KR20030028981A - System and Method for providing anti-virus vaccine by using remote streaming - Google Patents

Abstract

PURPOSE: A method and system for supplying a vaccine(application) using a remote streaming is provided to remotely load the latest vaccine in a virtual memory of a client through an application service server mounted in a vaccine provider. CONSTITUTION: A vaccine database(110) is automatically updated by vaccine data capable of curing the latest virus and stores a vaccine to be serviced for a client(140). A vaccine supply server(105) includes a vaccine transmitting unit(115) for streaming the vaccine data of the vaccine database(110) to a vaccine container(145) of the client(140). A buffer(150) buffers the vaccine. A vaccine loading unit(155) loads the vaccine stored in the buffer(150) in a client memory(165) by referring to a client operating system. A vaccine container(145) includes a vaccine engine(160) for searching and curing a virus infected in the client(140) using the vaccine being streamed from the vaccine supply server(105).

Description

System and Method for providing anti-virus vaccine by using remote streaming

The present invention relates to a method and system for remotely loading the latest vaccine into a virtual memory of a client through a vaccine service server mounted on a vaccine provider. The system operating system, spare memory, And checking whether the network is operating, accessing the vaccine providing server by referring to the client registry, and determining a streaming protocol between the vaccine providing server and the client, and relying on the streaming protocol to receive the vaccine from the client. Requesting the providing server to send the latest vaccine necessary for virus detection and treatment, and streaming the latest vaccine from the vaccine providing server to the client according to the vaccine request and loading the vaccine into the client memory Key steps and is characterized in that comprises the step of the client detection and treatment of the virus in the vaccine through.

Recently, with the development of the network, the presence of viruses is also rapidly growing, and the damage caused by this is one after another.

Generally, files targeted by viruses can infect system files, such as wsock32.dll, used in all Windows-based operating systems, as well as program files installed in existing clients, causing errors in operation. That is, a vaccine released a month ago cannot cure a virus that appeared a week ago. As a result, infection with new viruses is likely to cause errors in antivirus programs installed on existing hard disks.

As mentioned above, the vaccine upgrade cycle is frequent from several hours to several weeks, and the vaccine is inconvenient to use without the immediate upgrade of the vaccine, and the user has to download and install a new vaccine. You must download and reinstall.

An object of the present invention to solve the above problems is to effectively combat the virus more than the vaccine stored on the normal hard disk (a program may be damaged by new virus infiltration) or at the same time save the vaccine as a file on the hard disk To provide a vaccine providing method and system using streaming to reduce the inconvenience of downloading the latest vaccine again, for this purpose the function to check the system operating system, free memory and network operation from the client, the vaccine by referring to the client registry After connecting to the provisioning server, a function of determining a streaming protocol between the vaccine providing server and the client, and depending on the streaming protocol, the maximum necessary for virus detection and treatment from the client to the vaccine providing server. Requesting a new vaccine transmission, streaming the latest vaccine from the vaccine providing server to the client according to the vaccine request, loading the vaccine into the client memory, and searching for a virus in the client through the vaccine; It is an object of the present invention to provide a system having a therapeutic function.

1 is a simple block diagram connecting a vaccine provider's vaccine delivery server and a client's vaccine container via a CDN (Content Delivery Network).

FIG. 2 is a simple flow chart of a process in which a vaccine container buffers a vaccine streamed from a vaccine providing server to detect and treat a virus infected by a client, and uses a CDN (Content Delivery Network) to improve vaccine delivery performance.

<Description of main parts of drawing>

100: vaccine provider 105: vaccine providing server

110: vaccine database 115: vaccine transmitter

120: Vaccine service billing department 125: CDN service provider

130: cache server 135: Internet service provider

140: client 145: vaccine container

150 buffer 155 vaccine loading unit

160: vaccine engine 165: main memory device

170: registry

The present invention relates to a method and system for remotely loading the latest vaccine into a virtual memory of a client through a vaccine service server mounted on a vaccine provider. The system operating system, spare memory, And checking whether the network is operating, accessing the vaccine providing server by referring to the client registry, and determining a streaming protocol between the vaccine providing server and the client, and relying on the streaming protocol to receive the vaccine from the client. Requesting the providing server to send the latest vaccine necessary for virus detection and treatment, and streaming the latest vaccine from the vaccine providing server to the client according to the vaccine request and loading the vaccine into the client memory. Key steps and is characterized in that comprises the step of the client detection and treatment of the virus in the vaccine through.

