Trend Micro Inc.

Liulin Yang

Lei Wang

Bin Shi

Shiyu Xie

Kun Lu

Dan Tan

A user is provisioned for a Web service by supplying a user name and password. A digital certificate and VPN identifier are generated and downloaded to the user's computer. The VPN identifier and user identifier are stored into a database. The user accesses the Web service and establishes a VPN using the certificate and VPN identifier. A user identifier, user name or user password is not required. A gateway computer uses the VPN identifier to access the database previously established during the provisioning session to retrieve the user identifier. Retrieval of the user identifier validates that the computing device is authorized to use the Web service. The gateway computer stores the client IP address and a mapping to the user identifier into a database. A proxy server retrieves the user identifier from the database using the IP address and includes the user identifier in Web traffic for a remote computer.

End user authentication using a virtual private network

An endpoint computer includes a local client that transmits web traffic to a local proxy that also runs on the endpoint computer. The local proxy obtains a customer identity string that identifies a user of the local client as a paying customer of an SaaS scanning service provided by an SaaS scanning system. The local proxy inserts the customer identity string into the web traffic and thereafter transmits the web traffic to the SaaS scanning system, which authenticates the customer identity string before scanning the web traffic for web threats. The local client transmits the web traffic to the local proxy using a communication protocol and the local proxy can transmit the web traffic to the SaaS scanning system using the same or different communication protocol.

Software as a service scanning system and method for scanning web traffic

Providing malware-free web content to a user is disclosed. The web content is any type of web content that may potentially be infected by any type of malware. Upon receiving a request for a piece of web content from the user, the requested piece of web content is obtained from the appropriate source, and a dynamic template for the piece of web content is retrieved. The dynamic template indicates whether the requested piece of web content includes any malware and what actions are to be performed if any malware is included in the piece of web content. The requested piece of web content is cleaned up by performing the actions indicated in the dynamic template. Thereafter, the piece of web content is provided to the user. The dynamic template is updated from time to time based on the currently available information regarding the piece of web content.

Providing malware-free web content to end users using dynamic templates

Methods and apparatus for updating security software products on mobile telephones are described. When an update is available for a security software product installed on a mobile telephone, a server encodes and optionally compresses the update data from binary format into audio format. The server establishes a voice connection with the mobile telephone. The update data in audio format is transmitted to the mobile telephone via the voice connection. Upon receiving the complete update data in audio format, the mobile telephone decodes and optionally decompresses the update data from audio format back into binary format. The security software product installed on the mobile telephone is updated using the update data in binary format.

Growing community of inventors

Nanjing, China

Liulin Yang