Subscription-based program module installation and update system and method

• US 20040044999A1
• Filed: 08/30/2002
• Published: 03/04/2004
• Est. Priority Date: 08/30/2002
• Status: Abandoned Application

• Current Assignee: Green Light Advantage LLC
• Original Assignee: Green Light Advantage LLC
• Inventors: Gibson, Mason C.
• Application Number:
  US10/231,965
• Publication Number:
  US 20040044999A1
• Time in Patent Office: Days
• US Class Current: 717/178
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A system for automatically updating program modules on a plurality of computers coupled to a server computer in a large-scale distributed network is described. In a network comprising disparate types of server computers, target server computers are first divided into logical groups based on server functionality. File updates are made available on a master update server. The master update server advertises the availability to the target servers. The master update server creates an advertising message and transmits or otherwise makes available the advertising message to the target server computers. Each target server computer determines whether the update is to be performed. If an update is to be performed, the target server computer accesses the file location of the update file specified in the advertising message and downloads the update program. If an update is not be performed, a decline message is transmitted to the update server. The update module is installed on the target server computer in accordance with a pre-defined update schedule. A certified communications protocol encoding a registered serial number of the update server is utilized to facilitate verification of the update server identity to the target server computer.

Claims

1. A method of automatically updating one or more software components on a plurality of target computers from a server computer, the method comprising the steps of:

identifying target computers of the plurality of target computers as registered target computers by verifying a registration status with the server computer;

transmitting an advertisement message from the server computer to each of the registered target computers, the advertisement message indicating that a software module update is available;

determining, on each of the registered target computers, if the software module update is an authorized update;

certifying, on each of the registered target computers that determines to implement the software module update, the software module update request to the server computer;

downloading, to each of the registered target computers, the software module update from a database location specified by the server computer, for each registered target computer that certifies the software module update request;

declining the advertised update and transmitting a decline message to the server computer for each registered target computer that does not certify the software module update request;

installing the software module update on each registered target computer that certifies the software module update request, based on a pre-defined time schedule; and

transmitting an alarm alert to the server computer for each update operation that is not successfully completed.

2. The method of claim 1 further comprising the steps of:

registering an identifier number associated with the server computer with each target computer of the plurality of target computers;

encoding the identifier number in a header of the advertisement message transmitted from the server computer to each target computer; and

verifying, in each target computer, the identifier number of the server computer.

3. The method of claim 1 further comprising the step of logging each update operation that is successfully completed in a database accessible to the server computer.

4. The method of claim 2 wherein the advertisement message comprises the header, a file name field specifying a name of the software module update, and an options field specifying parameters regarding an update operation.

5. The method of claim 2 further comprising the step of encoding an alphanumeric string in a predefined location within the header.

6. The method of claim 5 further comprising the steps of:

encrypting the advertisement message prior to transmission from the server; and

decrypting the advertisement message after reception by each target computer.

7. The method of claim 6 wherein the advertisement message is encrypted using public key/private key encryption system.

8. The method of claim 7 wherein each target computer receiving the advertisement message decrypts the advertisement message with a 128-bit key and verifies that the alphanumeric string is present in the predefined location within the header.

9. A method distributing software programs over a network coupling a server computer to a plurality of client computers, the method comprising the steps of:

creating an update publication directory on the server computer;

storing one or more files comprising a software program update in the update publication directory;

creating an advertisement message indicating the availability of a software program update for installation by one or more of the plurality of client computers;

incorporating a link to the update publication directory within the advertisement message;

transmitting the advertisement message to the plurality of client computers;

receiving the advertisement message in a target client computer of the plurality of client computers;

determining a sender identification of the server computer from the advertisement message;

validating the sender identification by performing a comparison of the sender identification determined from the advertisement message with a pre-stored sender identification; and

accessing the one or more files comprising the software program update from the update publication directory on the server computer if the sender identification determined from the advertisement message matches the pre-stored sender identification.

10. The method of claim 9 further comprising the steps of:

creating, on the target client computer, a download directory;

downloading the one or more files from the update publication directory to the download directory on the target client computer; and

installing the one or more files to perform a software update operation.

11. The method of claim 10 wherein the step of downloading the one or more files is automatically performed at a pre-determined time defined by the target client computer.

12. The method of claim 10 wherein the step of installing the one or more files is automatically performed at a pre-determined time defined by the target client computer.

