IP Library › Granted Patent US 11,106,793
Granted Patent B2
US 11,106,793 · App. 16/448,243 · Granted Aug 31, 2021

Disarming malware in protected content

Inventor: Aviv Grafi (Ramat Gan, IL)
Assignee: Votiro Cybersec Ltd.
G06F21/568G06F21/54G06F21/563G06F21/602G06F21/6209
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,106,793
App. No.
16/448,243
Granted
Aug 31, 2021
Kind
B2
Abstract

Systems and methods of disarming malicious code in protected content in a computer system having a processor are provided. The method includes determining that a received input file intended for a recipient is protected, the recipient may be connected to a network; accessing a credential associated with the intended recipient for accessing the protected input file; accessing the content of the protected input file based on the credential; modifying at least a portion of digital values of the content of the input file configuring to disable any malicious code included in the input file, thereby creating a modified input file; and protecting the modified input file based on the credential associated with the intended recipient. The method also includes forwarding the protected modified input file to the intended recipient in the network.

Claims (37)

1. A method of disarming malicious code in protected content in a computer system having a processor, the method comprising:

receiving, by the processor, a password-protected input file intended for a recipient;

receiving, by the processor, a credential for accessing the password-protected input file;

accessing, by the processor, the content of the password-protected input file based on the credential;

modifying, by the processor, at least a portion of digital values of the content, wherein the modifying disables any malicious code included in the content without intentionally altering non-malicious functionality of the received input file, thereby creating a modified input file, and wherein the modified input file is modified to be substantially similar to the received input file; and

enabling access to the modified input file based on the credential for accessing the password-protected input file.

2. The method of claim 1 , further comprising protecting, by the processor, the modified input file based on the credential associated with the intended recipient.

3. The method of claim 2 , wherein protecting the modified input file includes password-protecting the modified input file based on a password for accessing the content of the password-protected input file.

4. The method of claim 1 , further comprising requesting, by the processor, the credential from the intended recipient.

5. The method of claim 1 , further comprising determining, by the processor, the credential based on a content of a communication associated with the password-protected input file intended for the recipient.

6. The method of claim 1 , wherein the credential associated with the intended recipient is a password for accessing the content of the password-protected input file.

7. The method of claim 1 , further comprising providing, by the processor, a notification to the intended recipient that the modified input file includes modified content.

8. The method of claim 7 , wherein the notification is included in content of the modified input file.

9. The method of claim 7 , wherein the notification is included in a communication associated with the modified input file.

10. The method of claim 9 , wherein the communication is an electronic message including the modified input file attached thereto.

11. The method of claim 1 , wherein the password-protected input file is encrypted.

12. The method of claim 11 , wherein the credential associated with the intended recipient is a password for decrypting the password-protected input file.

13. The method of claim 11 , wherein the credential associated with the intended recipient is a password that provides a basis for which a decryption key may be derived.

14. The method of claim 11 , further comprising determining, by the processor, that the password-protected input file is encrypted.

15. The method of claim 1 , further comprising creating, by the processor, a digital signature associated with the modified input file.

16. The method of claim 1 , further comprising storing, by the processor, the password-protected input file in a dedicated storage area of the computer system.

17. The method of claim 16 , further comprising enabling, by the processor, access to the content of the password-protected input file by the intended recipient according to a policy of the computer system.

18. The method of claim 1 , wherein the modifying, by the processor, is performed without first detecting malicious code in the digital values of the received password-protected input file.

19. A non-transitory computer-readable medium comprising instructions that when executed by a processor are configured for carrying out a method of disarming malicious code in protected content in a computer system, the method comprising:

receiving, by the processor, a password-protected input file intended for a recipient;

receiving, by the processor, a credential for accessing the password-protected input file;

accessing, by the processor, the content of the password-protected input file based on the credential;

modifying, by the processor, at least a portion of digital values of the content, wherein the modifying disables any malicious code included in the content without intentionally altering non-malicious functionality of the received input file, thereby creating a modified input file, and wherein the modified input file is modified to be substantially similar to the received input file; and

enabling access to the modified input file based on the credential for accessing the password-protected input file.

20. A system for disarming malicious code in protected content, the system comprising:

a memory device storing a set of instructions; and

a processor configured to execute the set of instructions to:

receive, by the processor, a password-protected input file intended for a recipient;

receive, by the processor, a credential for accessing the password-protected input file;

access, by the processor, the content of the password-protected input file based on the credential;

modify, by the processor, at least a portion of digital values of the content, wherein the modifying disables any malicious code included in the content without intentionally altering non-malicious functionality of the received input file, thereby creating a modified input file, and wherein the modified input file is modified to be substantially similar to the received input file; and

enable access to the modified input file based on the credential for accessing the password-protected input file.

Continuity (3)
Continuation 15926484 · Mar 20, 2018
Provisional Application 62473902 · Mar 20, 2017
Related Publication 20190311122A1 · Oct 10, 2019
Cited By (1)
US 12,238,102