US Patent 8087084 Security for scanning objects

Scanning is disclosed. A system is monitored to detect object events, and it is determined whether an object event requires an update to a scan list. If an update is required, the scan list is authenticated. The scan list is updated with information regarding objects associated with the object event. Authentication may be performed by comparing a stored hash value of the scan list with a computed hash value of the scan list. If the scan list is not successfully authenticated, a full scan may be performed or a remotely stored scan list may be used.