KR20000063357A - Remote anti-virus system and method on the wireless network - Google Patents

Abstract

Real-time monitoring of customer's wireless terminal system can be detected by virus monitoring and vaccine distribution means immediately after virus invasion, and then automatically prevents virus and deploys updated vaccine to protect customer's information from virus risk. The present invention also relates to a wireless virus protection system and method for preventing new viruses in advance.

Therefore, the method of wirelessly controlling the virus includes the steps of treating the virus with a virus diagnosis and treatment means in the wireless terminal when the virus is found in the wireless terminal system, and when the virus cannot be cured by the virus diagnosis and treatment means. Is transmitted to the virus monitoring and vaccine distribution means through file transfer and vaccine distribution means, and after the infected files received from the file transmission and vaccine distribution means are analyzed in the virus monitoring and vaccine distribution means, an updated vaccine is developed. Deploying to all file transfer and vaccine distribution means, and distributing the updated vaccine to all wireless terminals in the file transfer and vaccine distribution means.

Description

Remote anti-virus system and method on the wireless network

The present invention relates to a wireless virus protection system and a method using a wireless communication network, and more specifically, to monitor the wireless terminal system in real time remotely using a wireless communication network, virus monitoring and vaccine distribution as soon as a virus invades the wireless terminal system The present invention relates to a wireless virus protection system and a method using a wireless communication network that automatically detects the virus and detects the virus.

Recently, the explosively activated and useful information can be obtained by using the wired Internet for providing information by wire and the wireless Internet and wireless mobile communication for providing information by wire. In addition, the wireless Internet and wireless mobile communication that provides information wirelessly have tended to combine the characteristics of each other with the development of technology.

Currently, wireless terminals such as mobile phones, smartphones, PDAs, Palm PCs, and International Mobile Telecommunications-2000 (IMT2000) terminals that can wirelessly use the Internet use large amounts of memory, and thus file systems for managing each memory are basically provided. Similar to the existing wired computers, contacts with external materials, such as exchanging data using e-mails or searching for information as an Internet service, are increasing significantly. However, such contact with external data may be exposed to viruses through various information and programs received, and methods for preventing virus damage to wireless terminals are currently insufficient.

Therefore, it was necessary for the wireless terminal to check and protect the virus like a wired computer and to provide an updated new vaccine.

Accordingly, an object of the present invention is to solve the above problems, and an object of the present invention is to remotely monitor a wireless terminal system of a customer in real time and to automatically prevent virus after capturing it in a virus monitoring and vaccine distribution means immediately after the virus invades. By providing a wireless virus protection system and method that can protect your information from the risk of viruses.

Another object of the present invention is to provide a wireless virus protection system and method that can prevent new virus invasion in advance by analyzing the new virus in a short time through real time analysis and automatically distributing vaccine to all wireless terminals. It is.

It is still another object of the present invention to provide a wireless virus protection system and a method for distributing vaccines to customers by using a fusin method or a pool method.

1 is a schematic diagram of a wireless Internet virus protection system according to the present invention.

Figure 2 is a block diagram showing a quarantine center according to the present invention.

Figure 3 is a block diagram showing a defense server according to the present invention.

4 is a block diagram showing a wireless terminal according to the present invention.

5 is an overall flowchart of a wireless virus protection system according to the present invention.

<Explanation of symbols for the main parts of the drawings>

100: Virus monitoring and distribution means (Protection Center)

200: file transfer and distribution means (protection server)

300: wireless terminal 102: center console

104: center server module 106: soft console

202: site server module 204: site console

302: Soft Client 303: ViRobot

304: RAM resident ViRobot 306: Disc ViRobot

Wireless virus prevention system of the present invention for achieving the above object is a virus monitoring and vaccine distribution means consisting of a Center Server Module (Center Server Module), Center Console (Center Console) and Soft Console (hereinafter referred to as a Defense Center) File transfer and antivirus distribution method (hereinafter referred to as an anti-virus server) consisting of a Site Server Module and a Site Console, and a Virobot and a Soft Client. It is characterized by consisting of a wireless terminal.

The center server module receives the updated vaccine from the soft console and transmits it to each site server module in a pull method and distributes it in a push method when the transmission fails.

The center console collects information such as a log / event record received from the wireless terminal and monitors the system of the wireless terminal in real time.

Site server module is characterized in that the updated vaccine provided by the center server module to the wireless terminal by a pull or push distribution.

In addition, the method for preventing a wireless virus protection system according to the present invention, if a virus is found in the wireless terminal system, the step of treating the virus with a virus diagnosis and treatment means in the wireless terminal, and the virus treatment by the virus diagnosis and treatment means may not be possible. When the infected files are transferred to the virus monitoring and vaccine distribution means through file transfer and vaccine distribution means, and the infected vaccines received from the file transmission and vaccine distribution means are analyzed by the virus monitoring and vaccine distribution means, and then updated It can be achieved by the step of developing and distributing to all the file transfer and vaccine distribution means, and to distribute the updated vaccine to all wireless terminals in the file transfer and vaccine distribution means.