According to the present invention, the vaccine data block streamed from the vaccine providing server and buffered into the client's vaccine container is not stored as a file. However, the data transmission technique used in the present invention is not limited to the application of the classical streaming technology for multimedia real-time playback on the Internet, and all kinds of real-time transmission techniques over the Internet are applied to the data transmission technique of the present invention. Included.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the following examples are representative of the various methods for explaining the present invention most appropriately, and the present invention is not limited to the following examples.

FIG. 1 is a simple block diagram connecting the vaccine providing server 105 of the vaccine provider 100 and the vaccine container 145 of the client 140 through a content delivery network (CDN).

The vaccine provider 100 includes a vaccine providing server 105, and the vaccine providing server 105 is composed of a vaccine D / B 110, a vaccine transmitting unit 115, and a vaccine service charging unit 120. .

The vaccine D / B 110 stores a vaccine for servicing the client 140, and the vaccine D / B 110 is always automatically updated with vaccine data capable of treating a recently appeared virus. Accordingly, the client 140 is provided with a method for searching and treating all viruses by simply streaming new vaccine data from the vaccine providing server 105.

The vaccine transmitter 115 plays a role of streaming vaccine data of the vaccine D / B 110 to the vaccine container 145 of the client 140, and the vaccine service charging unit 120 provides a vaccine provided to the client 140. Calculate the royalties for the service. In general, virus scanning is performed free of charge, using a method of receiving a fee per treatment, and all the information necessary to charge a fee is received from the vaccine providing server 105 from the vaccine container 145 installed on the client 140. The service billing unit 120 is transmitted.

The client 140 is mounted with a vaccine container 145, the vaccine container 145 is composed of a buffer 150, vaccine loading unit 155, vaccine engine 160 and the like.

The buffer 150 of the vaccine container 145 serves to buffer the vaccine streamed from the vaccine providing server 105, and the buffered vaccine is not stored as a file in the client 140 hard disk, but the vaccine loading unit ( 155 is immediately loaded into the client 140 memory.

The vaccine loading unit 155 serves to load the vaccine buffered in the buffer 150 in the memory of the client 140 with reference to the operating system, and the vaccine loaded in the memory is in the existing vaccine program distributed in the form of software. Play the same role as the vaccine you use.

In general, the process of loading a file into memory by the operating system is as follows.

The file on the hard disk to be loaded into the memory is allocated to the virtual memory address through the link editor and the loader of the operating system, and then loaded into the memory in combination with the segment mapping table. At this time, the files loaded into the memory are not loaded at once, but are loaded sequentially from the portion to be executed immediately, so that a file having a larger capacity than the physical memory can be executed.

The vaccine container 145 includes a virus scanning program, a web browser, or the like distributed by the vaccine provider 100. If the vaccine container 145 is a virus scanning program distributed by the vaccine provider 100, the vaccine container 145 is equipped with a vaccine engine 160 capable of virus detection and treatment, and the vaccine container 145. Is a web browser, the antivirus engine 160 is plugged into the web browser.

The vaccine engine 160 mounted in the vaccine container 145 as described above performs a role of searching for and treating a virus infected by the client 140 by using a vaccine streamed from the vaccine providing server 105. . In other words, the vaccine engine 160 is a vaccine driving unit for virus detection and treatment, and the vaccine engine 160 uses the latest vaccines necessary for detecting and treating viruses from the vaccine providing server 105 in real time.

Therefore, the vaccine streamed from the vaccine provider 100 to the client 140 is streamed to the client 140 whenever the vaccine container 145 runs on the client 140 and accesses the vaccine providing server 105, and the streaming is performed. The vaccine will always provide the latest version.

That is, in the process of searching for and treating the virus of the client 140 as described above, it is possible to start streaming the latest vaccine from the vaccine provider 100, so that the virus can be searched and cured immediately before the streaming is completed. It is the biggest feature.

