System and method for enhanced software updating and revision

• US 20040054764A1
• Filed: 09/12/2002
• Published: 03/18/2004
• Est. Priority Date: 09/12/2002
• Status: Active Grant

• Current Assignee: Computer Sciences Corporation (DXC Technology Company)
• Original Assignee: Computer Sciences Corporation (DXC Technology Company)
• Inventors: Reckeweg, John, Patel, Prakash, Aderton, Richard, Aderton, Harry, Rietmann, Gary
• Granted Patent: US 7,370,092 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0859 by keeping history of different configuration generations or by rolling back to previous configuration versions
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

An update system configured to provide software updates, software patches and/or other data packets to one or more computer systems via a network is disclosed. The update system may interact with a network management system, such as an enterprise management system, to distribute data packets and gather configuration information. The update system may generate and send commands to the network management system. The network management system may carry out the commands to distribute data packets and/or gather configuration information.

Claims

1. A method of providing data packets to a plurality of computer systems coupled to a network, comprising:

providing a network management system on a network, wherein the network management system comprises a network management system server and one or more agent programs on one or more computer systems, wherein an agent program is configured to receive commands from the network management system and to implement received commands on a computer system;

providing an update system on the network, wherein the update system is configured to issue commands to the network management system for execution on the network management system server or one or more computer systems;

identifying one or more data packets with the update system;

associating one or more identified data packets with one or more computer systems;

generating one or more commands in the update system; and

sending one or more generated commands from the update system to the network management system, wherein in response to one or more received commands the network management system installs one or more identified data packets on one or more computer systems associated with one or more identified data packets using the network management system server and one or more agent programs.

2. The method of claim 1, further comprising sending one or more configuration requests from the update system to the network management system, wherein in response to receiving one or more configuration requests the network management system determines hardware configuration information regarding one or more computer systems coupled to the network.

3. The method of claim 1, further comprising sending one or more configuration requests from the update system to the network management system, wherein in response to receiving one or more configuration requests the network management system determines software configuration information regarding one or more computer systems coupled to the network.

4. The method of claim 1, further comprising determining whether one or more data packets were installed properly by the network management system.

5. The method of claim 1, further comprising sending one or more verification commands from the update system to the network management system, wherein in response to one or more received verification commands the network management system determines whether one or more data packets were installed properly.

6. The method of claim 1, further comprising sending an information request to an agent program on a computer system, wherein in response to receiving the information request, the agent program sends configuration information regarding the computer system to the network management system server.

7. The method of claim 6, further comprising comparing the configuration information to a master control list.

8. The method of claim 7, wherein the master control list comprises a list of prohibited software.

9. The method of claim 7, wherein the master control list comprises identification of a current version of one or more software applications.

10. The method of claim 7, wherein the master control list comprises identification of one or more non-executable files.

11. The method of claim 1, further comprising sending one or more configuration commands from the update system to the network management system, wherein in response to one or more received configuration commands the network management system requests information from one or more agent programs on one or more computer systems regarding the configuration of one or more computer systems.

12. The method of claim 1, further comprising sending one or more configuration commands from the update system to the network management system, wherein in response to one or more received configuration commands the network management system sends one or more scanning applications to one or more computer systems, wherein one or more scanning applications are configured to determine configuration information regarding one or more computer systems and to store the configuration information on a memory accessible via the network.

13. The method of claim 12, wherein the scanning application does not persist on one or more computer systems after the configuration information has been stored.

14. The method of claim 1, further comprising storing a log file on one or more computer systems comprising a list of commands received by one or more computer systems from the update system via the network management system.

15. The method of claim 1, wherein no additional software needs to be installed on a client system in order to execute the update system.

16. The method of claim 1, wherein at least one data packet comprises a software patch.

17. The method of claim 1, wherein at least one data packet comprises a software application.

18. The method of claim 1, wherein at least one data packet comprises a non-executable file.

19. The method of claim 1, further comprising assigning one or more computer systems to one or more client groups.

20. The method of claim 1, further comprising generating one or more configuration rules, wherein a configuration rule comprises one or more conditions that must be met for the update system to send one or more commands to the network management system to install one or more data packets on one or more computer systems.

