Computer virus screening methods and systems

DC CAFC

US 5,987,610 A
Filed: 02/12/1998
Issued: 11/16/1999
Est. Priority Date: 02/12/1998
Status: Expired due to Term

- Alert
- Pin

Associated Cases

Associated Defendants

First Claim

Patent Images

1. A virus screening method comprising the steps of:

routing a call between a calling party and a called party of a telephone network;

receiving, within the telephone network, computer data from a first party selected from the group consisting of the calling party and the called party;

detecting, within the telephone network, a virus in the computer data; and

in response to detecting the virus, inhibiting communication of at least a portion of the computer data from the telephone network to a second party selected from the group consisting of the calling party and the called party.

View all claims

9 Assignments

Timeline View

Assignment View

Litigations

0 Petitions

Accused Products

Abstract

A virus screening method includes steps of routing a call between a calling party and a called party of a telephone network, receiving computer data from a first party of the calling party and the called party, and detecting a virus in the computer data. In response to detecting the virus, a step of inhibiting communication of at least a portion the computer data to a second party of the calling party and the called party is performed. A virus screening system is also disclosed.

796 Citations

53 Claims

1. A virus screening method comprising the steps of:
- routing a call between a calling party and a called party of a telephone network;
  
  receiving, within the telephone network, computer data from a first party selected from the group consisting of the calling party and the called party;
  
  detecting, within the telephone network, a virus in the computer data; and
  
  in response to detecting the virus, inhibiting communication of at least a portion of the computer data from the telephone network to a second party selected from the group consisting of the calling party and the called party.
- View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
- - 2. The virus screening method of claim 1 further comprising the step of communicating a message generated within the telephone network to at least one of the first party and the second party in response to detecting the virus.
  - 3. The virus screening method of claim 2 wherein the message indicates the presence of the virus in the computer data.
  - 4. The virus screening method of claim 2 wherein the message identifies the virus.
  - 5. The virus screening method of claim 1 further comprising the step of writing data to a database in response to detecting the virus.
  - 6. The virus screening method of claim 1 further comprising the steps of:
    - within the telephone network, removing the virus from the computer data to form second data; and
      
      communicating the second data from the telephone network to the second party.
  - 7. The virus screening method of claim 1 further comprising the step of determining that virus screening is to be applied to the call based upon at least one of an identification code of the calling party and an identification code of the called party.
  - 8. The virus screening method of claim 1 further comprising the steps of:
    - receiving a telephone number of the called party from the calling party prior to routing the call;
      
      receiving a code which prefixes the telephone number, the code comprising at least one telephone dialing digit; and
      
      determining that virus screening is to be applied to the call based upon the code.
  - 9. The virus screening method of claim 8 wherein the code comprises *NN wherein each N denotes a corresponding telephone dialing digit.
  - 10. The virus screening method of claim 1 further comprising the steps of:
    - receiving a message from at least one of the calling party and the called party; and
      
      disabling virus screening for subsequent computer data in response to receiving the message.
  - 11. The virus screening method of claim 1 further comprising the steps of:
    - determining within the telephone network whether the call is a data call or a voice call; and
      
      enabling virus screening upon determining that the call is a data call.

12. A virus screening system comprising:
- a telephone switching node to route a call between a calling party and a called party, the telephone switching node receiving computer data from a first party selected from the group consisting of the calling party and the called party; and
  
  a processor associated with the telephone switching node to detect a virus in the computer data;
  
