KR100806738B1 - Method for Providing Anti-virus Vaccine by Using Remote Streaming - Google Patents

Abstract

According to the present invention, if a vaccine providing server and a cache server having a minimum number of middle-miles are selected by executing a vaccine container at a client terminal, buffering a vaccine delivered to the cache server in a vaccine container of a client. And it relates to a vaccine providing method using streaming comprising the step of the vaccine container to search for and treat the virus through the buffered vaccine and the vaccine container to transmit the virus search and treatment results to the vaccine providing server.

 Antivirus, streaming, virus

Description

Method for Providing Anti-virus Vaccine by Using Remote Streaming}

1 is a simple block diagram connecting a vaccine provider's vaccine delivery server and a client's vaccine container via a CDN (Content Delivery Network).

FIG. 2 is a simple flow chart of a process in which a vaccine container buffers a vaccine streamed from a vaccine providing server to detect and treat a virus infected by a client, and uses a CDN (Content Delivery Network) to improve vaccine delivery performance.

<Description of main parts of drawing>

100: vaccine provider 105: vaccine providing server

110: vaccine database 115: vaccine transmitter

120: Vaccine service billing department 125: CDN service provider

130: cache server 135: Internet service provider

140: Client 145: Vaccine Container

150 buffer 155 vaccine loading unit

160: vaccine engine 165: main memory device

170: registry

According to the present invention, if a vaccine providing server and a cache server having a minimum number of middle-miles are selected by executing a vaccine container at a client terminal, buffering a vaccine delivered to the cache server in a vaccine container of a client. And it relates to a vaccine providing method using streaming comprising the step of the vaccine container to search for and treat the virus through the buffered vaccine and the vaccine container to transmit the virus search and treatment results to the vaccine providing server.

Recently, with the development of the network, the presence of viruses is also rapidly growing, and the damage caused by this is one after another.

Generally, files targeted by viruses can infect system files, such as wsock32.dll, used in all Windows-based operating systems, as well as program files installed in existing clients, causing errors in operation. That is, a vaccine released a month ago cannot cure a virus that appeared a week ago. As a result, infection with new viruses is likely to cause errors in antivirus programs installed on existing hard disks.

As mentioned above, the vaccine upgrade cycle is frequent from several hours to several weeks, and the vaccine is inconvenient to use without the immediate upgrade of the vaccine, and the user has to download and install a new vaccine. You must download and reinstall.

An object of the present invention to solve the above problems is to run a vaccine container in the client terminal to select the vaccine providing server and the cache server with a minimum of Middle-Mile, the client is delivered to the cache server (delivery) Buffering the vaccine container, the vaccine container searching for and treating a virus through the buffered vaccine, and the vaccine container transmitting the virus search and treatment results to a vaccine providing server. To provide a vaccine providing method using.

The present invention executes a vaccine container in a client terminal and selects a vaccine providing server and a cache server having a minimum number of middle-mills, and buffers a vaccine delivered to the cache server to a vaccine container of a client. And a step of searching for and treating a virus through a buffered vaccine by the vaccine container, and transmitting the result of virus search and treatment to a vaccine providing server by the vaccine container.

The present invention relates to a method and system for remotely loading the latest vaccine into a virtual memory of a client through a vaccine service server mounted on a vaccine provider. The system operating system, spare memory, And checking whether the network is operating, accessing the vaccine providing server by referring to the client registry, and determining a streaming protocol between the vaccine providing server and the client, and relying on the streaming protocol to receive the vaccine from the client. Requesting the providing server to send the latest vaccine necessary for virus detection and treatment, and streaming the latest vaccine from the vaccine providing server to the client according to the vaccine request and loading the vaccine into the client memory Key steps and is characterized in that comprises the step of the client detection and treatment of the virus in the vaccine through.

According to the present invention, the vaccine data block streamed from the vaccine providing server and buffered into the client's vaccine container is not stored as a file. However, the data transmission technique used in the present invention is not limited to the application of the classical streaming technology for multimedia real-time playback on the Internet, and all kinds of real-time transmission techniques over the Internet are applied to the data transmission technique of the present invention. Included.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the following examples are representative of the various methods for explaining the present invention most appropriately, and the present invention is not limited to the following examples.

FIG. 1 is a simple block diagram connecting the vaccine providing server 105 of the vaccine provider 100 and the vaccine container 145 of the client 140 through a content delivery network (CDN).

