Temporal access control for computer virus prevention
View Patent ↗An access control system ( 200 ) enables a computer network ( 1 ) to prevent execution of computer code that may contain computer viruses. An access control console ( 201 ) generates an access control message ( 260 ) including control parameters such as a time limit ( 255 ). Said time limit ( 255 ) is disseminated to computers ( 2, 3 ) on the network ( 1 ). Said computers ( 2, 3 ) use the time limit ( 255 ) to determine the executability of computer code. Access control system ( 200 ) also enables blocking data communications with suspicious or susceptible programs in network ( 1 ) during virus outbreaks.
1. A system for preventing infection of a host system by a virus, the system comprising:
a memory module configured to store a time stamp indicating a time at which a computer code was introduced to the host system;
an access control module coupled to the memory module and comprising instructions that, when executed by a computer processor:
receive an access control message including an access control time, wherein the access control time is expressed as a duration of time; and
prevent execution of the computer code on the host system responsive to the time stamp indicating a time within the duration of time expressed by the access control time; and
a computer processor configured to execute the instructions of the access control module.
2. The system of claim 1 , wherein the access control message further includes sources of computer code; and
the instructions, when executed by the computer processor, further prevent execution of the computer code responsive to the computer code originating from a source of computer code included in the access control message.
3. The system of claim 1 , wherein
the access control message further includes an expiration time; and
the instructions, when executed by the computer processor, further permit execution of the computer code responsive to the expiration time indicating that the access control message has expired.
4. The system of claim 1 , wherein the instructions, when executed by the computer processor, further intercept an attempt to execute the computer code.
5. The system of claim 1 , wherein the time at which the computer code was introduced to the host system is a time at which the computer code was first introduced to the host system.
6. The system of claim 1 , wherein the access control time is a fixed time period measured from when the computer code is introduced to the host system during which the instructions, when executed by the computer processor, prevent execution of the computer code.
7. The system of claim 1 , wherein the access control time represents an estimate of when a virus attack first began.
8. A method for preventing infection of a host system by a virus, comprising:
storing a time stamp indicating a time at which a computer code was introduced to the host system;
receiving an access control message including an access control time, wherein the access control time is expressed as a duration of time; and
preventing execution of the computer code on the host system when the time stamp indicates a time within the duration of time expressed by the access control time.
9. The method of claim 8 , further comprising:
receiving a list of sources;
determining a source of the computer code; and
preventing execution of the computer code on the host system when the source of the computer code is listed in the list of sources.
10. The method of claim 8 , further comprising:
receiving a list of types of computer code;
determining a type of the computer code; and
preventing execution of the computer code on the host system when the type of the computer code is listed in the list of types of computer code.
11. The method of claim 8 , wherein the access control message further includes sources of computer code, and further comprising:
preventing execution of the computer code when the computer code originated from a source of computer code included in the access control message.
12. The method of claim 8 , wherein the access control message further includes an expiration time, and further comprising:
permitting execution of the computer code when the expiration time indicates the access control message has expired.
13. A non-transitory computer readable storage medium storing a computer program executable by a processor for preventing infection of a host system by a virus, the actions of the computer program comprising:
storing a time stamp indicating a time at which a computer code was introduced to the host system;
receiving an access control message including an access control time, wherein the access control time is expressed as a duration of time; and
preventing execution of the computer code on the host system when the time stamp indicates a time within the duration of time expressed by the access control time.
14. The computer readable storage medium of claim 13 , further comprising:
receiving a list of sources;
determining a source of the computer code; and
preventing execution of the computer code on the host system when the source of the computer code is listed in the list of sources.
15. The computer readable storage medium of claim 13 , further comprising:
receiving a list of types of computer code;
determining a type of the computer code; and
preventing execution of the computer code on the host system when the type of the computer code is listed in the list of types of computer code.
16. The computer readable storage medium of claim 13 , wherein the access control message further includes sources of computer code, and further comprising:
preventing execution of the computer code when the computer code originated from a source of computer code included in the access control message.
17. The computer readable storage medium of claim 13 , wherein the access control message further includes an expiration time, and further comprising:
permitting execution of the computer code when the expiration time indicates the access control message has expired.
18. The system of claim 1 , wherein the access control message is created by, and received from, a system administrator.
19. The system of claim 1 , wherein:
the memory module stores a first time stamp indicating a first time at which a first computer code was introduced to the host system, and a second time stamp indicating a second time at which a second computer code was introduced to the host system, the first time being within the duration of time expressed by the access control time, and the second time being outside the duration of time expressed by the access control time; and
the instructions when executed by the computer processor prevent execution of the first computer code on the host system responsive to the first time stamp and allow execution of the second computer code on the host system responsive to the second time stamp.
20. The system of claim 1 , wherein the time at which the computer code was introduced to the host system is a time at which the computer code entered the host system.