21. The method of claim 20, wherein one or more conditions comprises whether one or more files having specified parameters exist on one or more computer systems.

22. The method of claim 20, wherein one or more conditions comprises whether one or more software applications having specified parameters exist on one or more computer systems.

23. The method of claim 20, wherein one or more conditions comprises whether a registry file of one or more computer systems meets specified parameters.

24. The method of claim 20, wherein one or more conditions comprises whether an operating system of one or more computer systems meets specified parameters.

25. The method of claim 20, wherein one or more conditions comprises whether a specified time has elapsed.

26. A system, comprising:

a network management system server, configured to implement a network management system on a network;

a plurality of computer systems coupled to the network;

at least one agent programs on at least one computer system couple to the network;

wherein at least on agent program is configured to receive commands from the network management system and to implement received commands on at least one computer system; and

an update system in communication with the network management system, wherein the update system is configured to issue commands to the network management system for execution on the network management system server or one or more computer systems via one or more agent programs.

27. The system of claim 26, wherein the update system is further configured to receive information identifying one or more data packets to be installed on at least one computer system coupled to the network.

28. The system of claim 26, wherein the update system is further configured to receive information identifying one or more data packets to be installed on at least one computer system coupled to the network, and to receive input assigning one or more identified data packets with one or more computer systems.

29. A carrier medium comprising program instructions, wherein the program instructions are executable on a computer system to implement a method comprising:

identifying one or more data packets with the update system, wherein the update system is configured to issue commands to a network management system for execution on a network management system server or on one or more computer systems coupled to a network;

associating one or more identified data packets with one or more computer systems coupled to the network;

generating one or more commands in the update system; and

sending one or more generated commands from the update system to the network management system, wherein in response to one or more received commands the network management system installs one or more identified data packets on one or more computer systems associated with one or more identified data packets using the network management system server and one or more agent programs, wherein an agent program is configured to receive commands from a network management system and to implement received commands on a computer system.

30. A method, comprising:

installing a data packet to one or more computer systems coupled to a network;

sending a command to a network management system to determine configuration information regarding one or more computer systems coupled to the network using one or more network management system agents;

receiving information from the network management system comprising configuration information regarding one or more computer systems coupled to the network; and

determining, based on the received configuration information, whether the data packet installed properly on one or more computer systems coupled to the network.

31. The method of claim 30, further comprising:

sending a command to the network management system to send a scanning application to one or more computer systems coupled to the network; and

receiving information from the scanning application, wherein the information received comprises configuration information regarding one or more computer systems coupled to the network.

32. The method of claim 31, further comprising determining, based on the received configuration information received from the scanning application, whether the data packet installed properly on one or more computer systems coupled to the network.

33. The method of claim 31, wherein the scanning application does not persist on one or more computer systems after the configuration information has been stored.

34. The method of claim 30, further comprising comparing the configuration information to a master control list.

35. The method of claim 30, further comprising comparing the configuration information to a master control list, wherein the master control list comprises a list of prohibited software.

36. The method of claim 30, further comprising comparing the configuration information to a master control list, wherein the master control list comprises identification of a current version of one or more software applications.

37. The method of claim 30, further comprising comparing the configuration information to a master control list, wherein the master control list comprises identification of one or more non-executable files.

38. The method of claim 30, wherein at least one data packet comprises a software patch.

39. The method of claim 30, wherein at least one data packet comprises a software application.

40. The method of claim 30, wherein at least one data packet comprises a non-executable file.

41. A system, comprising:

a plurality of computer systems coupled to a network;

a network management system on a computer couple to the network, wherein the network management system comprises at least one network management system agent on at least one computer system couple to the network;

an update system in communication with the network management system, wherein the update system is configured to;

send a command to the network management system to install a data packet on one or more computer systems coupled to the network;

send a command to the network management system to determine configuration information regarding one or more computer systems coupled to the network using one or more network management system agents; and

receive information from the network management system comprising configuration information regarding one or more computer systems coupled to the network.

42. The system of claim 41, wherein the update system is further configured to determine, based on configuration information received from the network management system, whether a data packet was installed properly on one or more computer systems coupled to the network.

