US 9,542,683 B2Granted

System and method for protecting electronic money transactions

AssigneeAO Kaspersky Lab

InventorsAlexander V. Kalinin, Sergey V. Dobrovolsky, Andrey Y. Solodovnikov, Vladislav V. Martynenko, Roel Schouwenberg

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Disclosed are systems and methods for protecting electronic money transactions from fraud and malware. An exemplary method include scanning a computer to detect software objects associated with electronic money that includes at least one of a wallet configured to store electronic money, an electronic money generating application, and data including an interaction history with an electronic exchange for electronic money; identifying and adjusting electronic money security modules configured to provide data security to the detected software objects associated with the electronic money; and executing, by the adjusted electronic money security modules, at least one electronic money transaction involving the electronic money. In one aspect, the electronic money security modules include a wallet protection module, a malware detection module, and a traffic control module.

Claims14

Dependent claims

A method for protecting electronic money transactions, comprising:

scanning a computer to detect software objects associated with electronic money, wherein said software objects include at least one electronic wallet configured to store electronic money and resources used by the electronic wallet to exchange the electronic money;
providing a set of security modules comprising a wallet protection module configured to provide data security to the detected electronic wallet and resources and a traffic control module configured to analyze protocols and control the transmission of data relating to the exchange of the electronic money by the detected electronic wallet;
and
upon detection of an electronic wallet:
controlling, by the wallet protection module, access to the resources used by the electronic wallet to protect an exchange of the electronic money by the electronic wallet;
tracking and protecting execution of the electronic wallet, by the wallet protection module, by monitoring and controlling access to at least one of virtual memory, network connections, and threads used by the electronic wallet, wherein access is reduced upon detection of suspicious activity, and wherein controlling access to virtual memory comprises protecting virtual memory used by a running process of an executable file of the electronic wallet by prohibiting injection of an external malicious code;
monitoring, by the traffic control module, network connections used by the electronic wallet to determine whether the exchange of electronic money by the electronic wallet is a transmission to an untrusted recipient based on protocol analyzer data obtained from analyzing the network connections;
and
upon determination that the transmission is to an untrusted recipient, controlling, by the traffic control module, the exchange of electronic money between the electronic wallet and the untrusted recipient by at least one of filtering malicious packets or controlling network connections.

6 more elements

A system for protecting electronic money transactions, comprising:

a hardware processor configured to:
scan a computer to detect software objects associated with electronic money, wherein said software objects include at least one electronic wallet configured to store electronic money and resources used by the electronic wallet to exchange the electronic money;
provide a set of security modules comprising a wallet protection module configured to provide data security to the detected electronic wallet and resources and a traffic control module configured to analyze protocols and control the transmission of data relating to the exchange of the electronic money by the detected electronic wallet;
and
upon detection of an electronic wallet:
control, by the wallet protection module, access to the resources used by the electronic wallet to protect an exchange of the electronic money by the electronic wallet;
track and protect execution of the electronic wallet, by the wallet protection module, by monitoring and controlling access to at least one of virtual memory, network connections, and threads used by the electronic wallet, wherein access is reduced upon detection of suspicious activity, and wherein controlling access to virtual memory comprises protecting virtual memory used by a running process of an executable file of the electronic wallet by prohibiting injection of an external malicious code;
monitor, by the traffic control module, network connections used by the electronic wallet to determine whether the exchange of electronic money by the electronic wallet is a transmission to an untrusted recipient based on protocol analyzer data obtained from analyzing the network connections;
and
upon determination that the transmission is to an untrusted recipient, control, by the traffic control module, the exchange of electronic money between the electronic wallet and the untrusted recipient by at least one of filtering malicious packets or controlling network connections.

7 more elements

A non-transitory computer readable medium storing computer executable instructions for protecting electronic money transactions, including instructions for:

scanning a computer to detect software objects associated with electronic money, wherein said software objects include at least one electronic wallet configured to store electronic money and resources used by the electronic wallet to exchange the electronic money;
providing a set of security modules comprising a wallet protection module configured to provide data security to the detected electronic wallet and resources and a traffic control module configured to analyze protocols and control the transmission of data relating to the exchange of the electronic money by the detected electronic wallet;
and
upon detection of an electronic wallet:
controlling, by the wallet protection module, access to the resources used by the electronic wallet to protect an exchange of the electronic money by the electronic wallet;
tracking and protecting execution of the electronic wallet, by the wallet protection module, by monitoring and controlling access to at least one of virtual memory, network connections, and threads used by the electronic wallet, wherein access is reduced upon detection of suspicious activity, and wherein controlling access to virtual memory comprises protecting virtual memory used by a running process of an executable file of the electronic wallet by prohibiting injection of an external malicious code;
monitoring, by the traffic control module, network connections used by the electronic wallet to determine whether the exchange of electronic money by the electronic wallet is a transmission to an untrusted recipient based on protocol analyzer data obtained by analyzing the network connections;
and
upon determination that the transmission is to an untrusted recipient, controlling, by the traffic control module, the exchange of electronic money between the electronic wallet and the untrusted recipient by at least one of filtering malicious packets or controlling network connections.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/735,583Filed 10 Jun 2015
Priority: RU 201414236322 Oct 2014
Published: US 2016/0117671 A128 Apr 2016
Granted: 10 Jan 2017
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

G06Q 20/3678
Involving electronic purses or money safes: e-cash details, e.g. blinded, divisible or detecting double spending
G06Q 20/3674
Involving electronic purses or money safes: involving authentication
G06Q 20/4016
Transaction verification: involving fraud or risk level assessment in transaction processing
G06Q
Information and communication technology [ict] specially adapted for administrative, commercial, financial, managerial