  wherein the telephone switching node is responsive to the processor detecting the virus to inhibit communication of at least a portion of the computer data to a second party selected from the group consisting of the calling party and the called party.
- View Dependent Claims (13, 14, 15, 16, 17, 18, 19, 20, 21, 22)
- - 13. The virus screening system of claim 12 wherein in response to the processor detecting the virus, the telephone switching node communicates a message generated within a telephone network to at least one of the first party and the second party.
  - 14. The virus screening system of claim 13 wherein the message indicates the presence of the virus in the computer data.
  - 15. The virus screening system of claim 13 wherein the message identifies the virus.
  - 16. The virus screening system of claim 12 further comprising a database responsive to the processor to store data in response to detecting the virus.
  - 17. The virus screening system of claim 12 wherein the processor removes the virus from the computer data to form second data, and wherein the telephone switching node communicates the second data to the second party.
  - 18. The virus screening system of claim 12 wherein the processor selectively screens the computer data based upon at least one of an identification code of the calling party and an identification code of the called party.
  - 19. The virus screening system of claim 12 wherein the telephone switching node and the processor are within a central switching office of a telephone network.
  - 20. The virus screening system of claim 12 wherein the processor applies virus screening to the call in response to receiving a dialed code from the calling party.
  - 21. The virus screening system of claim 12 wherein the processor disables virus screening upon receiving a message from at least one of the calling party and the called party.
  - 22. The virus screening system of claim 12 wherein the processor enables virus screening upon determining that the call is a data call rather than a voice call.

23. A virus screening method comprising the steps of:
- receiving a first signal representative of computer data from a first party of a telephone network; and
  
  screening the computer data within the telephone network for at least one virus.
- View Dependent Claims (24, 25, 26, 27, 28, 29, 30, 31, 32)
- - 24. The virus screening method of claim 23 wherein the telephone network includes a public telephone network.
  - 25. The virus screening method of claim 23 wherein the computer data is screened at one of a central switching office, an end switching office, and a tandem switching office of the telephone network.
  - 26. The virus screening method of claim 23 further comprising the step of communicating the computer data to a second party of the telephone network if the at least one virus is absent from the computer data.
  - 27. The virus screening method of claim 23 wherein the step of screening the computer data includes detecting a virus in the computer data within the telephone network.
  - 28. The virus screening method of claim 27 further comprising the step of inhibiting communication of at least a portion of the computer data from the telephone network to a second party of the telephone network upon detecting the virus within the telephone network.
  - 29. The virus screening method of claim 28 further comprising the step of communicating a message generated within the telephone network to at least one of the first party and the second party upon detecting the virus.
  - 30. The virus screening method of claim 23 further comprising the steps of:
    - prior to receiving the first signal, receiving a dialed code; and
      
      determining that virus screening is to be applied to the computer data based upon the dialed code.
  - 31. The virus screening method of claim 23 further comprising the steps of:
    - receiving a message from at least one of the first party and a second party; and
      
      disabling virus screening for subsequent computer data in response to receiving the message.
  - 32. The virus screening method of claim 23 wherein the first signal is included in a call involving the first party, the virus screening method further comprising the steps of:
    - determining within the telephone network whether the call is a data call or a voice call; and
      
      enabling virus screening upon determining that the call is a data call.

33. A virus screening system comprising:
- a telephone switching office to receive a first signal representative of computer data from a first party and to screen the computer data for at least one virus.
- View Dependent Claims (34, 35, 36, 37, 38, 39, 40, 41, 42)
- - 34. The virus screening system of claim 33 wherein the telephone switching office is within a public telephone network.
  - 35. The virus screening system of claim 33 wherein the telephone switching office includes at least one of a central switching office, an end switching office, and a tandem switching office.
  - 36. The virus screening system of claim 33 wherein the telephone switching office communicates the computer data to a second party if the at least one virus is absent from the computer data.
  - 37. The virus screening system of claim 33 wherein the telephone switching office detects a virus in the computer data.
  - 38. The virus screening system of claim 37 wherein the telephone switching office inhibits communication of at least a portion of the computer data to a second party upon detecting the virus.
  - 39. The virus screening system of claim 38 wherein the telephone switching office communicates a message generated within a telephone network to at least one of the first party and the second party upon detecting the virus.
  - 40. The virus screening system of claim 33 wherein the telephone switching office determines that virus screening is to be applied to the computer data based upon a dialed code received prior to receiving the first signal.
  - 41. The virus screening system of claim 33 wherein the telephone switching office disables virus screening for subsequent computer data in response to receiving a message from at least one of the first party and a second party.
  - 42. The virus screening system of claim 33 wherein the first signal is included in a call involving the first party, and wherein the telephone switching office enables virus screening for the call upon determining that the call is a data call rather than a voice call.