43. A carrier medium comprising program instructions, wherein the program instructions are executable on a computer system to implement a method comprising:

installing a data packet to one or more computer systems coupled to a network;

sending a command to a network management system to determine configuration information regarding one or more computer systems coupled to the network using one or more network management system agents;

receiving information from the network management system comprising configuration information regarding one or more computer systems coupled to the network; and

determining, based on the received configuration information, whether the data packet installed properly on one or more computer systems coupled to the network.

44. A method, comprising:

providing one or more data packets on a network management system server;

wherein the network management system server comprises an update system, wherein the update system is configured to provide one or more data packets to one or more computer systems;

attempting to place one or more data packets on one or more computer systems coupled to a network using the update system;

determining whether one or more placement attempts were successful; and

if one or more placement attempts were unsuccessful, determining if a predetermined number of unsuccessful placement attempts for at least one computer system has been met.

45. The method of claim 44, further comprising inhibiting one or more computer systems from accessing the network if the predetermined number of unsuccessful placement attempts for at least one computer system has been met.

46. The method of claim 44, further comprising inhibiting a user from logging on to one or more computer systems if the predetermined number of unsuccessful placement attempts for at least one computer system has been met.

47. The method of claim 44, wherein determining whether one or more placement attempts were successful comprises determining software configuration information regarding one or more computer systems coupled to the network.

48. The method of claim 44, further comprising sending an information request to an agent program on a computer system, wherein in response to receiving the information request, the agent program responds with configuration information regarding the computer system.

49. The method of claim 48, further comprising comparing the configuration information to a master control list.

50. The method of claim 49, wherein the master control list comprises a list of prohibited software.

51. The method of claim 49, wherein the master control list comprises identification of a current version of one or more software applications.

52. The method of claim 49, wherein the master control list comprises identification of at least one non-executable file.

53. The method of claim 44, wherein determining whether one or more placement attempts were successful comprises sending one or more scanning applications to one or more computer systems, wherein one or more scanning applications are configured to determine configuration information regarding one or more computer systems and to store the configuration information on a memory accessible to the network.

54. The method of claim 53, wherein one or more scanning applications do not persist on one or more computer systems after the configuration information has been stored.

55. The method of claim 44, wherein at least one data packet comprises a software patch.

56. The method of claim 44, wherein at least one data packet comprises a software application.

57. The method of claim 44, wherein at least one data packet comprises a non-executable file.

58. A system, comprising:

a plurality of computer system coupled to a network;

a network management system available on the network;

at least one data packet on a memory coupled to the network; and

an update system in communication with the network management system, wherein the update system is configured to install one or more data packets on one or more computer systems coupled to the network, to determine whether one or more data packets were installed successfully, and, if one or more data packets were not installed successfully, to determine if a predetermined number of unsuccessful installation attempts for at least one computer system has been met.

59. A carrier medium comprising program instructions, wherein the program instructions are executable on a computer system to implement a method comprising:

attempting to install one or more data packets on one or more computer systems coupled to a network using an update system;

determining whether one or more attempts to install one or more data packets were successful; and

if one or more attempts to install one or more data packets were not unsuccessful, determining if a predetermined number of unsuccessful installation attempts for at least one computer system has been met.

60. A method, comprising:

determining one or more data packets present on one or more computer systems;

selecting one or more computer systems to send one or more additional data packets to;

sending one or more additional data packets to one or more selected computer systems; and

determining whether one or more additional data packets were received and loaded onto one or more computer systems.

61. The method of claim 60, wherein determining one or more data packets present on one or more computer systems comprises sending one or more commands to one or more agent programs on one or more computer systems.

62. The method of claim 60, wherein determining one or more data packets present on one or more computer systems comprises sending a scanning application to one or more computer system, wherein the scanning application is configured to determine one or more data packets present on the computer system.

63. The method of claim 60, wherein selecting one or more computer systems comprises determining configuration of one or more computer systems.

64. The method of claim 60, wherein selecting one or more computer system comprises selecting one or more computer systems based on a defined grouping of one or more computer systems.

65. The method of claim 60, wherein sending one or more data packets to one or more selected computer systems comprises sending a command to a network management system, wherein the network management system is configured to send one or more data packets to one or more computer systems in response to receiving the command.

66. The method of claim 60, further comprising reporting the results of determining whether one or more sent data packets were received and loaded onto one or more computer systems.

