Granted Patent B2

US 11,258,789 · App. 16/209,097 · Granted Feb 22, 2022

Inventors: Gal Itach (Ra'anana, IL); Ayval Ron (Ra'anana, IL)

Assignee: FORCEPOINT LLC

H04L63/0861H04L9/0643H04L61/6059H04L63/0428H04L67/06H04L63/14

Abstract

Claims (22)

1. A system for optimization of data transmission, comprising: a content protection extraction system configured to operate on a remote processor and to extract content protection data associated with a data file and to transmit the content protection data to a central processor; and a content protection confirmation system configured to operate on the central processor and to receive the content protection data and to verify whether the content protection data is associated with an authenticated data file to verify that the data file has not been modified with malicious code, wherein the content protection extraction system is configured to transmit the content protection data to the central processor in predetermined fields of an IPV6 data frame header, wherein the content protection data comprises a unique hash value.

2. The system of claim 1 wherein the content protection confirmation system is configured to verify whether the content protection data is associated with the authenticated data file by processing a data structure of the content protection data to determine if it is associated with a unique protected data file.

3. The system of claim 1 wherein the content protection confirmation system is configured to verify whether the content protection data is associated with the authenticated data file by determining whether the content protection data is stored in a local data memory.

4. The system of claim 1 wherein the content protection confirmation system is configured to request the data file associated with the content protection data from a repository of unique protected data files if the content protection data is not stored in a local data memory.

5. The system of claim 1 wherein the content protection confirmation system is configured to request the data file associated with the content protection data from a repository of unique protected data files if the content protection data is not stored in a local data memory device and to process the data file to determine whether the data file is infected with malware.

6. The system of claim 1 wherein the content protection confirmation system is configured to request the data file associated with the content protection data if the content protection data is not stored in a local data memory, to determine whether the data file is infected with malware, and to store the data file and the associated content protection data in a local data memory device as a unique protected data file.

7. The system of claim 1 wherein the content protection extraction system is configured to extract the content protection data associated with the data file by generating a hash of the data file that.

8. The system of claim 1 wherein the content protection extraction system is configured to extract the content protection data associated with the data file from a predetermined location in the data file of a unique protected data file.

9. The system of claim 1 wherein the content protection confirmation system is configured to receive the content protection data in a predetermined location of an IPv6 data frame using a network interface device and to verify whether the content protection data is associated with the authenticated data file using the network interface device.

10. A method for optimization of data transmission, comprising:

extracting content protection data associated with a data file; transmitting the content protection data to a central processor, wherein the content protection data associated with the data file is transmitted to the central processor in predetermined fields of an IPV6 data frame header, wherein the content protection data comprises a unique hash value; receiving the content protection data at the central processor; and verifying whether the content protection data is associated with an authenticated data file to verify that the data file has not been modified with malicious code using a fast proof of non-existence process.

11. The method of claim 10 wherein the content protection data associated with the data file is extracted at a remote processor and further comprising verifying whether the content protection data is associated with the authenticated data file by processing a data structure of the content protection data without receiving the data file at the remote processor to determine whether the data structure is associated with a unique protected data file that corresponds to the data file.

12. The method of claim 10 comprising verifying whether the content protection data is associated with the authenticated data file by determining whether the content protection data is stored in a local data memory storing unique protected data files.

13. The method of claim 10 comprising requesting the data file associated with the content protection data if the content protection data is not stored in a local data memory and determining whether the data file is a unique protected data file.

14. The method of claim 10 comprising requesting the data file associated with the content protection data if the content protection data is not stored in a local data memory device and determining whether the data file is protected against malware.

15. The method of claim 10 comprising:

requesting the data file associated with the content protection data if the content protection data is not stored in a local data memory;

determining whether the data file is protected against malware; and

storing the data file as a unique protected data file and the associated content protection data in a local data memory device only if the data file is protected against malware.

16. The method of claim 10 comprising extracting the content protection data associated with the data file by generating a hash of the data file.

17. The method of claim 10 comprising extracting the content protection data associated with the data file from a predetermined location in the data file.

18. The method of claim 10 comprising receiving the content protection data in a predetermined location of an IPv6 data frame using a network interface device and verifying whether the content protection data is associated with the authenticated data file using the network interface device.

Assignments (8)