The vaccine provider 100 includes a vaccine providing server 105, and the vaccine providing server 105 is composed of a vaccine D / B 110, a vaccine transmitting unit 115, and a vaccine service charging unit 120. .

The vaccine D / B 110 stores a vaccine for servicing the client 140, and the vaccine D / B 110 is always automatically updated with vaccine data capable of treating a recently appeared virus. Accordingly, the client 140 is provided with a method for searching and treating all viruses by simply streaming new vaccine data from the vaccine providing server 105.

The vaccine transmitter 115 plays a role of streaming vaccine data of the vaccine D / B 110 to the vaccine container 145 of the client 140, and the vaccine service charging unit 120 provides a vaccine provided to the client 140. Calculate the royalties for the service. In general, virus scanning is performed free of charge, using a method of receiving a fee per treatment, and all the information necessary to charge a fee is received from the vaccine providing server 105 from the vaccine container 145 installed on the client 140. The service billing unit 120 is transmitted.

The client 140 is mounted with a vaccine container 145, the vaccine container 145 is composed of a buffer 150, vaccine loading unit 155, vaccine engine 160 and the like.

The buffer 150 of the vaccine container 145 serves to buffer the vaccine streamed from the vaccine providing server 105, and the buffered vaccine is not stored as a file in the client 140 hard disk, but the vaccine loading unit ( 155 is immediately loaded into the client 140 memory.

The vaccine loading unit 155 serves to load the vaccine buffered in the buffer 150 in the memory of the client 140 with reference to the operating system, and the vaccine loaded in the memory is in the existing vaccine program distributed in the form of software. Play the same role as the vaccine you use.

In general, the process of loading a file into memory by the operating system is as follows.

The file on the hard disk to be loaded into the memory is allocated to the virtual memory address through the link editor and the loader of the operating system, and then loaded into the memory in combination with the segment mapping table. At this time, the files loaded into the memory are not loaded at once, but are loaded sequentially from the portion to be executed immediately, so that a file having a larger capacity than the physical memory can be executed.

The vaccine container 145 includes a virus scanning program, a web browser, or the like distributed by the vaccine provider 100. If the vaccine container 145 is a virus scanning program distributed by the vaccine provider 100, the vaccine container 145 is equipped with a vaccine engine 160 capable of virus detection and treatment, and the vaccine container 145. Is a web browser, the antivirus engine 160 is plugged into the web browser.

The vaccine engine 160 mounted in the vaccine container 145 as described above performs a role of searching for and treating a virus infected by the client 140 by using a vaccine streamed from the vaccine providing server 105. . In other words, the vaccine engine 160 is a vaccine driving unit for virus detection and treatment, and the vaccine engine 160 uses the latest vaccines necessary for detecting and treating viruses from the vaccine providing server 105 in real time.

Therefore, the vaccine streamed from the vaccine provider 100 to the client 140 is streamed to the client 140 whenever the vaccine container 145 runs on the client 140 and accesses the vaccine providing server 105, and the streaming is performed. The vaccine will always provide the latest version.

That is, in the process of searching for and treating the virus of the client 140 as described above, it is possible to start streaming the latest vaccine from the vaccine provider 100, so that the virus can be searched and cured immediately before the streaming is completed. It is the biggest feature.

In addition, in the present embodiment, the effect of the vaccine streaming service is maximized by using a content delivery network (CDN).

The CDN (Content Delivery Network) minimizes the middle mile between the content provider and the Internet service provider (ISP) through a cache server 130 distributed in a backbone network, thereby providing non-stop delivery. Load Balancing for Stop Delivery, Caching for Speedy Web Response, and Distributed and Replicated Content Delivery Methods to Minimize Internet Congestion to be.

Therefore, in order to deliver the vaccine of the vaccine delivery server 105 to the vaccine container 145 of the client 140 via the content delivery network (CDN) at high speed, the vaccine provider 100 may strategically connect with the content delivery network (CDN) service provider. Through the partnership, the vaccine can be streamed through the cache server 130 of the CDN.

That is, the vaccine provider 100 delivers the latest vaccine to the cache server 130 on the content delivery network (CDN) before each client 140 requests the vaccine container 145, or the vaccine container 145. By delivering the latest vaccine to the cache server 130 as soon as the vaccine requests the vaccine, the vaccine container 145 can receive the latest vaccine at the same time running on the client 140.