67. The method of claim 60, wherein the determining one or more data packets present on one or more computer systems, selecting one or more computer systems to send one or more data packets to, sending one or more data packets and determining whether one or more send data packets were received and loaded onto one or more computer systems are performed automatically.

68. The method of claim 60, wherein the determining one or more data packets present on one or more computer systems, selecting one or more computer systems to send one or more data packets to, sending one or more data packets and determining whether one or more send data packets were received and loaded onto one or more computer systems are performed based on one or more preconfigured rules.

69. The method of claim 60, wherein selecting computer systems comprises associating two or more computer systems to form one or more computer system groups and selecting one or more computer system groups to send one or more data packets to.

70. The method of claim 60, further comprising identifying one or more unauthorized software applications on one or more computer systems.

71. The method of claim 60, further comprising determining hardware configuration information regarding one or more computer systems coupled to the network.

72. The method of claim 60, further comprising determining software configuration information regarding one or more computer systems.

73. The method of claim 60, further comprising determining configuration information regarding one or more computer systems and comparing the configuration information to a master control list.

74. The method of claim 73, wherein the master control list comprises a list of prohibited software.

75. The method of claim 73, wherein the master control list comprises identification of a current version of one or more software applications.

76. The method of claim 73, wherein the master control list comprises identification of one or more non-executable files.

77. The method of claim 60, wherein determining whether one or more sent data packets were received and loaded onto one or more computer systems comprises requesting information from one or more agent programs on one or more computer systems regarding the configuration of one or more computer systems.

78. The method of claim 60, wherein determining whether one or more sent data packets were received and loaded onto one or more computer systems comprises sending one or more scanning applications to one or more computer systems, wherein one or more scanning applications are configured to determine configuration information regarding one or more computer systems.

79. The method of claim 78, wherein one or more scanning applications are further configured to send the configuration information to a server computer system which determines whether one or more sent data packets were received and loaded onto one or more computer system.

80. The method of claim 78, wherein one or more scanning applications are further configured to send the configuration information to a server computer system which determines whether one or more sent data packets were received and loaded onto one or more computer system and wherein the scanning application does not persist on one or more computer systems after the configuration information has been sent.

81. The method of claim 60, further comprising storing a log file on one or more computer systems, the log file comprising a list of data packets received by one or more computer systems.

82. The method of claim 60, wherein no additional software needs to be installed on a client system in order to determine one or more data packets on one or more computer systems, select one or more computer systems, send one or more data packets, and determine whether one or more sent data packets were received and loaded.

83. The method of claim 60, wherein at least one data packet comprises a software patch.

84. The method of claim 60, wherein at least one data packet comprises a software application.

85. The method of claim 60, wherein at least one data packet comprises a non-executable data file.

86. The method of claim 60, wherein selecting one or more computer systems comprises selecting one or more computer systems based on one or more configuration conditions.

87. The method of claim 86, wherein one or more configuration conditions comprises whether one or more files having specified parameters exist on one or more computer systems.

88. The method of claim 86, wherein one or more configuration conditions comprises whether one or more software applications having specified parameters exist on one or more computer systems.

89. The method of claim 86, wherein one or more configuration conditions comprises whether a registry file of one or more computer systems meets specified parameters.

90. The method of claim 86, wherein one or more configuration conditions comprises whether an operating system of one or more computer systems meets specified parameters.

91. The method of claim 86, wherein one or more configuration conditions comprises whether a specified time has elapsed.

92. A system, comprising:

a plurality of computer systems coupled to a network;

an update system on the network, wherein the update system is configured to;

determine one or more data packets present on one or more of the computer systems coupled to the network;

select one or more of the computer systems to send one or more additional data packets to;

cause one or more additional data packets to be sent to one or more selected computer systems; and

determine whether one or more additional data packets were installed onto one or more computer systems.

93. A carrier medium comprising program instructions, wherein the program instructions are executable on a computer system to implement a method comprising:

determining one or more data packets present on one or more computer systems;

selecting one or more computer systems to send one or more additional data packets to;

sending a command to have one or more additional data packets installed on one or more selected computer systems; and

determining whether one or more additional data packets were installed onto one or more computer systems.