13. The method of claim 9 further comprising the step of dividing the client computers into one or more functional groups of the client computers depending upon tasks performed by client computers within a functional group.

14. The method of claim 10 wherein the one or more functional groups comprise at least one of:

database functions, electronic mail functions, and system administration functions.

15. The method of claim 9 further comprising the step of incorporating a link to the one or more files comprising the software program update within the advertisement message.

16. The method of claim 9 further comprising the steps of:

rejecting the advertisement message if the sender identification determined from the advertisement message does not match the pre-stored sender identification; and

transmitting an error message to the server computer upon rejection of the advertisement message.

17. The method of claim 10 further comprising the steps of:

creating a log message for each successful software update operation; and

storing the log message in a database coupled to the server computer.

18. The method of claim 9 wherein the advertisement message comprises a header field including a serial number of the server computer, and a message field including a reference to the one or more files comprising the software program update.

19. The method of claim 10 further comprising the step of registering the target client computer with the server computer and the server computer with the target client computer by establishing a common encryption scheme, defining a unique control number known to both the target client computer and the server computer, and defining a unique network identifier for each of the server computer and target client computer.

20. The method of claim 19 further comprising the steps of:

encoding the control number within the header of the advertisement message;

encrypting, in the server computer, the advertisement message using the common encryption scheme;

decrypting, in the target client computer, the encrypted advertisement message; and

validating the control number in the header.

21. The method of claim 20 wherein the encryption scheme comprises a 128-bit key public key/private key encryption system.

22. The method of claim 19 wherein the unique network identifier for the server computer corresponds to the sender identification of the server computer, and includes a serial number of the server computer.

23. The method of claim 22 wherein the step of validating the sender identification comprises the steps of:

determining, on the target client computer, a network address of the server computer;

correlating the network address of the server computer with the serial number of the server computer decrypted from the header of the advertisement message using the pre-stored sender identification.

24. The method of claim 23 wherein the network implements a TCP/IP protocol, and wherein the network address of the server computer is transmitted in conjunction with the advertisement message to the target client computer.

25. An apparatus for distributing software programs over a network coupling a server computer to a target client computer, the apparatus comprising:

means for creating an update publication directory on the server computer;

means for storing one or more files comprising a software program update in the update publication directory;

means for creating an advertisement message indicating the availability of a software program update for installation by the target client computer;

means for incorporating a link to the update publication directory within the advertisement message;

means for transmitting the advertisement message to the target client computer;

means for receiving the advertisement message in the target client computer;

means for determining a sender identification of the server computer from the advertisement message;

means for comparing the sender identification determined from the advertisement message with a pre-stored sender identification to validate the advertisement message; and

means for accessing the one or more files comprising the software program update from the update publication directory on the server computer if the sender identification determined from the advertisement message matches the pre-stored sender identification.

26. The apparatus of claim 25 further comprising:

means for creating a download directory on the target client computer;

means for downloading the one or more files from the update publication directory to the download directory on the target client computer; and

means for installing the one or more files to perform a software update operation on the target client computer.

27. The apparatus of claim 25 further comprising an incorporated link to the one or more files comprising the software program update within the advertisement message.

28. The method of claim 25 further comprising:

means for rejecting the advertisement message if the sender identification determined from the advertisement message does not match the pre-stored sender identification; and

means for transmitting an error message to the server computer upon rejection of the advertisement message.

29. The apparatus of claim 26 further comprising:

means for creating a log message for each successful software update operation; and

means for storing the log message in a database coupled to the server computer.

30. The apparatus of claim 25 wherein the advertisement message comprises a header field including a serial number of the server computer, and a message field including a reference to the one or more files comprising the software program update.

31. The apparatus of claim 26 further comprising means for registering the target client computer with the server computer and the server computer with the target client computer by establishing a common encryption scheme, defining a unique control number known to both the target client computer and the server computer, and defining a unique network identifier for each of the server computer and target client computer.

32. The apparatus of claim 31 further comprising:

means for encoding the control number within the header of the advertisement message;

means for encrypting, in the server computer, the advertisement message using the common encryption scheme;

means for decrypting, in the target client computer, the encrypted advertisement message; and

means for validating the control number in the header.

33. The apparatus of claim 32 wherein the encryption scheme comprises a 128-bit key public key/private key encryption system.

34. The apparatus of claim 33 wherein the unique network identifier for the server computer corresponds to the sender identification of the server computer, and includes a serial number of the server computer.