to security threats include scanning a user device connected to a network to determine whether the user device contains a particular version of an application; downloading the particular version of the application via the network in response to verifying that the user device does not contain the particular version of the application; installing the downloaded application on the user device; scanning the user device for security vulnerabilities; downloading a patch via the network in response to detecting a security vulnerability, wherein the patch is configured to remedy the security vulnerability; and executing the downloaded patch on the user device to remedy the detected security vulnerability.

Claims

1. A method of reducing the vulnerability of a network user device to security threats, comprising:

executing a first application residing on the user device that gathers information from the user device and sends the gathered information to a designated web site via the network;

scanning the user device via the first application to determine whether the user device contains a particular version of a core application;

downloading the particular version of the core application via the network in response to verifying that the user device does not contain the particular version of the core application;

installing the downloaded core application on the user device;

scanning the user device via the first application for security vulnerabilities;

downloading a patch via the network in response to detecting a security vulnerability, wherein the patch is configured to remedy the security vulnerability; and

executing the downloaded patch on the user device to remedy the detected security vulnerability.

2. The method of claim 1, further comprising sending to the web site, via the first application, information about any applications and patches downloaded to the user device.

3. The method of claim 1, wherein downloading the particular version of the core application comprises downloading at least one service pack or upgrade for the core application, and wherein installing the downloaded core application on the user device comprises installing the at least one service pack or upgrade on the user device.

4. The method of claim 1, further comprising verifying, via the web site, that a user has logged onto the network with a valid user ID prior to scanning the user device.

5. The method of claim 1, further comprising prompting a user via the first application to restart the user device after installing the downloaded core application and after executing the downloaded patch.

6. The method of claim 1, wherein the core application is selected from the group consisting of:

operating systems, browsers, and anti-virus programs.

7. The method of claim 1, wherein the downloaded patch comprises an executable program selected from the group consisting of:

worm cleaners, hot fixes, security configuration utilities, and security improvement utilities.

8. A network user device, comprising:

a processor;

memory coupled to the processor; and

a computer program residing in the memory that, when executed by the processor, causes the processor to perform the following;

execute a first application residing on the user device that gathers information from the user device and sends the gathered information to a designated web site via the network;

scan the user device to determine whether the user device contains a particular version of a core application;

download the particular version of the core application via the network in response to verifying that the user device does not contain the particular version of the core application;

install the downloaded core application on the user device;

scan the user device for security vulnerabilities;

download a patch via the network in response to detecting a security vulnerability, wherein the patch is configured to remedy the security vulnerability; and

execute the downloaded patch on the user device to remedy the detected security vulnerability.

9. The network user device of claim 8, wherein the computer program further causes the processor to send to the web site information about any applications and patches downloaded to the user device.

10. The network user device of claim 8, wherein the computer program that causes the processor to download the particular version of the core application comprises computer program that causes the processor to download at least one service pack or upgrade for the core application, and wherein the computer program that causes the processor to install the downloaded core application on the user device comprises computer program that causes the processor to install the at least one service pack or upgrade on the user device.

11. The network user device of claim 8, wherein the computer program further causes the processor to prompt a user to restart the user device after installing the downloaded core application and after executing the downloaded patch.

12. The network user device of claim 8, wherein the core application is selected from the group consisting of:

operating systems, browsers, and anti-virus programs.

13. The network user device of claim 8, wherein the downloaded patch comprises an executable program selected from the group consisting of:

worm cleaners, hot fixes, security configuration utilities, and security improvement utilities.

14. A computer program product for reducing the vulnerability of a network user device to security threats, comprising a non-transitory computer readable medium having computer readable program code embodied therein that, when executed by a processor, cause the processor to:

execute a first application residing on the user device that gathers information from the user device and sends the gathered information to a designated web site via the network;

scan the user device via the first application to determine whether the user device contains a particular version of a core application;

download the particular version of the core application via the network in response to verifying that the user device does not contain the particular version of the core application;

install the downloaded core application on the user device;

scan the user device via the first application for security vulnerabilities;

download a patch via the network in response to detecting a security vulnerability, wherein the patch is configured to remedy the security vulnerability; and

execute the downloaded patch on the user device to remedy the detected security vulnerability.

15. The computer program product of claim 14, further comprising computer readable program code that, when executed by the processor, causes the processor to send to the web site information about any applications and patches downloaded to the user device.

16. The computer program product of claim 14, further comprising computer readable program code embodied that, when executed by the processor, causes the processor to download at least one service pack or upgrade for the core application, and to install the at least one service pack or upgrade on the user device.

17. The computer program product of claim 14, further comprising computer readable program code that, when executed by a processor, causes the processor to verify, via the health check web site, that a user has logged onto the network with a valid user ID prior to scanning the user device.

18. The computer program product of claim 14, further comprising computer readable program code that, when executed by a processor, causes the processor to prompt a user via the first application to restart the user device after installing the downloaded core application and after executing the downloaded patch.