The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 07, 2014

Filed:

Dec. 23, 2013
Applicant:

Fortinet, Inc., Sunnyvale, CA (US);

Inventors:

Andrew F. Fanton, Westminster, CO (US);

John J. Gandee, Loveland, CO (US);

William H. Lutton, Fort Collins, CO (US);

Edwin L. Harper, Platteville, CO (US);

Kurt E. Godwin, Loveland, CO (US);

Anthony A. Rozga, Wellington, CO (US);

Assignee:

Fortinet, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 21/51 (2013.01); G06F 21/60 (2013.01); H04L 29/06 (2006.01); G06F 21/52 (2013.01); G06F 21/44 (2013.01); G06F 21/53 (2013.01); G06F 21/10 (2013.01);
U.S. Cl.
CPC ...
G06F 21/44 (2013.01); G06F 2221/2141 (2013.01); G06F 21/51 (2013.01); G06F 21/602 (2013.01); Y10S 707/99943 (2013.01); H04L 63/0884 (2013.01); Y10S 707/99934 (2013.01); Y10S 707/99944 (2013.01); G06F 21/52 (2013.01); H04L 63/08 (2013.01); G06F 21/53 (2013.01); G06F 21/10 (2013.01);
Abstract

Systems and methods for selective authorization of code modules are provided. According to one embodiment, a trusted service provider maintain a cloud-based whitelist containing cryptographic hash values including those of code modules that are approved for execution on computer systems of subscribers of the service provider. A code module information query, including a cryptographic hash value of a code module, is received from a computer system of a subscriber by the service provider. If the cryptographic hash value matches one the cryptographic hash values contained within the cloud-based whitelist and the code module is an approved code module, then the service provider responds with an indication that the code module is authorized for execution; otherwise, it (i) responds with an indication that the code module is an unknown code module; and (ii) causes one or more behavior analysis techniques to be performed on the code module.


Find Patent Forward Citations

Loading…