Methods and instructions for patch management

• US 20060080656A1
• Filed: 10/12/2004
• Published: 04/13/2006
• Est. Priority Date: 10/12/2004
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Baron, Anthony, Cain, Nigel, Sharma, Sanjiv, Zakrajsek, Frank
• Application Number:
  US10/962,769
• Publication Number:
  US 20060080656A1
• Time in Patent Office: Days
• US Class Current: 717/174
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

In one aspect, a method of instructing users in the implementation of a patch management process is provided. The patch management process relates to the installation of a software patch in a computer system. The method comprises an act of providing instructions that describe the patch management process in a hierarchical manner so that the patch management process is described as comprising a plurality of top-level activities, with each of the plurality of top-level activities being described as comprising at least one sub-action, the instructions describing trigger events that result in transitions between the top-level activities. In another aspect, a method includes following the instructions that describe the patch management process. In another aspect, an assess activity is performed distinct from the installation of any particular patch to assess the computer system to determine the preparedness of the computer system to process future anticipated but unspecified patches

Claims

1. A method of instructing users in the implementation of a patch management process, the patch management process relating to the installation of a software patch in a computer system, the method comprising an act of:

providing instructions that describe the patch management process in a hierarchical manner so that the patch management process is described as comprising a plurality of top-level activities, with each of the plurality of top-level activities being described as comprising at least one sub-activity, the instructions describing trigger events that result in transitions between the top-level activities.

2. The method of claim 1, wherein each top-level activity is associated with one of the trigger events, and wherein the act of providing instructions comprises an act of providing instructions that describe performing the top-level activities in a predetermined sequence such that a particular top-level activity is performed only after the trigger event associated with a preceding top-level activity in the predetermined sequence has occurred.

3. The method of claim 2, wherein the act of providing instructions comprises an act of providing instructions so that the patch management process is described as comprising a top-level assess activity that includes conducting an inventory of assets of the computer system in preparation for future anticipated but unspecified patches.

4. The method of claim 3, wherein the act of providing instructions comprises an act of providing instructions that describe the trigger event associated with the top-level assess activity as being a receipt of notification that at least one new software update is available.

5. The method of claim 4, wherein the act of providing instructions comprises an act of providing instructions that describe a top-level identify activity that includes determining whether the at least one new software update should be deployed.

6. The method of claim 5, wherein the act of providing instructions comprises an act of providing instructions that describe performing the top-level identify activity after the top-level assess activity in the predetermined sequence.

7. The method of claim 6, wherein the act of providing instructions comprises an act of providing instructions that describe the trigger event associated with the top-level identify activity as being a submission of a request to deploy the at least one new software update.

8. The method of claim 6, wherein the act of providing instructions comprises an act of providing instructions that describe a top-level evaluate and plan activity that includes planning and building a release of the at least one new software update.

9. The method of claim 8, wherein the act of providing instructions comprises an act of providing instructions that describe performing the top-level evaluate and plan activity after the top-level identify activity in the predetermined sequence.

10. The method of claim 9, wherein the act of providing instructions comprises an act of providing instructions that describe the trigger event associated with the top-level evaluate and plan activity as being a receipt of authorization to deploy the at least one new software update.

11. The method of claim 9, wherein the act of providing instructions comprises an act of providing instructions that describe a top-level deploy activity including deploying the software update to the computer system.

12. The method of claim 11, wherein the act of providing instructions comprises an act of providing instructions that describe performing the top-level deploy activity after the top-level evaluate and plan activity in the predetermined sequence.

13. The method of claim 12, wherein the act of providing instructions comprises an act of providing instructions that describe the trigger event associated with the top-level deploy activity as being a completion of an installation of the at least one new software update.

14. A method of implementing a patch management process to install a software patch in a computer system, the method comprising an act of:

following instructions that describe the patch management process in a hierarchical manner so that the patch management process is described as comprising a plurality of top-level activities, with each of the plurality of top-level activities being described as comprising at least one sub-activity, the instructions describing trigger events that result in transitions between the top-level activities.

15. The method of claim 14, wherein each top-level activity is associated with one of the trigger events, and wherein the act of following instructions comprises an act of following instructions that describe performing the top-level activities in a predetermined sequence such that a particular top-level activity is performed only after the trigger event associated with a preceding top-level activity in the predetermined sequence has occurred.

16. The method of claim 15, wherein the act of following instructions comprises an act of following instructions that describe the patch management process as comprising a top-level assess activity that includes conducting an inventory of assets of the computer system in preparation for future anticipated but unspecified patches.

17. The method of claim 16, wherein the act of following instructions comprises an act of following instructions that describe the trigger event associated with the top-level assess activity as being a receipt of notification that at least one new software update is available.

18. The method of claim 17, wherein the act of following instructions comprises an act of following instructions that describe a top-level identify activity that includes determining whether the at least one new software update should be deployed.

19. The method of claim 18, wherein the act of following instructions comprises an act of following instructions that describe performing the top-level identify activity after the top-level assess activity in the predetermined sequence.

