File Synchronization Scanning for Malware Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud storage synchronization introduces a risk of malware spread as existing device-side mechanisms unconditionally delete clean file copies before verifying the new version, potentially leaving devices without access to any version of the file.
Innovation Solution
Implementing a system that scans files for inappropriate content, such as malware, during synchronization by receiving and storing file portions, identifying storage locations, and only deleting inappropriate content, ensuring one clean version remains, and optionally preventing file downloads until scans are complete.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device-side mechanisms unconditionally delete existing clean file copies before verifying the new version, then malware spread is prevented, but file accessibility is lost
Solution Approach 1:
The system performs malware scanning on the newly received file version before deleting the existing clean copy. This preliminary verification ensures that the file is safe before removing the backup, thus preventing malware spread while maintaining file accessibility throughout the verification process.
Solution Approach 2:
The system maintains the existing clean file copy as a backup during the scanning process. This cushioning mechanism ensures that if the new version is found to be malicious, the device still has access to a clean version, preventing loss of file accessibility.
2Productivity
If cloud storage is used to synchronize files, then data synchronization is improved, but malware spread risk increases
Solution Approach 1:
The system introduces an intermediary scanning mechanism that processes files between cloud storage synchronization and device storage. This intermediary layer verifies the safety of synchronized files before they are stored locally, enabling data synchronization while blocking malware spread.
Solution Approach 2:
The system performs malware scanning as a preliminary action before completing the file synchronization process. By verifying file safety before final storage, the system enables productive synchronization while preventing harmful malware from being distributed across devices.
3Reliability
If the newly received file copy is deleted upon malware detection, then malware is blocked, but sync relationship is broken
Solution Approach 1:
The system implements a feedback mechanism where malware detection results trigger appropriate responses. When malware is detected, the system blocks the malicious file while maintaining the sync relationship intact, allowing for proper error handling and synchronization recovery without breaking the connection between devices.
Solution Approach 2:
The system maintains the existing file version as a cushion against malware detection in the new version. This ensures that even when malware is blocked, the sync relationship remains stable and functional, as the system can fall back to the existing version without breaking the synchronization connection.
Data Source
AI summary
The present invention extends to methods, systems, and computer program products for scanning files for inappropriate content during file synchronization. Embodiments of the invention are mindful of the order of operations when scanning files for inappropriate content and in subsequent file processing. In some embodiments, during synchronization, an intermediary server scans a file for inappropriate content. The file is not permitted to be fully downloaded to a client device until the scan determines that the file does not contain inappropriate content. In other embodiments, during synchronization, a client device scans a newer version of a file for inappropriate content. An older version of the file is not deleted until the scan determines that the newer version of the file does not contain inappropriate content. In further embodiments, server side scanning and client side scanning are both used to enhance capabilities for detecting inappropriate content.