SYSTEM AND METHOD FOR ANTIVIRUS PROTECTION

• US 20150007324A1
• Filed: 06/27/2013
• Published: 01/01/2015
• Est. Priority Date: 06/27/2013
• Status: Active Grant

• Current Assignee: SecureAge Technology, Inc.
• Original Assignee: SecureAge Technology, Inc.
• Inventors: Ngair, Teow Hin
• Granted Patent: US 9,491,193 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

The present invention relates to antivirus protection and more particularly to antivirus protection in a cloud server. The present invention protects a user machine from a virus while allowing the user to get the benefit of using multiple antivirus options without the need to run the antivirus options on the user machine.

Claims

1. A method for antivirus protection on a server, comprising:

repeatedly scanning binaries using an antivirus options with a continuously updated engine and virus definition, wherein the scanning binaries occurs remotely from the user machine; and

identifying a virus;

identifying a user machine that has been infected by the virus;

recommending a remedy to the user to eradicate the virus; and

updating the server of the user machine status.

2. The method of claim 1, wherein the identifying a user machine that has been infected by the virus is accomplished using a database of hashes, applications, unique user machine identifier, and regularly updating database of hashes of applications on user machine.

3. The method of claim 1, further comprising detecting a newly installed program on the user machine using a light weight antivirus and sending its hash or binary for on-demand scanning remotely.

4. The method of claim 1, wherein the scanning identifies all virus-free programs on the user machine with information from the server and a light weight antivirus scans only newly installed program.

5. The method of claim 1, wherein the scanning the binaries is accomplished using a plurality of antivirus options.

6. The method of claim 1, wherein the user machine is a smart phone.

7. The method of claim 1, wherein the user machine is a tablet.

8. The method of claim 1, wherein the user machine is a network security device.

9. The method of claim 1, wherein the method for antivirus protection is used in a corporate network setting.

10. A system for remote antivirus protection, comprising:

a non-transitory memory storing a hash database of at least one hash and program corresponding to the at least one program on a user machine;

an antivirus engine, coupled to the database , for repeatedly scanning for a virus using continuously updated engines and virus definitions; and

an interface module, coupled to the hash database for receiving information from a remotely located user machine regarding a hash and machine status and for sending information regarding a virus to a user machine.

11. The system of claim 10, wherein the hash database is updated when a user installs a new software program.

12. The system of claim 11, wherein the interface module sends information regarding the status of the new software program.

13. The system of claim 11, wherein the new software program is stored on the user computer.

14. The system of claim 10, wherein the antivirus engine is a commercially available antivirus option.

15. The system of claim 10, wherein the antivirus engine is an open source antivirus option.

16. The system of claim 10, further comprising a user machine having a light weight antivirus for detecting a newly installed program and sending it for on-demand scanning remotely.

17. The system of claim 10, wherein the antivirus engine identifies all virus-free programs on a user machine and a light weight antivirus scans a newly installed program.

18. The system of claim 10, wherein the antivirus engine uses a plurality of antivirus options.

19. The system of claim 10, wherein the system is used in a corporate network setting.