System and method for remotely securing software updates of computer systems

• US 20050216906A1
• Filed: 03/23/2004
• Published: 09/29/2005
• Est. Priority Date: 03/23/2004
• Status: Active Grant

• Current Assignee: Toshiba Corporation, Toshiba Tee Kabushiki Kaisha
• Original Assignee: Toshiba Corporation, Toshiba Tee Kabushiki Kaisha
• Inventors: Shahindoust, Amir, Seifi, Mustafa
• Granted Patent: US 7,478,383 B2
• Time in Patent Office: Days
• US Class Current: 717/171
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method for providing a subscription service wherein a remote host enables the automatic receipt at a customer site of the most recent updates, patches, or fixes for services the customer site is running. The remote host uses a secured private port to transfer the updates to the subscribed systems. A remote host server searches an update database for updates of the services from a list configured by an administrator. The host server then downloads the updates and notifies the administrator that an update is available. An update script is subsequently generated, allowing the update to be pushed to a subscribing system. The host server the searches a listing of subscribing systems to determine which subscribing systems run a service for which an update is available. The host server, through a private port, uploads the content to the subscribing system automatically. The communication port is a secured port that will require authentication of the host server by the subscribing system prior to uploading.

Claims

1. A system for remotely securing software updates of computer systems comprising:

a server adapted to receive software updates from a plurality of sources;

means adapted to receive installation scripts, each of which is associated with at least one software update disposed on the server;

a secured user data storage adapted to store data representative of a plurality of end users;

authentication means adapted for receiving a login request from at least one remote data processing device including means adapted for comparing the received login request with the secured user data;

means adapted for selectively placing the server in data communication with at least one remote data processing device in accordance with a determination of the authentication means; and

means adapted for selectively transmitting software updates from the server, along with an associated installation script, in accordance with a received login request.

2. The system for remotely securing software updates of computer systems of claim 1 further comprising means adapted for periodically establishing a communication link between the server and the at least one remote data processing device to provide for regular communication of software updates therebetween.

3. The system for remotely securing software updates of computer systems of claim 2 wherein the means adapted for periodically establishing a communication link is associated with the server.

4. The system for remotely securing software updates of computer systems of claim 2 wherein the means adapted for periodically establishing a communication link is associated with the at least one remote data processing device.

5. The system for remotely securing software updates of computer systems of claim 1 further comprising means adapted to select the parameters for transmitting the software updates from the server.

6. The system for remotely securing software updates of computer systems of claim 1 wherein the means adapted for selectively transmitting the software updates from the server transmits the software updates upon receipt of a software update from at least one of the plurality of sources.

7. The system for remotely securing software updates of computer systems of claim 1 further comprising means adapted for transmitting a notification signal to an associated administrator upon receipt of a software update from at least one of the plurality of sources.

8. The system for remotely securing software updates of computer systems of claim 7 further comprising means adapted for selectively generating a software update transmission signal upon receipt of the notification signal in order to transmit the software update from the server.

9. The system for remotely securing software updates of computer systems of claim 1 further comprising testing means adapted for analyzing the received software updates to determine if the software updates are in compliance with selected criteria.

10. The system for remotely securing software updates of a computer systems of claim 1 further comprising a software update storage log means adapted to store selected information relating to received software updates.

12. The method for remotely securing software updates of computer systems of claim 1 further comprising the step periodically establishing a communication link between the server and the at least one remote data processing device to provide for regular communication of software updates therebetween.

13. The method for remotely securing software updates of computer systems of claim 12 wherein periodically establishing a communication link is via the server.

14. The method for remotely securing software updates of computer systems of claim 12 wherein for periodically establishing a communication link is via the at least one remote data processing device.

15. The method for remotely securing software updates of computer systems of claim 10 further comprising the step of selecting the parameters for transmitting the software updates from the server.

16. The method for remotely securing software updates of computer systems of claim 10 wherein the software updated is transmitted upon receipt of a software update from at least one of the plurality of sources.

17. The method for remotely securing software updates of computer systems of claim 1 further comprising the step of transmitting a notification signal to an associated administrator upon receipt of a software update from at least one of the plurality of sources.