20. The method of claim 19, wherein the act of following instructions comprises an act of following instructions that describe the trigger event associated with the top-level identify activity as being a submission of a request to deploy the at least one new software update.

21. The method of claim 19, wherein the act of following instructions comprises an act of following instructions that describe a top-level evaluate and plan activity that includes planning and building a release of the at least one new software update.

22. The method of claim 21, wherein the act of following instructions comprises an act of following instructions that describe performing the top-level evaluate and plan activity after the top-level identify activity in the predetermined sequence.

23. The method of claim 22, wherein the act of following instructions comprises an act of following instructions that describe the trigger event associated with the top-level evaluate and plan activity as being a receipt of authorization to deploy the at least one new software update.

24. The method of claim 22, wherein the act of following instructions comprises an act of following instructions that describe a top-level deploy activity including deploying the software update to the computer system.

25. The method of claim 23, wherein the act of following instructions comprises an act of following instructions that describe performing the top-level deploy activity after the top-level evaluate and plan activity in the predetermined sequence.

26. The method of claim 24, wherein the act of following instructions comprises an act of following instructions that describe the trigger event associated with the top-level deploy activity as a completion of an installation of the at least one new software update.

27. A method of administering a computer system that comprises one or more software packages that are anticipated to receive patches, the patches to be installed on at least one computer device in the computer system, the computer system comprising a plurality of resources that are employed in the installation of the patches, the method comprising an act of:

distinct from the installation of any particular patch, assessing the computer system to determine the preparedness of the computer system to process future anticipated but unspecified patches.

28. The method of claim 27, further comprising an act of, in response to information determined during the act of assessing, taking action that impacts at least one of the plurality of resources to improve the preparedness of the computer system to process future anticipated but unspecified patches.

29. The method claim 27, wherein the act of assessing the computer system comprises an act of compiling a list of computer assets comprising the computer system.

30. The method of claim 27, wherein the act of assessing is performed following each installation of one or more of the patches.

31. The method of claim 30, wherein the method is performed in a hierarchical manner comprising a plurality of top-level activities, each of the plurality of top-level activities comprising at least one sub-activity, the plurality of top-level activities performed in a predetermined sequence, the predetermined sequence performed in an ongoing cycle such that the act of assessing is continuously repeated.

32. A method of instructing users in the implementation of a protocol for administering patch management in a computer system that comprises one or more software packages that are anticipated to receive patches, the patches to be installed on at least one computer device in the computer system, the computer system comprising a plurality of resources that are employed in the installation of the patches, the method comprising acts of:

providing instructions that describe procedures for installing the patches; and

providing instructions that describe the protocol as including an assessment phase that is distinct from the installation of particular patches, wherein the assessment phase relates to assessing the computer system to determine the preparedness of the computer system to process future anticipated but unspecified patches.

33. The method of claim 32, wherein the act of providing instructions that describe the protocol comprises an act of providing instructions that describe, in response to information determined during the assessment phase, taking action that impacts at least one of the plurality of resources to improve the preparedness of the computer system to process future anticipated but unspecified patches.

34. The method claim 32, wherein the act of providing instructions that describe the protocol comprises an act of providing instructions that describe compiling, during the assessment phase, a list of computer assets comprising the computer system.

35. The method of claim 32, wherein the act of providing instructions that describe the protocol comprises an act of providing instructions that describe performing the assessment phase following each installation of one or more of the patches.

36. The method of claim 35, wherein the act of providing instructions that describe the protocol comprises an act of providing instructions such that the protocol is described in a hierarchical manner comprising a plurality of top-level activities, each of the plurality of top-level activities being described as comprising at least one sub-activity, the plurality of top-level activities described as being performed in a predetermined sequence, the predetermined sequence describes as being performed in an ongoing cycle such that the assessment phase is continuously repeated.

37. A method of implementing a protocol for administering patch management in a computer system that comprises one or more software packages that are anticipated to receive patches, the patches to be installed on at least one computer device in the computer system, the computer system comprising a plurality of resources that are employed in the installation of the patches, the method comprising acts of:

following instructions that describe the installation of the patches; and

following instructions that describe the protocol as including an assessment phase that is distinct from the installation of particular patches, wherein the assessment phase relates to assessing the computer system to determine the preparedness of the computer system to process future anticipated but unspecified patches.

38. The method of claim 37, wherein the act of following instructions that describe the protocol comprises an act of following instructions that describe, in response to information determined during the act of assessing, taking action that impacts at least one of the plurality of resources to improve the preparedness of the computer system to process future anticipated but unspecified patches.

39. The method of claim 37, wherein the act of following instructions that describe the protocol comprises an act of following instructions that describe performing the assessment phase following each installation of one or more of the patches.

40. The method of claim 39, wherein the act of following instructions that describe the protocol comprises an act of following instructions that describe the protocol in a hierarchical manner comprising a plurality of top-level activities, each of the plurality of top-level activities being described as comprising at least one sub-activity, the plurality of top-level activities performed in a predetermined sequence, the predetermined sequence performed in an ongoing cycle such that the assessment phase is continuously repeated.