Hereinafter, with reference to the accompanying drawings will be described in detail.

1 is a schematic diagram of a wireless virus protection system according to the present invention, Figure 2 is a block diagram showing a prevention center according to the present invention, Figure 3 is a block diagram showing a prevention server according to the present invention, Figure 4 is a present invention It is a block diagram which shows the wireless terminal which concerns on this.

According to the present invention, a user of a wireless terminal 300 such as a mobile phone, a smart phone, a PDA, a palm PC, and an IMT2000 terminal is connected to an anti-virus server 200 through a WAP (Wireless Application Protocol) gateway. The anti-virus server 200 is generally connected by TCP / IP, but may also be connected by an automatic address acquisition protocol (DHCP) method or a PPP method using a telephone line due to the request of the anti-virus server 200. Can be.

As shown in FIG. 2, the quarantine center 200 includes a center server module 104, a center console 102, and a soft console 106.

The center server module 104 converts information such as a log / event record of the wireless terminal 300 received from the anti-virus server 200 into a database and transmits the information to the center console 102. In addition, the center server module 104 transmits the virus-infected file received from the anti-virus server 200 to the soft console 106 to request an analysis, and receives the updated vaccine by analyzing the soft console 106 to transmit the respective anti-virus. Deploy to the server 200 in a pull or push manner. At this time, the center server module 104 communicates with each of the defense server 200 through a password, one of which is to communicate in a public key infrastructure (Public Key Infrastructure).

The center console 102 monitors the system of the wireless terminal 300 in real time by collecting information such as various logs / event records received from customers. At this time, if a new virus is found in the wireless terminal 300 to notify the defense server 200 to alert immediately, such as sound, pager, mobile phone and short message service (hereinafter referred to as SMS) do. In addition, the center console 102 may add a chat function for recording a conversation history with the site server module 202.

The soft console 106 analyzes the virus infection file received from the center server module 104 in a short time and transmits the analyzed update vaccine back to the center server module 104.

As shown in FIG. 3, the anti-virus server 200 includes a site server module 202, a site console 204, and a WAP gateway 206.

The site server module 202 transmits information such as a log / event record of each wireless terminal 300 and a virus infected file to the quarantine center 100. In addition, the site server module 202 periodically queries the quarantine center 100, downloads the latest update vaccine, and distributes the update vaccine to the wireless terminal 300 of all customers in a pull or push manner.

The site console 204 accesses the site server module 202 to monitor the status of virus update and distribution of updates to the wireless terminal 300. In addition, the site console 204 notifies the wireless terminal by warning means such as sound, pager, mobile phone, and SMS when a virus is found in the wireless terminal 300.

As shown in FIG. 4, the wireless terminal of the present invention includes a soft client 302, a viRobot 303, and the like.

ViRobot 303 includes RAM-resident ViRobot 304, and Disk ViRobot 306 when a disk is present, performs a function of diagnosing and treating a virus, and transmits the result to the soft client 302. RAM-resident ViRobot 304 always resides in RAM and diagnoses and repairs viruses when executing files and compressed files.

The soft client 302 transmits a diagnosis result of the virus received from the viRobot 303 and a file infected with the virus to the anti-virus server 200, performs a patch of the vi-robot 303, and transmits a command from the anti-virus server 200. Take responsibility for security.

Hereinafter, the operation of the present invention will be described in detail through the flow of FIG.

When power is supplied to the wireless terminal on which the anti-virus service is performed (step S502), the antivirus program of the RAM-resident ViRobot 304 is operated to check the infectable file currently in the memory (step S504). At this time, if the infected file is not normally recovered, the infected file is transferred to the site server module 202 after transmitting the corresponding message to the soft client 302.

After the file inspection, information on the vaccine currently possessed by the wireless terminal is passed to the site server module 202 of the anti-virus server 200 to determine whether an update is necessary (step S508). At this time, if there is a need for an update, the anti-virus server 200 updates the new vaccine by paging or points out the need for an update in a traffic channel (traffic channel) (step S510).

If the customer accesses the memory when the customer downloads the program or uses the e-mail through the wireless terminal 300 (step S514), the file is protected by a vaccine by the viRobot 303 in the wireless terminal 300. (Step S516).

In addition, when the power of the wireless terminal 300 is down (off), all files in the memory are diagnosed with a vaccine (step S520).

Next, a countermeasure for the case of a failure in the wireless bias prevention system will be described with an example.

First, when the anti-virus center 100 system is down, the anti-virus server 200 stores the various information to be sent to the anti-virus center in the local directory (206) of the anti-virus server 200, the anti-rust center 100 If communication with is made, transfer them all at once and delete them. The information to be stored in the locale directory 206 is transmitted in order by time zone and also sequentially sent to the prevention center.

