Classification of objects

• US 10,638,301 B2
• Filed: 09/15/2017
• Issued: 04/28/2020
• Est. Priority Date: 04/10/2017
• Status: Active Grant

• Current Assignee: BDNA Corporation (Flexera Software LLC)
• Original Assignee: BDNA Corporation (Flexera Software LLC)
• Inventors: Meau, Alexander, Leung, Danny
• Primary Examiner(s): Solinsky, Peter G
• Application Number:
  US15/706,464
• Publication Number:
  US 20180295494A1
• Time in Patent Office: 956 Days
• Field of Search: 370254
• CPC Class Codes: G06F 16/437 Administration of user profiles, e.g. generation, initialisation, adaptation, distribution
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

Each known operating system, software, or hardware can correspond to a list of identifiable attributes that is used to uniquely identify the operating system, software, or hardware of interest. By using these identifiable attributes in rules, fingerprints can be generated that define the existence of an object (e.g. operating systems, software and hardware). By using the generated fingerprints via a discovery tool, the existence of the objects can be determined within an environment (e.g. computing device, computing network).

Claims

1. A method for generating fingerprints, the method comprising:

receiving a plurality of identifiable attributes unique to an object from a discovery agent, wherein the plurality of identifiable attributes corresponds to a credential level, wherein the credential level indicates a level of access associated with a network environment in which the identifiable attributes are discoverable, and wherein the object is further associated with a different plurality of identifiable attributes corresponding to a different credential level;

generating rules for identifying the plurality of identifiable attributes in the network environment based on the corresponding credential level, wherein the generated rules are executable to identify the object within the network environment; and

generating a script based on the generated rules, wherein the generated script is executable by the discovery agent to search for the plurality of identifiable attributes associated with the object within the searched environment in accordance with the corresponding credential level.

2. The method of claim 1, wherein the object comprises at least one of software, hardware, or an operating system installed on a computing device in the network environment.

3. The method of claim 1, wherein the object is installed on two or more different computing device in the network environment.

4. The method of claim 1, further comprising:

executing the generated script via the discovery agent to search the network environment for the object; and

receiving an output from the discovery agent based on the executed script, wherein the received output indicates whether the object is found in the network environment.

5. The method of claim 4, wherein the output is provided on a graphical user interface.

6. The method of claim 5, wherein the output includes information regarding:

at least one of software compliance, cataloging, and asset management in the network environment.

7. The method of claim 1, further comprising testing the generated script within an environment known to include the object prior to searching:

the network environment.

8. The method of claim 1, wherein the credential level specifies a type of information the discovery agent is allowed to access in the network environment.

9. The method of claim 1, wherein execution of the discovery agent based on a first credential level identifies the object based on a first set of identifiable attributes, and wherein execution of the discovery agent based on a second credential level identifies the object based on a second set of identifiable attributes that is different from the first set of identifiable attributes and associated with a different level of access within the network environment.

10. The method of claim 9, wherein the different credential levels include a network-based credential for classification and identification of different computing devices within the network environment via the discovery agent.

11. The method of claim 9, wherein the different credential levels include an operating system-based credential for classification and identification of operating systems of different computing devices within the network environment via the discovery agent.

12. The method of claim 9, wherein the different credential levels include an application-based credential for classification and identification of software and hardware installed on different computing devices within the network environment via the discovery agent.

13. The method of claim 9, wherein the discovery agent is associated with one of the credential levels, and wherein the generated script is executable by the discovery agent to search for the plurality of identifiable attributes corresponds to the associated credential level.

14. The method of claim 1, wherein the discovery agent is installed on one or more computing devices in the network environment.

15. The method of claim 1, wherein the discovery agent is run on a virtual machine associated with the network environment.

16. A system for generating fingerprints, the system comprising:

one or more computing devices associated with a network environment, wherein each computing device has installed one or more objects; and

a server that has instructions stored in memory, the instructions being executed by a processor to;

receive a plurality of identifiable attributes unique to an object from a discovery agent, wherein the plurality of identifiable attributes correspond to a credential level, wherein the credential level indicates a level of access associated with the network environment in which the identifiable attributes are discoverable, and wherein the object is further associated with a different plurality of identifiable attributes corresponding to a different credential level;

generate rules for identifying the received plurality of identifiable attributes in the network environment based on the corresponding credential level, wherein the generated rules are executable to identify the object within the network environment; and

generate a script based on the generated rules, wherein the generated script is executable by the discovery agent to search for the plurality of identifiable attributes associated with the object within the search environment in accordance with the corresponding credential level.

17. A non-transitory computer-readable storage medium having embodied thereon a program, the program being executable by a processor to perform a method for generating fingerprints, the method comprising:

receiving a plurality of identifiable attributes unique to an object from a discovery agent, wherein the plurality of identifiable attributes corresponds to a credential level, wherein the credential level indicates a level of access associated with a network environment in which the identifiable attributes are discoverable, and wherein the object is further associated with a different plurality of identifiable attributes corresponding to a different credential level;

generating rules for identifying the received plurality of identifiable attributes in the network environment based on the corresponding credential level, wherein the generated rules are executable to identify the object within the network environment; and

generating a script based on the generated rules, wherein the generated script is executable by the discovery agent to search for the plurality of identifiable attributes associated with the object within the searched environment in accordance with the corresponding;

credential level.