43. A virus screening method comprising the steps of:
- receiving computer data which includes an executable program;
  
  providing a first computer having a model of a second computer;
  
  modifying the model by executing the executable program using the first computer; and
  
  screening the model for at least one virus to determine if the executable program has a virus.
- View Dependent Claims (44, 45, 46, 47)
- - 44. The virus screening method of claim 43 further comprising the steps of:
    - detecting a virus in the model; and
      
      inhibiting communication of at least a portion of the computer data to the second computer in response to detecting the virus in the model.
  - 45. The virus screening method of claim 43 further comprising the step of communicating the computer data to the second computer if the at least one virus is absent from the model.
  - 46. The virus screening method of claim 43 wherein the step of modifying the model includes:
    - detecting a write request made by the executable program, the write request to write a value to a memory location;
      
      determining if the memory location is represented in the model;
      
      modifying the model to include a representation of the memory location if the memory location is unrepresented in the model; and
      
      writing the value to the representation of the memory location.
  - 47. The virus screening method of claim 43 wherein the step of modifying the model includes:
    - detecting a read request made by the executable program, the read request to read a value from a memory location;
      
      determining if the memory location is represented in the model; and
      
      if the memory location is unrepresented in the model, retrieving a value of the memory location from at least one of the second computer and a stored image of the second computer and storing the value to the model.

48. A virus screening system comprising:
- a first computer to receive computer data which includes an executable program, the first computer operative to provide a model of a second computer and to modify the model by executing the executable program, the first computer to screen the model for at least one virus to determine if the executable program has a virus.
- View Dependent Claims (49, 50, 51, 52)
- - 49. The virus screening system of claim 48 wherein in response to the first computer detecting a virus in the model, communication of at least a portion of the computer data to the second computer is inhibited.
  - 50. The virus screening system of claim 48 wherein the first computer communicates the computer data to the second computer if the at least one virus is absent from the model.
  - 51. The virus screening system of claim 48 wherein the first computer modifies the model by detecting a write request made by the executable program, the write request to write a value to a memory location, determining if the memory location is represented in the model, modifying the model to include a representation of the memory location if the memory location is unrepresented in the model, and writing the value to the representation of the memory location.
  - 52. The virus screening system of claim 48 wherein the first computer modifies the model by detecting a read request made by the executable program, the read request to read a value from a memory location, determining if the memory location is represented in the model, and if the memory location is unrepresented in the model, retrieving a value of the memory location from at least one of the second computer and a stored image of the second computer and storing the value to the model.

53. An article of manufacture comprising:
- a computer-readable storage medium; and
  
  computer-readable data stored by the computer-readable storage medium, the computer-readable data to direct a first computer to receive computer data which includes an executable program, to provide a model of a second computer, to modify the model by executing the executable program, and to screen the model for at least one virus to determine if the executable program has a virus.

Specification

Resources

Litigation Campaign Assessment

Litigation Data

Current Assignee
Intellectual Ventures I LLC (Intellectual Ventures LLC)
Original Assignee
Ameritech Corp. (AT&T, Inc.)
Inventors
Bretscher, John Thomas, Franczek, Edward J., Bennett, Raymond Walden III
Primary Examiner(s)
HUA, LY

Application Number

US09/022,512
Time in Patent Office

642 Days
Field of Search

395/186, 395/187.01, 395/183.14, 395/183.15, 395/185.01, 395/183.12, 395/183.04, 380/3, 380/4, 380/25, 713/200, 713/201, 714/36, 714/38
US Class Current

726/24
CPC Class Codes

G06F 21/564   by virus signature recognition

G06F 21/566   Dynamic detection, i.e. det...

H04L 63/145   the attack involving the pr...

Computer virus screening methods and systems

First Claim

9 Assignments

Litigations

0 Petitions

Accused Products

Abstract

796 Citations

53 Claims

Specification

Solutions

Use Cases

Quick Links

Computer virus screening methods and systems

First Claim

9 Assignments

Subscription Required

Subscription Required

Litigations

0 Petitions

Subscription Required

Accused Products

Subscription Required

Abstract

796 Citations

53 Claims

Specification

Subscription Required

Solutions

Use Cases

Quick Links