System and method for triggering and performing scans to protect virtual environments

Patent metadata

Field	Value
Publication number	US-9256737-B2
Application number	US-19814508-A
Country	US
Kind code	B2
Filing date	Aug 26, 2008
Priority date	Aug 26, 2008
Publication date	Feb 9, 2016
Grant date	Feb 9, 2016

Abstract

A system and method in a virtual universe system for triggering scans of virtual items and inventories of virtual items and for scanning the virtual items and inventories wherein the scans may be triggered by an avatar moving or teleporting from one region to another, or by an avatar picking up, dropping off, or accepting or purchasing an item. The degree of scanning may depend upon factors such as location where these scan triggers occur. The signature of the item may be identified by the scan process. The item signature may be compared against signatures of known malicious items stored in an inventory item signatures database and a summary of the signature comparison may be sent to a resident and stored in the resident's inventory.

First claim

We claim:

1. A computer system comprising a processor and a memory, the computer system generating a virtual universe having at least one avatar, the computer system comprising:
a trigger identification unit for receiving an identified item scan trigger circumstance;
an item scanner for scanning, based on a location of the virtual item in the virtual universe, each virtual item in an inventory of the avatar, including the virtual item, to determine whether the virtual item is malicious, wherein a frequency of scanning the inventory of the avatar is increased in the case that the location of the virtual item in the virtual universe indicates a higher potential for malicious items;
an item movement sensor for sensing the movement of the virtual item; and
an avatar teleport sensor for sensing the teleporting of the avatar.

2. The system as defined in claim 1 , wherein the trigger identification unit comprises an item acceptance sensor for sensing an acceptance of a virtual item by an avatar and an item purchase sensor for sensing a purchase of a virtual item by an avatar.

3. The system as defined in claim 1 further comprising an inventory item signatures database having signatures of known malicious virtual items, and wherein the item scanner identifies the scanned item signature and compares the scanned item signature with the signatures in the inventory item signatures database.

4. The system as defined in claim 3 , wherein the signatures in the inventory item signatures database include scripts, and wherein the item scanner comprises a script scanner for scanning the scripts of a virtual item and for comparing the scanned scripts with the scripts in the inventory item signatures database.

5. The system as defined in claim 4 , wherein the avatar has an inventory having one or more virtual items, and wherein the item scanner provides a summary of the scan of the virtual item to the avatar for storing the summary in the inventory.

6. A method for triggering scans of items in a virtual universe, the virtual universe having at least one avatar owned by a resident, the at least one avatar having a virtual item and an item inventory, the method comprising:
receiving an item scan trigger circumstance; and
scanning, based on a location of the virtual item in the virtual universe, each virtual item in an inventory of the avatar, including the virtual item, to determine whether the virtual item is malicious, wherein a frequency of scanning the inventory of the avatar is increased in the case that the location of the virtual item in the virtual universe indicates a higher potential for malicious items;
determining if background monitoring is enabled and, if background monitoring is enabled, scanning at least a portion of the item inventory belonging to the avatar;
determining if the virtual item is acting differently than a normal virtual item, and if so:
triggering an item alert and blocking the virtual item,
checking attributes against attributes of known malicious virtual items, and
updating an inventory item safety summary accordingly.

7. The method as defined in claim 6 further comprising determining if the virtual item is being placed in or removed from the item inventory belonging to the avatar.

8. The method as defined in claim 6 further comprising determining if the virtual item is being picked up from or deposited in a region of the virtual universe.

9. The method as defined in claim 6 further comprising determining if the virtual item is being purchased by the avatar.

10. A method for deploying a computing infrastructure comprising integrating computer-readable code into a computing system, wherein the code in combination with the computing system is capable of performing a process for triggering scans of virtual items in a virtual universe, the virtual universe having at least one avatar owned by a resident, the at least one avatar having a virtual item and an item inventory, the process comprising:
receiving an item scan trigger circumstance;
scanning, based on a location of the virtual item in the virtual universe, each virtual item in an inventory of the avatar, including the virtual item, to determine whether the virtual item is malicious, wherein a frequency of scanning the inventory of the avatar is increased in the case that the location of the virtual item in the virtual universe indicates a higher potential for malicious items;
determining if background monitoring is enabled and, if background monitoring is enabled, scanning at least a portion of the item inventory belonging to the avatar;
determining if the virtual item is acting differently than a normal virtual item, and if so:
triggering an item alert and blocking the virtual item,
comparing attributes of the virtual item with attributes of known malicious virtual items,
identifying similarities and differences between the attributes of the virtual item with attributes of known malicious items,
determining the maliciousness of the virtual item based upon the identified similarities and the differences, and
updating an inventory item safety summary with the determined maliciousness of the virtual item.

11. The method as defined in claim 10 , wherein the process further comprises determining if the virtual item is being placed in or removed from the item inventory belonging to the avatar.

12. The method as defined in claim 10 , wherein the process further comprises determining if the virtual item is being picked up from or deposited in a region of the virtual universe.

13. The method as defined in claim 10 , wherein the virtual item has a signature, and the virtual universe has an inventory item signature database having signatures of known malicious virtual items, and wherein the process further comprises:
scanning the signature of the virtual item based upon the location;
comparing the item signature with signatures of known malicious virtual items in the inventory item signature database;
determining the maliciousness of the virtual item based upon the extent of similarity of the match between the item signature and the signatures of the known malicious virtual items in the inventory item signature database; and
notifying the resident of the maliciousness determination result.

14. The method as defined in claim 10 , wherein the process further comprises creating a summary of the virtual item scan and sending the summary to a resident for storage in an inventory.

15. A computer program product embodied in a computer readable storage device for operating in a system comprising at least one computer system having a network adapter for accessing a network, a processing unit, and a memory, for implementing a method for triggering scans of virtual items in a virtual universe, the virtual universe having at least one avatar owned by a resident, the at least one avatar having a virtual item and an item inventory, the method comprising:
receiving item scan trigger circumstance has occurred;
scanning, based on a location of the virtual item in the virtual universe, each virtual item in an inventory of the avatar, including the virtual item, to determine whether the virtual item is malicious, wherein a frequency of scanning the inventory of the avatar is increased in the case that the location of the virtual item in the virtual universe indicates a higher potential for malicious items;
determining if background monitoring is enabled and, if background monitoring is enabled, scanning at least a portion of the item inventory belonging to the avatar;
determining if the virtual item is acting differently than a normal virtual item, and

Assignees

• Hamilton Ii Rick A
• O'Connell Brian M
• Pickover Clifford A
• Walker Keith R
• IBM

Inventors

• Hamilton Ii Rick A
• O'Connell Brian M
• Pickover Clifford A
• Walker Keith R

Classifications

• G06F21/51

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G07F17/3241 Primary

  Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance (computer security G06F21/00) · CPC title

• A63F2300/5553

  user representation in the game field, e.g. avatar · CPC title

• G06Q10/087

  Inventory or stock management, e.g. order filling, procurement or balancing against orders · CPC title

• G06F16/90344

  by using string matching techniques · CPC title