In addition, in the present embodiment, the effect of the vaccine streaming service is maximized by using a content delivery network (CDN).

The CDN (Content Delivery Network) minimizes the middle mile between the content provider and the Internet Service Provider (ISP) through a cache server 130 distributed in a backbone network, thereby providing non-stop delivery. Load Balancing for Stop Delivery, Caching for Speedy Web Response, and Distributed and Replicated Content Delivery Methods to Minimize Internet Congestion to be.

Therefore, in order to deliver the vaccine of the vaccine delivery server 105 to the vaccine container 145 of the client 140 via the content delivery network (CDN) at high speed, the vaccine provider 100 may strategically connect with the content delivery network (CDN) service provider. Through the partnership, the vaccine can be streamed through the cache server 130 of the CDN.

That is, the vaccine provider 100 delivers the latest vaccine to the cache server 130 on the content delivery network (CDN) before each client 140 requests the vaccine container 145, or the vaccine container 145. By forwarding the latest vaccine to the cache server 130 as soon as it requests a vaccine, the vaccine container 145 is able to receive the latest vaccine at the same time running on the client 140.

2 is a simple flowchart of a process in which the vaccine container 145 detects and treats a virus that is infected with the client 140 by buffering a vaccine streamed from the vaccine providing server 105, and CDN for improving vaccine delivery performance. Use Content Delivery Network.

When the vaccine container 145 is executed at the client 140 (200), the vaccine container 145 is referred to as a dynamic linking library (DLL) file and library information necessary for driving the vaccine, and the preparation for the vaccine providing service is terminated. Then, using the vaccine streamed from the vaccine provider 100 to check whether the operating system, free memory, and network operation, etc. can receive the virus detection and treatment services infected with the client 140.

Then, the vaccine container 145 refers to the registry of the client 140 and after connecting to the vaccine providing server 105 (205), and determines the streaming protocol between the vaccine providing server 105 and the client 140.

At this time, since the client 140 vaccine container 145 is actually streaming the vaccine, not the vaccine providing server 105, but the cache server 130 on the content delivery network (CDN), the streaming protocol determined in the process It should be compatible with the CDN (Content Delivery Network) and the cache server 130 used in this embodiment.

In addition, when referring to the registry 170 of the client 140, the registry 170 stores all necessary information for the vaccine container 145 to load the vaccine data block from the vaccine providing server 105 to the client 140 memory. have. However, the client 140 registry 170 dealing with the present invention does not refer only to the registry of the Microsoft Windows system. The client 140 registry 170 is a D / B that stores information for the vaccine container 145 to stream the vaccine data block from the vaccine providing server 105 and load it into memory, and the structure thereof is a registry of the window system. Including INI files, of course, includes all types of D / B.

As described above, when the vaccine container 145 connects to the vaccine providing server 105 and the streaming protocol is determined, the vaccine container 145 initializes the system to search for and treat the virus infected by the client 140. Then, the vaccine engine is driven (210). However, at this time, there is no vaccine in the vaccine engine to be used for client 140 virus detection and treatment.

Accordingly, the vaccine container 145 requests the vaccine providing server 105 to immediately deliver the latest vaccine necessary for the client 140 virus search and treatment (215). Then, the vaccine providing server 105 redirects the vaccine delivery request of the client 140 to the cache server 130 on the content delivery network (CDN) having a minimum last mile and the client 140. Then, the vaccine is delivered to the cache server 130 (220), the client 140 vaccine container 145 receives the high speed streaming of the vaccine from the cache server 130 (225).

When the vaccine is delivered from the cache server 130 to the client 140 vaccine container 145, the vaccine container 145 checks whether the vaccine buffered in the buffer is available. If the vaccine buffered in the buffer is available (230), the vaccine container 145 loads the vaccine into the client 140 memory through the vaccine loading unit 155 (235), the vaccine engine 160 In step 240, the virus is searched for. However, at this time, the important point is that before all vaccine data is completed from the vaccine providing server 105 or the cache server 130 on the content delivery network (CDN), the client may be configured through the vaccine engine 160 with a minimum amount of vaccine. (140) virus scanning can be started.

