BROWSING SUPPORT INFRASTRUCTURE WITH TIERED MALWARE SUPPORT

• US 20130061326A1
• Filed: 10/29/2012
• Published: 03/07/2013
• Est. Priority Date: 05/12/2008
• Status: Abandoned Application

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: Enpulz LLC
• Inventors: Bennett, James D.
• Application Number:
  US13/662,765
• Publication Number:
  US 20130061326A1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: G06F 21/565 by checking file integrity
• CPC Class Codes: G06F 21/568 eliminating virus, restoring damaged files
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A network browser has a Malware detection manager for direct or indirect scanning of files during an upload or download processes for viruses, adware, spyware, etc. The malware detection manager defines and employs a quarantine bin, which is an isolated and secure memory space or directory for temporary placement of file packets during the file transmission while malware detection can commence. The malware detection manager scans for malware code associated with the packet sequence encountered during a file transmission to and from the Internet, during which it quarantines all the scanned packets in the quarantine bin. Quarantined files can be released if there is a human challenge authorizing the release of the file. Exchanging a Malware free signature between server and client via a trusted download center may be done so the client device need not scan the files for malware if content is certified and guaranteed as malware-free.

Claims

1. A web browsing support system that services a plurality of browsers that operate on a corresponding plurality of user devices, each of the plurality of user devices including virus related processing logic, the web browsing support system comprising:

a processing infrastructure that associates detection processing related information with at least portions of a plurality of program code hosted via web pages of a plurality of web hosting servers via an Internet;

a communication interface that communicatively couples the processing infrastructure with a plurality of user devices; and

the processing infrastructure delivering via the communication interface at least portions of the detection processing related information to the plurality of user devices, the delivering being made by the processing infrastructure to assist the virus related processing logic of each of the plurality of user devices, the assistance involving at least attempts to prevent execution of downloaded ones of the plurality of program code that are not virus-free.

2. The web browsing support system of claim 1, wherein the attempts to prevent execution comprise terminating a download in progress.

3. The web browsing support system of claim 1, wherein the attempts to prevent execution comprise applying a quarantine process.

4. The web browsing support system of claim 1, wherein the assistance involving applying flags associated with virus detection analysis.

5. The web browsing support system of claim 1, wherein a first of the virus related processing logic is integrated into a first of the plurality of browsers.

6. The web browsing support system of claim 1, wherein the virus related processing logic includes virus detection scanning logic.

7. The web browsing support system of claim 6, wherein at least one operation of the virus detection scanning logic is triggered upon a user interaction relating to at least one of the plurality of program code.

8. The web browsing support system of claim 1, wherein the processing infrastructure delivers a first of the detection processing related information in response to a request from a first of the plurality of browsers.

9. The web browsing support system of claim 8, wherein the request being produced in response to user interaction associated with a first of the plurality of program code.

10. The web browsing support system of claim 1, wherein first information of the detection processing related information comprises a virus free indication.

11. A web browsing support system that services a plurality of user devices, a first of the plurality of user devices having virus related processing logic, the web browsing support system comprising:

a processing infrastructure that associates detection processing related information with at least portions of a plurality of program code hosted by a plurality of web hosting servers via an Internet; and

the processing infrastructure delivering first data to the first of the plurality of user devices, the first data relating to at least a first of the plurality of program code identified during a browsing operation on the first of the plurality of user devices, the delivery being made by the processing infrastructure to support operations of the virus related processing logic relating to the first of the plurality of program code.

12. The web browsing support system of claim 11, wherein at least some of the operations of the virus related processing logic being virus detection processing.

13. The web browsing support system of claim 11, wherein at least some of the operations of the virus related processing logic involving a temporary hold being placed on at least portions of a first of the plurality of program code until a virus free conclusion is reached.

14. The web browsing support system of claim 11, wherein of the virus related processing logic is integrated into a first of the plurality of browsers.

15. The web browsing support system of claim 11, wherein the virus related processing logic comprises virus detection scanning logic.

16. The web browsing support system of claim 11, wherein at least one operation of the virus related processing logic is triggered upon a user interaction.

17. The web browsing support system of claim 11, wherein the processing infrastructure delivers a first of the detection processing related information in response to a request from a first of the plurality of browsers.

18. The web browsing support system of claim 17, wherein the request being produced in response to a first user'"'"'s interaction with a first of the plurality of program code during browsing.

19. A web browsing system supporting a plurality of user devices, the web browsing system comprising:

a first web browser application operable to run on a first of the plurality of computing devices, the first web browsing program including a second tier of virus related processing;

at least one communication interface communicatively coupled to the plurality of user devices;

a processing infrastructure, communicatively coupled to the at least one communication interface, that provides a first tier of virus related processing; and

the processing infrastructure and the first web browsing application interact to provide an overall virus related service.

20. The web browsing system of claim 19, wherein the processing infrastructure delivers virus related data established by the first tier of virus related processing to the first web browsing program.

21. The web browsing system of claim 20, wherein the delivery of the virus related data impacts the operations of the second tier of virus related processing.

22. The web browsing system of claim 20, wherein virus related data comprises a virus free indication.

23. The web browsing system of claim 19, wherein the first tier of virus related processing comprises virus detection processing.

24. The web browsing system of claim 19, wherein the second tier of virus related processing is integrated within the first web browsing program.

25. A method performed by a web browsing infrastructure to support a plurality of user devices, the method comprising:

performing a first tier of virus related processing related to a plurality of web hosted program code by a processing infrastructure to support the plurality of user devices; and

supporting a second tier of virus related processing that operates on a first device of the plurality of user devices, the supporting comprises sending virus related data established via the first tier of virus related processing to the first device to assist the second tier of virus related processing, the second tier of virus related processing being associated with browser interactions involving at least a first of the plurality of web hosted program code, wherein the first tier and second tier operate together to attempt to prevent downloaded execution of those of the plurality of web hosted program code that are not virus-free.

26. The method of claim 25, wherein the virus related data comprises a virus free indication associated with the first of the plurality of web hosted program code.

27. The method of claim 25, wherein the first tier of virus related processing comprises virus detection processing.

28. The method of claim 25, wherein the second tier of virus related processing comprises virus detection processing.

29. The method of claim 25, wherein the second tier of virus related processing comprises detected virus handling processes.

30. The method of claim 25, wherein the second tier of virus related processing comprises a handling process associated with the first of the plurality of web hosted program code.