Second, when the system of the anti-virus server 200 is down, the anti-virus center 100 transmits data only to the other anti-virus server 200 that normally communicates. Therefore, the log record and the information of the infected file are continuously stored in the registry of all the wireless terminals 300 under the management of the down-protection server 200, and when communication is made, the information stored in the defense server 200 is transmitted. Delete log records from the registry.

Third, when the memory of the wireless terminal 300 becomes full and patches are difficult, the wireless terminal user is notified of such a situation first and then induced to secure a usable space. The soft client 302 designates as the down directory the memory most remaining in the user's terminal at all times. It also automatically creates down directories when memory changes occur.

As described above, the wireless virus protection system and method according to the present invention by remotely monitoring the wireless terminal system of the customer in real time by capturing it in the prevention center immediately after the virus invade and automatically prevents the bias There is an effect that can protect the customer's information from internal and external risks.

In addition, the present invention has an effect that can be completely eliminated from the fear of the virus by automatically distributing the updated vaccine to the customer terminal.

In addition, the built-in messaging feature allows administrators to send messages to all users or to specific users, making it easy to communicate information about viruses.

Those skilled in the art will appreciate that various changes and modifications can be made without departing from the spirit of the invention. Therefore, the technical scope of the present invention is not limited to the contents described in the accompanying drawings and the detailed description of the specification.

Claims (9)

In the system which prevents the virus of a wireless terminal, A wireless terminal for treating the virus by virus diagnosis and treatment means when the virus invades, and transmitting the untreated file to a file transfer and vaccine distribution means; File transmission and vaccine distribution means for transmitting the infected file transmitted from the wireless terminal to virus monitoring and vaccine distribution means, and distributing the updated vaccine to the wireless terminal; And Virus monitoring and vaccine distribution means for monitoring the invasion of the virus, receiving the infected file from the file transmission and vaccine distribution means, updating the vaccine, and distributing the updated vaccine to all file transmission and vaccine distribution means. Wireless virus protection system characterized in that it comprises. According to claim 1, wherein the virus monitoring and vaccine distribution means A center console for monitoring the intrusion of viruses into the wireless terminal; A center server module for transmitting the updated vaccine to all file transfer and vaccine distribution means; And a soft console for analyzing the virus-infected file and developing an updated vaccine and transmitting the updated vaccine to the center server module. According to claim 1, The file transfer and vaccine distribution means, A site server module for distributing the updated vaccine received from the virus monitoring and vaccine distributing means to the wireless terminal; And a site console for alerting and informing the wireless terminal if the virus is found. The method of claim 1, wherein the wireless terminal is ViRobot for diagnosing and treating the virus; And a soft client for transmitting the diagnosis result of the virus and the file infected with the virus to the file transfer and vaccine distribution means. The method of claim 4, wherein the ViRobot A RAM-resident ViRobot for diagnosing and treating the virus when the file resides in RAM; Wireless virus protection system comprising a disk viRobot for checking all the files of the wireless terminal at a predetermined time. If a virus is found in the wireless terminal system, treating the virus with virus diagnosis and treatment means in the wireless terminal; Transmitting the infected file to a virus monitoring and vaccine distribution means through a file transmission and a vaccine distribution means when the virus cannot be cured by the virus diagnosis and treatment means; Analyzing the infected file received from the file transmission and vaccine distribution means in a virus monitoring and vaccine distribution means, and then developing an updated vaccine and distributing it to all file transmission and vaccine distribution means; And And distributing the updated vaccine to all wireless terminals in the file transfer and vaccine distribution means. 7. The wireless virus protection method according to claim 6, wherein the virus monitoring and vaccine distributing means and the file transmission and vaccine distributing means are connected by one of a TCP / IP scheme, an automatic address acquisition protocol scheme, and a PPP scheme using a telephone line. The method according to claim 6, wherein in the case where file transmission and transmission in the vaccine distribution means are impossible due to the system down of the virus monitoring and vaccine distribution means, In the local directory of the file transmission and vaccine distribution means, the log record and the information of the infected file transmitted from the wireless terminal are stored in order by time zone, and when the communication with the virus monitoring and vaccine distribution means is performed, the file transmission and vaccine Wireless virus protection method characterized in that the information stored in the local directory of the distribution means sequentially transmitted and then deleted. 7. The method of claim 6, wherein the information of the wireless terminal cannot be transmitted due to system down of the file transfer and the vaccine distribution means. The log record and the information of the infected file are sequentially stored in the registry of the wireless terminal, and when the communication with the file transmission and the vaccine distribution means is performed, the log record and the information of the infected file are sequentially transmitted to the file transmission and the vaccine distribution means. Wireless virus protection method characterized in that the deletion after transmission.