Techniques for agent configuration

• US 20090271504A1
• Filed: 07/08/2008
• Published: 10/29/2009
• Est. Priority Date: 06/09/2003
• Status: Abandoned Application

• Current Assignee: Industrial Defender, Inc. (Capgemini SE)
• Original Assignee: Industrial Defender, Inc. (Capgemini SE)
• Inventors: Hutchinson, Thomas Wilfred, Styan, Roy, Liesch, Quinn, Ginter, Andrew Francis, Rohs, Charles G., Jensen, John Bretton, Smigel, Jeffrey D.
• Application Number:
  US12/217,763
• Publication Number:
  US 20090271504A1
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: G05B 23/0213 Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

Described are techniques for monitoring the performance, security and health of a system used in an industrial application. Agents on components included in the industrial network report data to an appliance or server. The agents on a component may include a configuration agent and one or more other agents. The configuration agent receives agent configuration data that may be communicated at a network application level. The agent configuration data may include information used to configure the configuration agent and other agents on the component. The configuration agent may be disabled. Once disabled, the configuration agent cannot be used to further modify agent configuration data as applied to the configuration agent and the one or more other agents until re-enabled.

Claims

1. A method for configuring agents on a first component comprising:

providing a configuration agent, said configuration agent used to configure the configuration agent itself and one or more other agents that monitor the first component;

receiving, by the configuration agent, agent configuration data;

determining whether said agent configuration data includes first agent configuration data for the configuration agent to disable the configuration agent; and

in response to said determining that said agent configuration data includes first agent configuration data to disable the configuration agent, disabling the configuration agent without disabling any of said one or more other agents, wherein disabling the configuration agent does not allow subsequent modification of said agent configuration data for said one or more other agents and said configuration agent using said configuration agent until said configuration agent is enabled.

2. The method of claim 1, wherein the agent configuration data includes data for configuring the one or more other agents and the configuration agent.

3. The method of claim 1, further comprising:

storing the configuration data in a data store accessible to the first component.

4. The method of claim 1, wherein the configuration agent and the one or more other agents execute on the first component, said one or more other agents collecting data about said first component and reporting said data to a second component.

5. The method of claim 1, wherein disabling the configuration agent includes terminating the configuration agent.

6. The method of claim 1, wherein disabling the configuration agent includes the configuration agent not processing any subsequent communications at a network application level over a communication connection to another component, said communication connection being used to transmit agent configuration data at the network application level to the configuration agent prior to the configuration agent being disabled.

7. The method of claim 1, wherein said agent configuration data is communicated from a second component to said configuration agent over a first communication connection at a network application level.

8. The method of claim 7, wherein disabling said configuration agent includes either terminating the configuration agent or causing said configuration agent to not process any subsequently received communications at the network application level on the first communication connection until the configuration agent is re-enabled.

9. The method of claim 1, further comprising:

establishing, for each of said one or more other agents and said configuration agent, a communication connection for communicating between said each agent and a second component.

10. The method of claim 9, wherein the communication connection for each of said one or more agents is a one-way communication connection at the network application level used to report monitoring data about the first component to the second component, and, when said configuration agent is not disabled, the communication connection for said configuration agent is used as a two-way communication connection at the network application level to communicate agent configuration data to the configuration agent.

11. The method of claim 10, wherein, when said configuration agent is disabled, either the configuration agent processing is terminated, or the communication connection for the configuration agent is not utilized by the configuration agent for network application level communications.

12. The method of claim 11, wherein re-enabling said configuration agent includes modifying a portion of said agent communication data for said configuration agent, said modifying being performed without using any communication connection established using said establishing.

13. The method of claim 1, wherein said agent configuration data includes an indicator to allow downloading a code modification to the first component over a same communication connection as said agent configuration data when said configuration agent is enabled, wherein said code modification is applied to at least one of said configuration agent and said one or more other agents.

14. The method of claim 1, wherein said code modification involves a modification to one or more of executable code, source code, and an intermediate code form.

15. A method for configuring agents comprising:

providing a first component including a configuration agent and one or more other agents, said configuration agent configuring said one or more other agents and said configuration agent, said one or more other agents collecting monitoring data in connection with monitoring the first component;

providing a second component which obtains agent configuration data;

providing a plurality of communication connections between said first component and said second component, wherein each of said configuration agent and said one or more other agents use a different one of said plurality of communication connections for communicating with said second component;

communicating the agent configuration data from the second component to the configuration agent of the first component over a first of said plurality of communication connections used for communications between said second component and said configuration agent, said agent configuration data including information used for configuring at least one of;

the one or more other agents and the configuration agent;

determining whether said agent configuration data includes a setting to disable said configuration agent; and

in response to said determining that said agent configuration data includes a setting to disable the configuration agent, disabling the configuration agent without affecting current processing and current configuration of said one or more other agents, wherein disabling the configuration agent does not allow subsequent modification of said agent configuration data for said one or more other agents and said configuration agent using said configuration agent until said configuration agent is enabled.

16. The method of claim 15, further comprising:

enabling said configuration agent, said enabling including modifying a portion of the agent configuration data specifying settings for said configuration agent, wherein said modifying is performed without using one of said plurality of communication connections.

17. The method of claim 16, wherein disabling said configuration agent includes terminating said configuration agent, and said enabling further includes restarting said configuration agent after said modifying.

18. The method of claim 16, wherein the agent configuration data is communicated as a network application level communication from the second component to the configuration agent using said first communication connection.

19. The method of claim 18, wherein said disabling said configuration agent causes said configuration agent to not utilize said first communication connection for network application level communications, and said enabling causes said configuration agent to utilize said first communication connection for network application level communications and to read and process said agent configuration data communicated using a network application level communication over said first communication connection from said second component.

20. The method of claim 15, wherein said first component and said second component are included in an industrial network, and at least one of said first component and said second component is a computer system or an appliance.

21. A system comprising:

a first component including a configuration agent and one or more other agents;

a second component which receives agent configuration data; and

plurality of communication connections between the first component and the second component, wherein each of said configuration agent and said one or more other agents use a different one of said plurality of communication connections for communicating with said second component and wherein a first of said plurality of communication connections is used for communications between said second component and said configuration agent, said first communication connection used to send said agent configuration data to said configuration agent, said agent configuration data including information used for configuring at least one of;

the one or more other agents and the configuration agent; and

wherein said first component comprises a computer readable medium including executable code stored thereon for;

configuring, by the configuration agent, one or more other agents and said configuration agent;

determining whether said agent configuration data includes a setting to disable said configuration agent;

in response to determining that said agent configuration data includes a setting to disable the configuration agent, disabling the configuration agent, wherein disabling the configuration agent does not allow subsequent modification of said agent configuration data for said one or more other agents and said configuration agent using said configuration agent until said configuration agent is enabled; and

enabling said configuration agent, said enabling including modifying a portion of the agent configuration data specifying settings for said configuration agent, wherein said modifying is performed without using one of said plurality of communication connections.

22. A computer readable medium comprising executable code stored thereon for configuring agents on a first component, the computer readable medium comprising executable code stored thereon for:

providing a configuration agent, said configuration agent used to configure the configuration agent itself and one or more other agents that monitor the first component;

receiving, by the configuration agent, agent configuration data;

determining whether said agent configuration data includes first agent configuration data for the configuration agent to disable the configuration agent; and

in response to said determining that said agent configuration data includes first agent configuration data to disable the configuration agent, disabling the configuration agent without disabling any of said one or more other agents, wherein disabling the configuration agent does not allow subsequent modification of said agent configuration data for said one or more other agents and said configuration agent using said configuration agent until said configuration agent is enabled.