2 is a simple flowchart of a process in which the vaccine container 145 detects and treats a virus that is infected with the client 140 by buffering a vaccine streamed from the vaccine providing server 105, and CDN for improving vaccine delivery performance. Use Content Delivery Network.

When the vaccine container 145 is executed at the client 140 (200), the vaccine container 145 is referred to as a dynamic linking library (DLL) file and library information necessary for driving the vaccine, and the preparation for the vaccine providing service is terminated. Then, using the vaccine streamed from the vaccine provider 100 to check whether the operating system, free memory, and network operation, etc. can receive the virus detection and treatment services infected with the client 140.

Then, the vaccine container 145 refers to the registry of the client 140 and after connecting to the vaccine providing server 105 (205), and determines the streaming protocol between the vaccine providing server 105 and the client 140.

At this time, since the client 140 vaccine container 145 is actually streaming the vaccine, not the vaccine providing server 105, but the cache server 130 on the content delivery network (CDN), the streaming protocol determined in the process It should be compatible with the CDN (Content Delivery Network) and the cache server 130 used in this embodiment.

In addition, when referring to the registry 170 of the client 140, the registry 170 stores all necessary information for the vaccine container 145 to load the vaccine data block from the vaccine providing server 105 to the client 140 memory. have. However, the client 140 registry 170 handled in the present invention does not refer only to the registry of the Microsoft Windows system. The client 140 registry 170 is a D / B that stores information for the vaccine container 145 to stream the vaccine data block from the vaccine providing server 105 and load it into memory, and the structure thereof is a registry of the window system. Including INI files, of course, includes all types of D / B.

As described above, when the vaccine container 145 connects to the vaccine providing server 105 and the streaming protocol is determined, the vaccine container 145 initializes the system to search for and treat the virus infected by the client 140. Then, the vaccine engine is driven (210). However, at this time, there is no vaccine in the vaccine engine to be used for client 140 virus detection and treatment.

Accordingly, the vaccine container 145 requests the vaccine providing server 105 to immediately deliver the latest vaccine necessary for the client 140 virus search and treatment (215). Then, the vaccine providing server 105 redirects the vaccine delivery request of the client 140 to the cache server 130 on the content delivery network (CDN) having a minimum last mile and the client 140. Then, the vaccine is delivered to the cache server 130 (220), the client 140 vaccine container 145 receives the high speed streaming of the vaccine from the cache server 130 (225).

When the vaccine is delivered from the cache server 130 to the client 140 vaccine container 145, the vaccine container 145 checks whether the vaccine buffered in the buffer is available. If the vaccine buffered in the buffer is available (230), the vaccine container 145 loads the vaccine into the client 140 memory through the vaccine loading unit 155 (235), the vaccine engine 160 In step 240, the virus is searched for. However, at this time, the important point is that before all vaccine data is completed from the vaccine providing server 105 or the cache server 130 on the content delivery network (CDN), the client may be configured through the vaccine engine 160 with a minimum amount of vaccine. (140) virus scanning can be started.

When the vaccine engine 160 of the vaccine container 145 detects a virus infected with the client 140 or after the scan is completed (245), it is confirmed that the virus is infected with the client 140 (245). The client 160 treats the virus infected with the client 140 (250), passes the result to the vaccine provider 100, charges a fee for the vaccine service (255), and then scans the virus for the client 140. And output the treatment result (260). However, if a known virus infection is not identified in the virus search process for the client 140, the vaccine container 145 outputs the result to the client 140, and then terminates the virus search and treatment process.

According to the present invention, virus scanning is performed by buffering vaccine data streamed by a vaccine provider in real time to detect and treat viruses, thereby more effectively combating viruses than vaccines stored on a regular hard disk (programs may be damaged by new virus infiltration). There is an effect that can be done, and there is an advantage to reduce the inconvenience of storing the vaccine as a file on the hard disk or downloading the latest vaccine again.

Claims (1)

Buffering the vaccine delivered to the cache server to the vaccine container of the client when the vaccine providing server and the cache server having the minimum number of Middle-Miles are selected by executing the vaccine container at the client terminal; The vaccine container searching for and treating viruses through the buffered vaccine; And The vaccine container comprises the step of transmitting the virus search and treatment results to the vaccine providing server; vaccine providing method using streaming.

Images