Safe file transmission and reputation lookup
AssigneeMicrosoft Corporation
InventorsGeoff Hulten, John Scarrow, Ivan Osipkov, Kristofer N. Iverson
Life of this patent
Estimating the term…
Abstract
Safe file transmission and reputation lookup. As a part of the safe file transmission and reputation lookup methodology, a data file that is to be made available to a data file receiver is accessed and it is determined whether the data file needs to be provided a protective file. The data file is wrapped in a protective file to create a non-executing package file. Access is provided to the non-executing package file where the associated data file is prevented from being executed until data file reputation information is received.
Claims20
A method for safe file transmission, comprising:
- upon determining that a data file needs to be protected, wrapping said data file in a protective file to create a package file that inhibits at least one of access to and execution of said data file until data file reputation information is accessed, said determining based at least in part upon at least one of:
- whether said data file was sent by an unknown sender with an internet protocol address in a dynamic range and whether malware has previously been received from said internet protocol address;
- a likelihood that said data file comprises malware;
- and
- whether malware has previously been received from a user associated with said data file, at least some of said wrapping implemented at least in part via a microprocessor.
A computer readable device comprising computer executable instructions that when executed via a processor perform a method for safe file transmission, comprising:
- determining whether a data file needs to be protected;
- and
- upon determining that said data file needs to be protected, wrapping said data file in a protective file to create a package file that inhibits at least one of access to and execution of said data file until data file reputation information is accessed, a block on said access to said data file overridden after a warning indicating a level of suspiciousness associated with said data file is accessed, said level of suspiciousness based at least in part upon at least one of:
- a number of users that executed said data file;
- a number of times said data file has traveled through a network;
- a first time and date said data file was observed;
- whether said data file was reviewed by an analyst;
- a certificate used to sign said data file and a link to a company that controls said certificate;
- and
- a link to at least one of a search page and a discussion group comprising information about said data file.
A system for safe file transmission, comprising:
- a protection determining component configured to determine whether a data file needs to be protected;
- and
- a data file wrapping component configured to wrap said data file in a protective file to create a package file that inhibits at least one of access to and execution of said data file until data file reputation information is accessed, said wrapping implemented upon determining that said data file needs to be protected, said determining based at least in part upon at least one of:
- whether said data file was sent by an unknown sender with an internet protocol address in a dynamic range and whether malware has previously been received from said internet protocol address;
- a likelihood that said data file comprises malware;
- and
- whether malware has previously been received from a user associated with said data file, at least some of at least one of said protection determining component and said data file wrapping component implemented at least in part via a microprocessor.
Dependencies are inferred from the claim text.