18. The method for remotely securing software updates of computer systems of claim 17 further comprising the step of selectively generating a software update transmission signal upon receipt of the notification signal in order to transmit the software update from the server.

19. The method for remotely securing software updates of computer systems of claim 10 further comprising the step of analyzing the received software updates to determine if the software updates are in compliance with selected criteria.

20. The method for remotely securing software updates of a computer systems of claim 10 further comprising the step of selected information relating to received software updates in a software update storage means.

11. A method for remotely securing software updates of computer systems comprising the steps of:

receiving, at a server, software updates from a plurality of sources;

receiving installation scripts at the server, each of which is associated with at least one software update disposed on the server;

storing data representative of a plurality of end users in a secured user data storage means;

receiving a login request from at least one remote data processing device and comparing the received login request with the secured user data;

selectively placing the server in data communication with at least one remote data processing device in accordance with a determination of the authentication means; and

selectively transmitting software updates from the server, along with an associated installation script, in accordance with a received login request.

21. A computer-readable medium for remotely securing software updates of computer systems comprising:

a server adapted to receive software updates from a plurality of sources;

means adapted to receive installation scripts, each of which is associated with at least one software update disposed on the server;

a secured user data storage adapted to store data representative of a plurality of end users;

authentication means adapted for receiving a login request from at least one remote data processing device including means adapted for comparing the received login request with the secured user data;

means adapted for selectively placing the server in data communication with at least one remote data processing device in accordance with a determination of the authentication means; and

means adapted for selectively transmitting software updates from the server, along with an associated installation script, in accordance with a received login request.

22. The computer-readable medium for remotely securing software updates of computer systems of claim 21 further comprising means adapted for periodically establishing a communication link between the server and the at least one remote data processing device to provide for regular communication of software updates therebetween.

23. The computer-readable medium for remotely securing software updates of computer systems of claim 21 wherein the means adapted for selectively transmitting the software updates from the server transmits the software updates upon receipt of a software update from at least one of the plurality of sources.

24. The computer-readable for remotely securing software updates of computer systems of claim 21 further comprising means adapted for transmitting a notification signal to an associated administrator upon receipt of a software update from at least one of the plurality of sources.

25. The computer-readable medium for remotely securing software updates of computer systems of claim 24 further comprising means adapted for selectively generating a software update transmission signal upon receipt of the notification signal in order to transmit the software update from the server.

26. The computer-readable medium for remotely securing software updates of computer systems of claim 21 further comprising testing means adapted for analyzing the received software updates to determine if the software updates are in compliance with selected criteria.

27. A computer-implemented method for remotely securing software updates of computer systems comprising the steps of:

receiving, at a server, software updates from a plurality of sources;

receiving installation scripts at the server, each of which is associated with at least one software update disposed on the server;

storing data representative of a plurality of end users in a secured user data storage means;

receiving a login request from at least one remote data processing device and comparing the received login request with the secured user data;

selectively placing the server in data communication with at least one remote data processing device in accordance with a determination of the authentication means; and

selectively transmitting software updates from the server, along with an associated installation script, in accordance with a received login request.

28. The computer-implemented method for remotely securing software updates of computer systems of claim 27 further comprising the step periodically establishing a communication link between the server and the at least one remote data processing device to provide for regular communication of software updates therebetween.

29. The computer-implemented method for remotely securing software updates of computer systems of claim 27 wherein the software updated is transmitted upon receipt of a software update from at least one of the plurality of sources.

30. The computer-implemented method for remotely securing software updates of computer systems of claim 27 further comprising the step of transmitting a notification signal to an associated administrator upon receipt of a software update from at least one of the plurality of sources.

31. The computer-implemented method for remotely securing software updates of computer systems of claim 30 further comprising the step of selectively generating a software update transmission signal upon receipt of the notification signal in order to transmit the software update from the server.

32. The computer-implemented method for remotely securing software updates of computer systems of claim 27 further comprising the step of analyzing the received software updates to determine if the software updates are in compliance with selected criteria.