Antivirus stand-alone network or internet appliance and methods therefor

• US 8,327,446 B2
• Filed: 05/06/2002
• Issued: 12/04/2012
• Est. Priority Date: 05/06/2002
• Status: Active Grant

• Current Assignee: Trend Micro Inc.
• Original Assignee: Trend Micro Inc.
• Inventors: Liang, Jeremy, Lee, Jin-Shi, Yu, Tsung-Lin
• Primary Examiner(s): Davis, Zachary A
• Assistant Examiner(s): PAN, JOSEPH T
• Application Number:
  US10/138,478
• Publication Number:
  US 20030208687A1
• Time in Patent Office: 3,865 Days
• Field of Search: 713/1, 713/2, 713/188, 713/194, 380/200, 380/201, 380/255, 380/277, 726/2, 726 22- 25, 717/170
• US Class Current: 726/24
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer

Abstract

The invention provides an antivirus network or Internet appliance and methods therefor. A preferred embodiment of the Internet appliance according to the invention comprises an interface connecting the Internet appliance to a terminal, a memory, and a network connection connecting the Internet appliance to a network (such as a wide area network (WAN) or the Internet) wherein data in the network are operable with a corresponding network protocol (such as TCP/IP). Protocol-level programs are stored in the memory for receiving data being transmitted from the network to the terminal through the Internet appliance wherein the protocol-level programs are compatibly operable with the network protocol. Application-level antivirus programs are stored in the memory for detecting computer viruses in the received data serving as a firewall against the detected computer viruses for the terminal. The Internet appliance according to this particular embodiment of the invention further includes a processor (such as a central processor unit or CPU) and an operating system for implementing the protocol-level programs and the antivirus programs, wherein the antivirus programs are advantageously transparent to the terminal.

Claims

1. An antivirus Internet appliance comprising:

an interface connecting said Internet appliance to a terminal;

a network connection connecting said Internet appliance to a network selected from the group consisting of a wide area network (WAN) and the Internet wherein data in said network are operable with a corresponding network protocol;

a memory;

protocol-level programs stored in said memory for receiving data being transmitted from said network to said terminal through said Internet appliance wherein said protocol-level programs are compatibly operable with said network protocol;

application-level antivirus programs stored in said memory for detecting computer viruses in said received data wherein said antivirus programs serve as a firewall against said detected computer viruses for said terminal;

a processor and an operating system stored in said memory for implementing said protocol-level programs and said antivirus programs

a redundancy control software component stored in said memory that controls a pointer switch for switching between an upgraded anti-virus program and a non-upgraded anti-virus program;

wherein said antivirus programs are transparent to said terminal; and

wherein said anti-virus Internet appliance has four operational modes that include a continuous-service mode, a maintenance mode in which service is terminated, an idle mode, and a service-maintenance mode in which an antivirus service continues with maintenance on the antivirus Internet appliance being performed in the background, and wherein transitions between modes include;

     1) continuous-service mode to maintenance mode,

     2) maintenance mode to continuous-service mode,

     3) maintenance mode to idle mode,

     4) continuous-service mode to idle mode,

     5) idle mode to continuous-service mode,

     6) continuous-service mode to service-maintenance mode,

     7) and service-maintenance mode to continuous-service mode.

2. The Internet appliance of claim 1 wherein said terminal is one selected from the group consisting of a microcomputer, a workstation, a personal computer (PC), a notebook computer, a laptop computer, a palmtop computer, a wireless computer, and a personal digital assistant (PDA).

3. The Internet appliance of claim 1 further comprising an application-level upgrade program stored in said memory for upgrading a program in said Internet appliance wherein said upgrade program is transparent to said terminal.

4. The Internet appliance of claim 3 wherein said network is connected to a remote server;

wherein said upgrade program performs an upgrade download from said remote server; and

wherein said upgrade download is transparent to said terminal.

5. The Internet appliance of claim 4 wherein said upgrade download is one selected from the group consisting of an antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

6. The Internet appliance of claim 3 wherein said network is connected to a remote server;

wherein said upgrade program connects to said remote server as said terminal accesses said network through said Internet appliance;

wherein said upgrade program performs an upgrade download from said remote server if said remote server instructs said upgrade download; and

wherein said upgrade program upgrades said antivirus programs after said upgrade download is performed.

7. The Internet appliance of claim 3 wherein said network is connected to a remote server storing a plurality of upgrade downloads;

wherein said upgrade program connects to said remote server as said terminal accesses said network through said Internet appliance;

wherein said upgrade program compares said antivirus programs with said upgrade downloads to determine which of said upgrade downloads is required; and

wherein said upgrade program upgrades said antivirus programs with said required upgrade download.

8. The Internet appliance of claim 3 wherein said upgrading is one selected from the group consisting of an antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

9. The Internet appliance of claim 3 wherein said upgrade program is stored at a firmware level in said Internet appliance.

