Systems and methods for updating content detection devices and systems
First Claim
1. A method in a content detection system, the method comprising:
- receiving content via a network interface device of the content detection system;
determining, through execution of instructions on a processor of the content detection system, whether received content contains suspicious content data or the suspicious content data is a threat to detect;
when the suspicious content data contains or is a threat, generating, through execution of instructions on the processor of the content detection system, content detection data as a function of the received data;
based on an ordered list of a plurality update stations to receive content detection data updates, identifying, through execution of instructions on the processor, a primary update station to receive the content detection data update;
attempting to transmit, via the network interface device, the content detection data update to the primary update station;
upon failure of the transmission of the content data update to the primary update station, identify, through execution of instructions on the processor of the network device, a secondary update station to receive the content detection data update based on the ordered list of the plurality of update stations to receive content detection data updates, the primary and secondary stations having different geographical locations;
sending from the central station via the network interface device, the content detection data update to the secondary update station including data identifying at least one content detection module of a plurality of content detection modules, coupled through the network to the plurality of update stations, to receive the content detection data update and at least one instruction to distribute the content detection data update to the identified at least one content detection module, wherein the distribution is performed not in response to a request from the at least one content detection module.
0 Assignments
0 Petitions
Accused Products
Abstract
A method of updating a content detection module includes obtaining content detection data, and transmitting the content detection data to a content detection module, wherein the transmitting is performed not in response to a request from the content detection module. A method of sending content detection data includes obtaining content detection data, selecting an update station from a plurality of update stations, and sending the, content detection data to the selected update station. A method of building a content detection system includes establishing a first communication link between a central station and an update station, the central station configured to transmit content detection data to the update station, and establishing a second communication link between the update station and a content detection module.
81 Citations
13 Claims
-
1. A method in a content detection system, the method comprising:
-
receiving content via a network interface device of the content detection system; determining, through execution of instructions on a processor of the content detection system, whether received content contains suspicious content data or the suspicious content data is a threat to detect; when the suspicious content data contains or is a threat, generating, through execution of instructions on the processor of the content detection system, content detection data as a function of the received data; based on an ordered list of a plurality update stations to receive content detection data updates, identifying, through execution of instructions on the processor, a primary update station to receive the content detection data update; attempting to transmit, via the network interface device, the content detection data update to the primary update station; upon failure of the transmission of the content data update to the primary update station, identify, through execution of instructions on the processor of the network device, a secondary update station to receive the content detection data update based on the ordered list of the plurality of update stations to receive content detection data updates, the primary and secondary stations having different geographical locations; sending from the central station via the network interface device, the content detection data update to the secondary update station including data identifying at least one content detection module of a plurality of content detection modules, coupled through the network to the plurality of update stations, to receive the content detection data update and at least one instruction to distribute the content detection data update to the identified at least one content detection module, wherein the distribution is performed not in response to a request from the at least one content detection module. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A non-transitory computer-readable medium, with instructions stored thereon, which when executed by a computing device, cause the computing device to:
-
receive content via a network interface device of the content detection system; determine, through execution of instructions on a processor of the content detection system, whether received content contains suspicious content data or the suspicious content data is a threat to detect; when the suspicious content data contains or is a threat, generating, through execution of instructions on the processor of the content detection system, content detection data as a function of the received data; based on an ordered list of a plurality update stations to receive content detection data updates, identifying, through execution of instructions on the processor, a primary update station to receive the content detection data update; attempt to transmit, via the network interface device, the content detection data update to the primary update station; upon failure of the transmission of the content data update to the primary update station, identify, through execution of instructions on the processor of the network device, a secondary update station to receive the content detection data update based on the ordered list of the plurality of update stations to receive content detection data updates, the primary and secondary stations having different geographical locations; send from the central station via the network interface device, the content detection data update to the secondary update station including data identifying at least one content detection module of a plurality of content detection modules, coupled through the network to the plurality of update stations, to receive the content detection data update and at least one instruction to distribute the content detection data update to the identified at least one content detection module, wherein the distribution is performed not in response to a request from the at least one content detection module. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. A content detection system, comprising:
-
a processor; a network interface device; and a memory device, storing; a first module to receive content via the network interface device; a second module to determine, through execution of instructions on the processor, whether received content contains suspicious content data or the suspicious content data is a threat to detect; a third module to, when the suspicious content data contains or is a threat, generate, through execution of instructions on the processor of the content detection system, content detection data as a function of the received data; a fourth module to, based on an ordered list of a plurality update stations to receive content detection data updates, identify, through execution of instructions on the processor of the network device, a primary update station to receive the content detection data update; a fifth module to attempt to transmit, via the network interface device, the content detection data update to the primary update station; a sixth module to, upon failure of the transmission of the content data update to the primary update station, identify, through execution of instructions on the processor, a secondary update station to receive the content detection data update based on the ordered list of the plurality of update stations to receive content detection data updates, the primary and secondary stations having different geographical locations; sending from the central station via the network interface device, the content detection data update to the secondary update station including data identifying at least one content detection module of a plurality of content detection modules, coupled through the network to the plurality of update stations, to receive the content detection data update and at least one instruction to distribute the content detection data update to the identified at least one content detection module, wherein the distribution is performed not in response to a request from the at least one content detection module.
-
Specification