Macro Virus Interception via Re-Authentication and Whitelisting

Solution Overview

Problem

Conventional antivirus technologies struggle to detect and prevent the spread of macro viruses, which can evade scanning processes and rapidly propagate, leading to widespread cybersecurity issues due to their ability to replicate and infect clean files.

Innovation Solution

A multi-tiered multi-factor dynamic strong encryption identity authentication system that includes a default status configuration, software and hardware whitelisting, and identity re-authentication processes to ensure strict access control and block unauthorized changes, using cryptographic algorithms and QR code authentication to verify user identity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional virus scanning technologies are used, then the scanning process can detect known viruses, but macro viruses can easily evade detection by hiding within data files and not residing in executable files

Engineering Contradiction:

Improvevirus detection capabilityVSAvoidmacro virus detection difficulty

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system performs preliminary actions by establishing strict access control mechanisms and identity authentication processes before macro viruses can execute or replicate. By requiring continuous verification of user identities and authentication tokens, the system prevents unauthorized macro code execution before it can cause harm, rather than attempting to detect viruses after they have already infected files.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary authentication system that mediates between user actions and system operations. Instead of directly scanning for viruses, the system uses an authentication token and identity verification mechanism as an intermediary layer that blocks potential virus execution paths, making detection of macro viruses embedded in data files unnecessary by preventing their activation in the first place.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If antivirus technology evolves to detect new macro viruses, then detection capability improves, but the pace of virus evolution continues to accelerate and new variants quickly render antivirus technologies obsolete

Engineering Contradiction:

Improveantivirus detection capabilityVSAvoidvirus evolution speed

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system performs preliminary actions by establishing strict access control mechanisms and identity authentication processes before macro viruses can execute or replicate. By requiring continuous verification of user identities and authentication tokens, the system prevents unauthorized macro code execution before it can cause harm, rather than attempting to detect viruses after they have already infected files.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent fundamentally changes the security parameter from virus detection characteristics to user identity authentication characteristics. Instead of tracking virus signatures and variants, the system uses dynamic authentication tokens and identity verification that adapt to each user session, making the security mechanism independent of virus evolution and effective against unknown macro virus variants.

Inventive Principle:

Principle #35Parameter changes

3Adaptability or versatility

If users are allowed to freely modify software and hardware configurations, then system adaptability improves, but security risks increase as unauthorized changes can be made by malicious code

Engineering Contradiction:

Improvesystem configuration flexibilityVSAvoidunauthorized modification risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system implements continuous feedback mechanisms by monitoring user actions and systematically verifying authentication tokens during configuration changes. Each modification attempt triggers an authentication check that provides feedback to the system, allowing legitimate user adaptations while blocking unauthorized changes made by malicious code through real-time identity verification.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The patent introduces an intermediary authentication system that mediates between user actions and system operations. Instead of directly scanning for viruses, the system uses an authentication token and identity verification mechanism as an intermediary layer that blocks potential virus execution paths, making detection of macro viruses embedded in data files unnecessary by preventing their activation in the first place.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12511384B2Computer virus interception method, system and computer program product

Publication Date: 2025.12.30 EVERMORE TECH

AI summary

The present invention relates to a computer virus interception method. The method includes: executing the following steps by a processor unit: providing for a user to configure a default software status list by operating a default status configuration interface, wherein the default software status list includes a plurality of macro application software; providing for the user to configure a software whitelist by operating a software whitelist configuration interface; providing for the user to configure a hardware whitelist by operating a hardware whitelist configuration interface; and performing an identity re-authentication process to re-authenticate an identity information of the user when one of a default status change operation, a software whitelist change operation, a hardware whitelist change operation, and a software whitelist anomaly is detected.