US 12,086,251 B2
IoT device and method for detecting and removing malware by use of server resource
Kihong Kim, Seoul (KR)
Assigned to SANDS LAB Inc., Seoul (KR)
Filed by SANDS LAB Inc., Seoul (KR)
Filed on Dec. 3, 2021, as Appl. No. 17/541,562.
Claims priority of application No. 10-2020-0169577 (KR), filed on Dec. 7, 2020.
Prior Publication US 2022/0179956 A1, Jun. 9, 2022
Int. Cl. G06F 21/56 (2013.01)
CPC G06F 21/567 (2013.01) [G06F 2221/033 (2013.01)] 4 Claims
OG exemplary drawing
 
1. An Internet of Things (IoT) device comprising:
a user application module;
an operating system (OS) application programming interface (API) module;
a kernel API module;
a file system driver module;
a file filter driver module; and
a network filter driver module,
wherein the file filter driver module and the network filter driver module are provided in a kernel level of the IoT device,
wherein, in response to the user application module generating a file-write event upon receiving an external file, the OS API module calls the kernel API module such that the file-write event is handled at the kernel level of the IoT device before the file is written to a disk of the IoT device, and
wherein the kernel API module transmits the file-write event to the file system driver module;
the file system driver module generates a write operation command, which includes the file, and transmits the write operation command to the file filter driver module;
the file filter driver module transmits the write operation command to the network filter driver module; and
the network filter driver module generates a packet including the write operation command and transmits the packet to a remote server computer, thereby allowing the IoT device to use resources of the server computer for detecting malware.