10. The Internet appliance of claim 3 wherein said network is connected to a server storing a plurality of upgrade downloads;

wherein said terminal further comprises a plurality of application programs stored therein;

wherein said upgrade program connects to said server as said terminal accesses said network through said Internet appliance;

wherein said upgrade program compares said application programs stored in said terminal with said upgrade downloads to determine which of said upgrade download is required; and

wherein said upgrade program upgrades said application programs stores in said terminal with said required upgrade download.

11. The Internet appliance of claim 10 wherein said required upgrade download is one selected from the group consisting of a utility program upgrade, an operating system upgrade, an electronic mail program upgrade, and a browser program upgrade.

12. The Internet appliance of claim 3 further comprising an idle mode when said terminal accesses said network through said Internet appliance wherein said upgrade program idles in said idle mode.

13. The Internet appliance of claim 3 further comprising a maintenance mode when said terminal accesses said network through said Internet appliance wherein said upgrade program performs said upgrading in said maintenance mode.

14. The Internet appliance of claim 3 further comprising a service-maintenance mode when said terminal accesses said network through said Internet appliance wherein said antivirus programs continuously detect said received data and said upgrade program performs said upgrading in a generally simultaneous manner in said service-maintenance mode.

15. The Internet appliance of claim 3 further comprising:

a continuous service mode when said terminal accesses said network through said Internet appliance wherein said antivirus programs continuously detect said received data in said continuous service mode;

an idle mode when said terminal accesses said network through said Internet appliance wherein said upgrade program idles in said idle mode;

a maintenance mode when said terminal accesses said network through said Internet appliance wherein said upgrade program performs said upgrading in said maintenance mode; and

a service-maintenance mode when said terminal accesses said network through said Internet appliance wherein said antivirus programs continuously detect said received data and said upgrade program performs said upgrading in a generally simultaneous manner in said service-maintenance mode;

wherein said continuous service mode, said idle mode, said maintenance mode and said service-maintenance mode are freely transitionable from one mode to another.

16. The Internet appliance of claim 1 further comprising an application-level browser program stored in said memory for displaying information retrieved from said network at said terminal.

17. The Internet appliance of claim 16 wherein said network is connected to a remote server;

wherein said browser program connects to said remote server as said terminal accesses said network through said Internet appliance;

wherein said browser program displays a message having upgrade options at said terminal if said remote server instructs said message.

18. The Internet appliance of claim 17 wherein said message is one selected from the group consisting of a product registration request, virus alert, hacker scheme alert, additional feature announcement, antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

19. The Internet appliance of claim 18 further comprising an application-level upgrade program stored in said memory for performing said upgrade options for said antivirus programs.

20. The Internet appliance of claim 17 wherein said upgrade options are selected from the group consisting of antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

21. The Internet appliance of claim 1 wherein said protocol-level programs and said antivirus program are stored at a firmware level in said Internet appliance.

22. The Internet appliance of claim 1 further comprising a continuous service mode when said terminal accesses said network through said Internet appliance wherein said antivirus programs continuously detect said received data in said continuous service mode.

23. The Internet appliance of claim 1 wherein said interface is one selected from the group consisting of an Ethernet interface a local area network (LAND) interface, and said network connection is one selected from the group consisting of a modem, a cable modem, a T1 line, a digital subscriber line (DSL) and an advanced digital subscriber line (ADSL).

24. An antivirus method for a terminal connected to a network using an Internet appliance disposed therebetween, comprising the steps of:

transmitting data from said network to said terminal through said Internet appliance;

receiving said transmitted data using protocol-level programs stored in a memory of said Internet appliance;

detecting computer viruses in said received data using application-level antivirus programs stored in said memory of said Internet appliance wherein said antivirus programs serve as a firewall against said detected computer viruses for said terminal, wherein said detecting stop is transparent to said terminal;

determining whether an upgrade to an anti-virus program was successful and using the upgraded anti-virus program if the upgrade was successful and using a non-upgraded anti-virus program if not successful; and

transitioning among four operational modes including a continuous-service mode, a maintenance mode in which service is terminated, an idle mode, and a service-maintenance mode in which an antivirus service continues with maintenance on the Internet appliance being performed in the background;

wherein the transitions include;

     1) continuous-service mode to maintenance mode,

     2) maintenance mode to continuous-service mode,

     3) maintenance mode to idle mode,

     4) continuous-service mode to idle mode,

     5) idle mode to continuous-service mode,

     6) continuous-service mode to service-maintenance mode,

     7) and service-maintenance mode to continuous-service mode.

26. The method of claim 24 wherein said terminal is one selected from the group consisting of a microcomputer, a workstation, a personal computer (PC), a notebook computer, a laptop computer, a palmtop computer, a wireless computer, and a personal digital assistant (PDA).

27. The method of claim 24 further comprising the step of upgrading a program in said Internet appliance using an application-level upgrade program stored in said memory wherein said upgrading step is transparent to said terminal.

28. The method of claim 27 further comprising the steps of:

connecting said network to a remote server;

performing an upgrade download from said remote server using said upgrade program;

wherein said upgrade download is transparent to said terminal.

