Patent ID: 9087194
Filing Date: 2015-07-21
Classification: G06F

Abstract:
1. A method of operating an anti-virus application, the method comprising: assessing electronic files stored at a client device configuring at least one processor to perform the functions of: determining that context information is required for a first electronic file, the context information being used by the anti-virus application on the client device to decide how to handle the electronic file; sending a request to a server for the context information; receiving from the server a response, the response including the requested context information, an identity of a second electronic file associated in a database with the first electronic file, and context information for the second electronic file, wherein the association between the first electronic file and the second electronic file is based on analyzing further requests for context information received from other client devices; wherein when the analysis by the server determines that a predetermined number of other client devices have requested context information relating to the first electronic file and context information relating to the second electronic file, then a link between electronic files is created and stored in the database; storing the context information relating to the second electronic file; determining that context information is required for a further electronic file; determining whether the further electronic file is the same as the second electronic file and, if so, retrieving the stored context information of the second electronic file and, if not, sending a request to the server for context information of the further electronic file.