When the vaccine engine 160 of the vaccine container 145 detects a virus infected with the client 140 or after the scan is completed (245), it is confirmed that the virus is infected with the client 140 (245). The client 160 treats the virus infected with the client 140 (250), passes the result to the vaccine provider 100, charges a fee for the vaccine service (255), and then scans the virus for the client 140. And output the treatment result (260). However, if a known virus infection is not identified in the virus search process for the client 140, the vaccine container 145 outputs the result to the client 140, and then terminates the virus search and treatment process.

According to the present invention, virus scanning is performed by buffering vaccine data streamed by a vaccine provider in real time to detect and treat viruses, thereby more effectively combating viruses than vaccines stored on a regular hard disk (programs may be damaged by new virus infiltration). There is an effect that can be done, and there is an advantage to reduce the inconvenience of storing the vaccine as a file on the hard disk or downloading the latest vaccine again.

Claims (10)

Vaccine D / B (Data Base), which is automatically updated with vaccine data capable of treating recently emerging viruses, and stores vaccines for service to clients; And And a vaccine providing unit configured to stream the vaccine data of the vaccine D / B to a client vaccine container. A buffer configured to buffer a vaccine streamed from the vaccine providing server; A vaccine loader configured to load a vaccine buffered in the buffer into a client memory by referring to a client operating system; And And a vaccine container comprising a vaccine engine for searching for and treating a virus infected to a client by using the vaccine streamed from the vaccine providing server. The method of claim 1, wherein the vaccine providing server, And a vaccine service charging unit configured to calculate and settle a fee for a vaccine service provided to the client. The vaccine of claim 1, wherein the vaccine is streamed from the vaccine providing server. Every time the vaccine container runs and accesses the vaccine providing server, the vaccine container is automatically streamed to the client, and the vaccine stream is automatically upgraded to the latest version. The vaccine of claim 1, wherein the vaccine is streamed from the vaccine providing server. In the process of searching for and treating the client virus, the vaccine providing system using streaming, characterized in that to start streaming the latest vaccine from the vaccine providing server, the virus is immediately searched and cured before the streaming is completed. The vaccine of claim 1, wherein the vaccine is streamed from the vaccine providing server. A vaccine providing system using streaming, which minimizes and provides a middle mile between the client and the vaccine providing server through a cache server distributed in a backbone network. It is characterized in that it comprises a client receiving a vaccine service through the Internet and a vaccine providing server for providing a vaccine to the client, Checking a system operating system, free memory, and network operation from the client; Determining a streaming protocol between the vaccine providing server and the client after accessing the vaccine providing server by referring to the client registry; Requesting the vaccine providing server the latest vaccine transmission necessary for virus detection and treatment from the client depending on the streaming protocol; Streaming the latest vaccine from the vaccine providing server to the client according to the vaccine request and loading the vaccine into the client memory; And Searching and treating the virus in the client through the vaccine; providing a vaccine using streaming comprising a. The method of claim 6, After searching and treating the virus in the client, delivering the treatment result to the vaccine providing server and charging a fee for the vaccine service further comprises the step of providing a vaccine using streaming. The method of claim 6, When transmitting vaccine from the vaccine providing server to the client, Redirecting and providing to a cache server on a CDN having a minimum mile between the client and the vaccine providing server; And Streaming the vaccine from the cache server to the client; Vaccine providing method using streaming further comprising a. It is characterized in that it comprises a client receiving a vaccine service through the Internet and a vaccine providing server for providing a vaccine to the client, Executing a vaccine container on the client side to select a cache server having a minimum vaccine provider and a middle-mile; Buffering a vaccine delivered to the cache server to a vaccine container of a client; The vaccine container searching for and treating viruses through the buffered vaccine; And The vaccine container comprises the step of transmitting the virus search and treatment results to the vaccine providing server; vaccine providing method using streaming. The method of claim 9, If the vaccine is upgraded on the vaccine providing server side, Transmitting the vaccine to a cache server of a content delivery network (CDN); Confirming that the vaccine container of the client is running; And Streaming the upgraded vaccine to the vaccine container of the client; Vaccine providing method using a stream further comprising.