System and method for automatically detecting and then self-repairing corrupt, modified of non-existent files via a communication medium

• US 8,347,086 B2
• Filed: 12/17/2001
• Issued: 01/01/2013
• Est. Priority Date: 12/18/2000
• Status: Active Grant

• Current Assignee: Citibank NA (Citigroup Incorporated)
• Original Assignee: Citibank NA (Citigroup Incorporated)
• Inventors: Vlcan, Steve, Bakshi, Bikram S
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US10/015,886
• Publication Number:
  US 20020091924A1
• Time in Patent Office: 4,033 Days
• Field of Search: 713/200, 713/201, 713/161, 713/165, 713/168, 713/176, 713/187, 726/22, 726/26
• US Class Current: 713/165
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/565 by checking file integrity
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method of guaranteeing the presence of secure and tamper-proof remote files over a distributed communication medium, such as the Internet, is provided. The system and method automatically detects, and then self-repairs corrupt, modified or non-existent remote files. The method first performs an integrity check on a remote file and then determines whether the integrity check passed. If the integrity check passed, then the user goes through the authentication process as normal. If the integrity check fails, then the present invention redirects to an install module in order to prepare to reinstall the remote file. Via the install module, the present invention then reinstalls the remote file and the user is then taken through the authentication process as normal.

Claims

1. A method for maintaining the integrity of a file at a remote location via a communication medium, comprising the steps of:

performing an integrity check on the file by an integrity module;

redirecting to an install module by a redirect module if said integrity check fails, wherein the step of redirecting to the install module comprises the steps of;

modifying an address of the install module by the redirect module to include a parameter to indicate the remote location of the file;

producing a request by an authentication module based on the modified address that indicates the remote location of the file; and

communicating the request by the authentication module to the install module in a login page that instantiated the file at the remote location; and

reinstalling the file by the install module at the remote location via the communication medium, thereby maintaining the integrity of the file.

2. The method of claim 1, wherein the step of performing the integrity check comprises the steps of:

using an algorithm on the file to produce a remote value;

communicating the remote value to the integrity module via the communication medium;

using the algorithm on a mirror file to produce a secure value, wherein the mirror file is a valid copy of the file; and

communicating that the integrity check passed if the remote value and the secure value are equivalent.

3. The method of claim 2, wherein said algorithm is a hash algorithm.

4. The method of claim 1, wherein the step of reinstalling the remote file comprises the steps of:

generating a reinstallation web page, by the install module, based on a request from the remote location;

communicating the reinstallation web page, via the communication medium, to the remote location; and

reinstalling the remote file at the remote location.

5. The method of claim 1, wherein the communication medium is the Internet.

6. The method of claim 1, wherein the communication medium is a local network.

7. The method of claim 1, wherein the communication medium is a wireless network.

8. The method of claim 1, wherein the remote location is an authentication control component.

9. A system for maintaining the integrity of a file at a remote location via a communication medium, comprising:

a non-transitory computer usable storage medium comprising;

an integrity module;

a redirect module coupled to said integrity module via the communication medium;

an install module coupled to said redirect module via the communication medium, wherein said integrity module performs an integrity check on the file, and wherein said redirect module redirects to said install module when the integrity check fails and modifies an address of the install module to include a parameter to indicate the remote location of the file; and

an authentication module coupled to the redirect module which authentication module produces a request based on the modified address that indicates the remote location of the file and communicates the request to said install module in a login page that instantiated the file at the remote location, and wherein said install module reinstalls the file at the remote location, thereby maintaining the integrity of the remote file.

10. The system of claim 9, further comprising an authentication control component that uses an algorithm on the file to produce a remote value, wherein said integrity module uses the algorithm on a mirror file to produce a secure value, wherein the mirror file is a valid copy of the file, and wherein said integrity module compares the remote value and the secure value to determine whether the integrity check has been passed.

11. The system of claim 10, wherein the algorithm is a hash algorithm.

12. The system of claim 9, wherein said install module generates a reinstallation web page based on a request from the remote location to be used to reinstall the remote file at the remote location.

13. The system of claim 9, wherein the communication medium is the Internet.

14. The system of claim 9, wherein the communication medium is a local network.

15. The system of claim 9, wherein the communication medium is a wireless network.

16. The system of claim 9, wherein the remote location is an authentication control component.