US 10,091,214 B2Granted

Malware warning

AssigneeFinjan Mobile, Inc.

InventorsMichael Godlewski, Geoffrey House, Winnie Tong, Rudolph Mutter, Bay Lee Feore, Timothy Shipman, Anthony Scherba, Lee McDole, Alexander Lin Kremer, Julie Mar-Spinola

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A malware warning system, including a client sending requests to and receiving replies from a server, and a server, including a first warning generator sending to the client a warning including a threat level of content located at a web site, in response to receiving from the client a URL for accessing content at the web site, a second warning generator sending to the client a warning including information about at least one of the nature of the threat of the content located at the web site and a location of the web site, in response to receiving from the client a request for more information about the nature of the threat, and a third warning generator, sending to the client a warning including an instruction to perform a swipe gesture to confirm a request to access the URL, in response to receiving that request from the client.

Claims18

Dependent claims

A non-transitory computer readable medium storing instructions, which, when executed by a processor of an electronic device, cause the processor to:

register to listen to redirection events for a web browser that receives identifiers for accessing content at a destination web site;
generate three different successive warning displays to prevent access to malicious content, comprising:
receive an identifier for accessing content at a destination web site;
in response to receiving the identifier, send the identifier to a plurality of virus scan engines;
generate a first warning display comprising a threat level of content located at the destination web site, wherein the threat level is determined by a percentage of the virus scan engines that indicate that the destination web site is a threat;
receive a request for more information about the nature of the threat;
in response to receiving the request for more information, generate a second warning display comprising information about both (i) the nature of the threat of the content, and (ii) a location of the destination web site;
receive a request to access the content;
in response to receiving the request to access the content, generate a third warning display comprising an instruction to perform a confirmatory touch gesture to confirm the request to access the content;
in response to detecting the confirmatory touch gesture, attempt to access the content at the destination web site;
recognize an event that the identifier is being re-directed by the destination web site to another identifier;
and
prior to accessing the content using the other identifier, repeating said generate a first warning display, receive a request for more information, generating a second warning display, receive a request to access the content, and generate a third warning display, using the other identifier.

10 more elements

A malware warning module for an electronic device, comprising:

a touch-enabled input module, (i) receiving touch-based user input to a web browser comprising identifiers to access content at a destination web site, (ii) registering to listen to redirection events for the web browser that receives the identifiers, and (iii) generating three different successive warning displays to prevent access to malicious content;
a first warning display generator, sending an identifier of a destination web site to a plurality of virus scan engines in response to said one or more input devices receiving the identifier for accessing content at the destination web site, and generating a first warning display comprising a threat level of content located at a destination web site, wherein the threat level is determined by a percentage of the virus scan engines that indicate that the destination web site is a threat;
a second warning display generator, generating a second warning display comprising information about both (i) the nature of the threat of the content, and (ii) a location of the destination web site, in response to the electronic device receiving a request for more information about the nature of the threat;
and
a third warning display generator, generating a third warning display comprising an instruction to perform a confirmatory touch gesture to confirm a request to access the content, in response to the electronic device receiving a request to access the content;
and
a content accessor, attempting to access the content in response to detecting the confirmatory touch gesture, recognizing an event that the identifier is being re-directed by the destination web site to another identifier, and re-invoking said first, second and third warning display generators with the other identifier, prior to accessing the content using the other identifier.

4 more elements

A malware warning system, comprising:

a touch-enabled client computing device (i) sending requests to a web browser for accessing content at a destination web site, (ii) receiving replies from a server computing device, and (iii) registering to listen to redirection events for the web browser;
and
a server computing device (i) receiving the requests from the client for accessing content at the destination web site, (ii) receiving from the client redirection events for the web browser, and (iii) generating three different warning displays to prevent access to malicious content, comprising:
a first warning display generator, sending an identifier of a destination web site to a plurality of virus scan engines in response to receiving from the client the identifier from the client to access content at the destination web site, and sending to the client a first warning display comprising a threat level of content located at a destination web site, wherein the threat level is determined by a percentage of the virus scan engines that indicate that the destination web site is a threat;
a second warning display generator, sending to the client a second warning display comprising information about both (i) the nature of the threat of the content, and (ii) a location of the destination web site, in response to receiving from the client a request for more information about the nature of the threat;
a third warning display generator, sending to the client a third warning display comprising an instruction to perform a confirmatory touch gesture to confirm a request to access the content, in response to receiving from the client a request to access the content;
and
a content accessor, attempting to access the content in response to detecting that the confirmatory touch gesture has been performed on said client, recognizing an event that the identifier is being re-directed by the destination web site to another identifier, and re-invoking said first, second and third warning generators with the other identifier, prior to accessing the content using the other identifier.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/069,981Filed 15 Mar 2016 · us provisional application
Priority: 11 May 2015
Published: US 2016/0337379 A117 Nov 2016
Granted: 2 Oct 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/14
Network architectures or network communication protocols for network security: for detecting or protecting against malicious traffic
G06F 3/048
Input arrangements or combined input and output arrangements for interaction between user and computer: interaction techniques based on graphical…
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
H04L 63/1441
For detecting or protecting against malicious traffic: countermeasures against malicious traffic