Media Scanner Data Switch for Legacy System Malware Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for protecting target machines from malware on removable storage devices are ineffective in industrial environments, especially when legacy machines cannot run updated malware detection software, and installing such software on target machines is difficult or impossible.
Innovation Solution
A method utilizing a media scanner with a data switch and malware detection software to isolate and scan removable storage devices, disconnecting the target machine during scanning, and then transferring data after verification, ensuring the target machine is protected without requiring malware detection software installation on the target machine.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If malware detection software is installed on the target machine, then the target machine can detect malware on removable storage devices, but this is not possible in industrial environments where installing software on target machines is difficult or impossible
Solution Approach 1:
A media scanner acts as an intermediary device between the removable storage device and the target machine. The scanner performs malware detection on the storage device before data transfer, and only transfers data after verification. This mediator approach allows malware protection without installing detection software on the target machine itself, resolving the contradiction between detection capability and installation feasibility in industrial environments.
2Reliability
If malware detection software is installed on the target machine, then the target machine can scan for malware, but legacy machines with out-of-support operating systems cannot run up-to-date malware detection software
Solution Approach 1:
The media scanner serves as a dedicated intermediary device that runs up-to-date malware detection software independently of the target machine's operating system. The scanner scans removable storage devices and only transfers verified clean data to the target machine. This allows legacy systems with out-of-support OSs to receive protected data without needing to run modern detection software themselves, resolving the contradiction between detection capability and OS compatibility.
3Productivity
If the target machine is connected to the removable storage device during scanning, then data transfer can occur, but the target machine may be infected by malware from the removable storage device
Solution Approach 1:
The system segments the data transfer process into distinct phases: (1) The media scanner connects to the removable storage device and performs malware scanning in isolation; (2) After verification, the scanner disconnects from the storage device and connects to the target machine; (3) Only then is data transferred to the target machine. This segmentation separates the scanning function from the data transfer function, allowing efficient operation while preventing malware infection of the target machine.
Data Source
AI summary
A method of operating a media scanner to protect a target machine from malware on a removable storage device is disclosed. The target machine and the removable storage device each include a respective data line, and the media scanner comprises a data switch. Data is scanned on the removable storage device with malware detection software of the media scanner via a first data path, the first data path comprising the data line of the removable storage device connected to the data line of the media scanner by the data switch in a first switching state. After the data has been scanned with the malware detection software, the data switch is operated to switch from the first switching state to a second switching state, thereby disconnecting the data line of the removable storage device from the data line of the media scanner and connecting the data line of the removable storage device to the data line of the target machine.