Validity checking

• US 6,195,587 B1
• Filed: 04/28/1994
• Issued: 02/27/2001
• Est. Priority Date: 10/29/1993
• Status: Expired due to Term

• Current Assignee: Sophos Limited (Sophos Group Ltd.)
• Original Assignee: Sophos Plc (Sophos Group Ltd.)
• Inventors: Lammer, Peter, Hruska, Jan
• Primary Examiner(s): Grant, William
• Assistant Examiner(s): Rao, Sheela S.
• Application Number:
  US08/234,239
• Time in Patent Office: 2,497 Days
• Field of Search: 380/3, 380/4, 380/25, 700/2, 713/200, 713/201, 713/187, 714/812
• US Class Current: 700/2
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: G06F 11/327 Alarm or error message display
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/565 by checking file integrity

Abstract

A method and apparatus for checking the validity of an item of data stored for access by a first data processor of a data processing network having at least two interconnected data processors. The first data processor provides a second data processor with a copy of an item of data and the second data processor determines whether the item of data is valid. The second data processor then reports to the first data processor on the validity of the item of data so that the first data processor can prevent access to any invalid data.

Claims

1. A method for checking the validity of an item of data stored for access by a first data processor of a data processing network comprising at least two interconnected data processors, the method comprising the steps of:

storing for access by a second data processor a plurality of definitions of forms of data indicative of invalidity of items of data;

causing the first data processor to provide the second data processor with a copy of the item of data;

determining, using the second data processor, whether any of the stored forms of data are present in the item of data and declaring the item of data invalid if any of the stored forms of data are present in the item of data;

reporting to the first data processor on the validity of the item of data; and

causing the first data processor to prevent access to the item of data if the item of data is declared as invalid.

2. A method as claimed in claim 1, wherein a set of records, each characteristic of an item of data that has been found to be valid, is stored for access by the first data processor and the method comprises the steps of:

generating a record which is characteristic of the item of data whose validity is to be checked;

searching for the record in the set of records; and

causing the item of data to be copied to the second data processor only if the record is not found in the set of records.

3. A method as claimed in claim 2, wherein in response to the second data processor reporting that the item of data is valid the record that is characteristic of the item of data is added to the set of records stored for access by the first data processor.

4. A method as claimed in claim 1, wherein the first data processor in response to a command to access the item of data causes the item of data to be checked for the presence of any of the stored forms of data.

5. A method as claimed in claim 1, wherein the first data processor prevents access to the item of data unless or until it has been found to be valid.

6. A method as claimed in claim 1, wherein the item of data comprises a sequence of executable instructions.

7. A method as claimed in claim 1, wherein the first data processor is a workstation.

8. A method as claimed in claim 1, wherein the second data processor is a file server.

9. A data processing system comprising a plurality of data processors interconnected as a network, and comprising:

means in a first data processor of the network for providing a second data processor of the network with a copy of an item of data which is stored for access by the first data processor;

storage means for access by the second data processor for storing a set of information defining data of a plurality of characteristic forms that are indicative of invalidity.

means in the second data processor for testing for the presence of data of any of the characteristic forms, in the item of data, and generating a validity signal indicative of whether data of any of the characteristic forms has been detected in the item of data; and

means for transmitting the validity signal to the first data processor to indicate whether it may allow access to the item of data.

10. A data processing system as claimed in claim 9, wherein the first data processor has no access to the set of information defining data of the characteristic forms.

11. A data processing system as claimed in claim 9, wherein the first data processor includes means for accepting a command to check for the presence of data of the characteristic form(s) in the item of data and, in response to such a command, checking for the presence of such data in the item.

12. A data processing system as claimed in claim 9, comprising at least three data processors connected as a network and means for causing the item of data to be copied to the said second data processor from any other data processor of the network for testing for the presence of data of the characteristic form(s) in the item.

13. A data processing system as claimed in claim 9, wherein the first data processor is a workstation.

14. A data processing system as claimed in claim 9, wherein the second data processor is a file server.