Proxy Gateway Pre-Classifier for Anti-Virus Scanning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing proxy gateway anti-virus systems experience low transmission efficiency and resource wastage due to the need to send all data packets to a proxy layer for scanning, even if they do not require virus scanning, leading to excessive resource occupation and degraded performance.

Innovation Solution

Implementing a pre-classifier that intercepts resource requests, determines attribute information of the to-be-transmitted resource, and decides based on an anti-virus policy whether scanning is needed, allowing non-scannable resources to be transmitted transparently and directly, thereby reducing the workload on the proxy layer.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If all data packets are sent to the proxy layer for virus scanning, then anti-virus security is improved, but transmission efficiency deteriorates and resource occupation increases

Engineering Contradiction:
Improveanti-virus securityVSAvoidtransmission efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies preliminary action by introducing a pre-classifier that performs classification of data packets before they reach the proxy layer. The pre-classifier examines packet attributes (such as file type, size, and content characteristics) and determines in advance which packets require virus scanning and which can be transmitted directly. This preliminary classification action prevents unnecessary packets from occupying proxy layer resources, thereby resolving the contradiction between maintaining security and improving transmission efficiency.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If all data packets are cached and scanned by the virus-scanning and caching module, then comprehensive virus detection is achieved, but resource occupation increases and performance degrades

Engineering Contradiction:
Improvevirus detection completenessVSAvoidresource occupation
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent applies the taking out principle by extracting only the necessary data packets from the general data stream for virus scanning. The pre-classifier identifies and extracts packets with characteristics indicating potential virus threats (such as executable files, document types, or packets matching known virus patterns) and directs only these extracted packets to the virus-scanning and caching module. This selective extraction reduces the workload on scanning resources while maintaining comprehensive detection for relevant packets.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If the proxy layer processes all packets through caching and scanning, then security is maintained, but transmission speed decreases

Engineering Contradiction:
ImprovesecurityVSAvoidtransmission speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent applies segmentation by dividing the packet processing flow into two distinct segments: packets requiring virus scanning and packets that can be transmitted directly. The pre-classifier segments the data stream based on packet attributes, routing suspicious packets through the proxy layer for scanning while allowing clean packets to bypass the proxy layer entirely. This segmentation creates a fast track for legitimate traffic, significantly improving transmission speed while maintaining security through targeted scanning of segmented suspicious packets.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8769694B2Proxy gateway anti-virus method, pre-classifier, and proxy gateway
Publication Date: 2014.07.01 HUAWEI TECH CO LTD
  • US8769694B2 patent drawing
  • US8769694B2 patent drawing
  • US8769694B2 patent drawing

AI summary

The present invention discloses a proxy gateway anti-virus method, a pre-classifier, and a proxy gateway. The method includes: receiving a resource obtaining request for obtaining a to-be-transmitted resource; sending a pre-detection request to a network element that stores the to-be-transmitted resource, to obtain attribute information of the to-be-transmitted resource; judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning; if yes, performing anti-virus scanning on the to-be-transmitted resource that is subsequently obtained; and if no, transparently transmitting the to-be-transmitted resource that is subsequently obtained. The present invention provides a technical solution to pre-detecting whether a to-be-transmitted resource needs anti-virus scanning according to attribute information, and a resource that needs no anti-virus scanning can be transmitted transparently and directly before the resource is sent to a proxy layer, thereby implementing an anti-virus function, improving transmission efficiency, and reducing the waste of resources.