29. The method of claim 28 wherein said upgrade download is one selected from the group consisting of an antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

30. The method of claim 27 further comprising the steps of:

connecting said network to a remote server;

accessing said network through said Internet appliance from said terminal;

connecting said upgrade program to said remote server;

performing an upgrade download from said remote server using said upgrade program if said remote server instructs said upgrade download; and

wherein said upgrade program upgrades said antivirus programs after said upgrade download is performed.

31. The method of claim 27 further comprising the steps of:

connecting said network to a remote server storing a plurality of upgrade downloads;

accessing said network through said Internet appliance from said terminal;

connecting said upgrade program to said remote server;

comparing said antivirus programs with said upgrade downloads stored at said remote server to determine which of said upgrade downloads is required; and

upgrading said antivirus programs with said required upgrade download using said upgrade program.

32. The method of claim 27 wherein said upgrading is one selected from the group consisting of an antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

33. The method of claim 27 further comprising the step of storing said upgrade program at a firmware level in said Internet appliance.

34. The method of claim 27 further comprising the steps of:

providing a plurality of application programs in said terminal;

connecting said network to a server storing a plurality of upgrade downloads;

accessing said network through said Internet appliance from said terminal;

connecting said upgrade program to said server as said terminal accesses said network;

comparing said application programs in said terminal with said upgrade downloads stored in said server to determine which of said upgrade downloads is required; and

upgrading said application programs in said terminal with said required upgrade download using said upgrade program.

35. The method of claim 34 wherein said required upgrade download is one selected from the group consisting of a utility program upgrade, an operating system upgrade, an electronic mail program upgrade, and a browser program upgrade.

36. The method of claim 27 further comprising the steps of:

accessing said network through said Internet appliance from said terminal; and

providing an idle mode when said terminal accesses said network;

wherein said upgrade program idles in said idle mode.

37. The method of claim 27 further comprising the steps of:

accessing said network through said Internet appliance from said terminal; and

providing a maintenance mode when said terminal accesses said network;

wherein said upgrade program performs said upgrading in said maintenance mode.

38. The method of claim 27 further comprising the steps of:

accessing said network through said Internet appliance from said terminal; and

providing a service-maintenance mode when said terminal accesses said network;

wherein said antivirus programs continuously detect said received data and said upgrade program performs said upgrading in a generally simultaneous manner in said service-maintenance mode.

39. The method of claim 27 further comprising the steps of:

accessing said network through said Internet appliance from said terminal;

providing a continuous service mode when said terminal accesses said network through said Internet appliance wherein said antivirus programs continuously detect said received data in said continuous service mode;

providing an idle mode when said terminal accesses said network through said Internet appliance wherein said upgrade program idles in said idle mode;

providing a maintenance mode when said terminal accesses said network through said Internet appliance wherein said upgrade program performs said upgrading in said maintenance mode; and

providing a service-maintenance mode when said terminal accesses said network through said Internet appliance wherein said antivirus programs continuously detect said received data and said upgrade program performs said upgrading in a generally simultaneous manner in said service-maintenance mode;

wherein said continuous service mode, said idle mode, said maintenance mode and said service-maintenance mode are freely transitionable from one mode to another.

40. The method of claim 24 further comprising the step of displaying information retrieved from said network at said terminal using an application-level browser program stored in said memory of said Internet appliance.

41. The method of claim 40 further comprising the steps of:

connecting said network to a remote server;

accessing said network from said terminal through said Internet appliance;

connecting said browser program to said remote server as said terminal accesses said network; and

displaying a message having upgrade options at said terminal using said browser program.

42. The method of claim 41 wherein said message is one selected from the group consisting of a product registration request, virus alert, hacker scheme alert, additional feature announcement, antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

43. The method of claim 42 further comprising the steps of:

providing an application-level upgrade program in said memory of said Internet appliance; and

performing said upgrade options for said antivirus programs using said upgrade program.

44. The method of claim 41 wherein said upgrade options are selected from the group consisting of antivirus program upgrade, an operating system upgrade, an emergency antivirus program upgrade, and a browser program upgrade.

45. The method of claim 24 further comprising the step of storing said protocol-level programs and said antivirus programs at a firmware level in said Internet appliance.

46. The method of claim 24 further comprising the steps of:

storing an application-level upgrade program in said memory of said Internet appliance;

upgrading a program in said Internet appliance using said upgrade program wherein said upgrading is transparent to said terminal;

providing a master program for storing said upgraded program;

providing a slave program for storing said program prior to said upgrading step;

implementing said upgraded program stored in said master program if said upgrading step is completed; and

implementing said program stored in said slave program if said upgrading step is not completed.

47. The method of claim 24 further comprising the steps of:

accessing said network through said Internet appliance from said terminal; and

providing a continuous service mode when said terminal accesses said network;

wherein said antivirus programs continuously detect said received data in said continuous service mode.

25. The method of clam 24 wherein said network is one selected from the group consisting of a side area network (WAN) and the Internet;

wherein said transmitted data are operable with a corresponding network protocol; and

wherein said protocol-level programs are compatibly operable with said network protocol.