Software management apparatus and method, and user terminal controlled by the apparatus and management method for the same

• US 20100275252A1
• Filed: 04/13/2010
• Published: 10/28/2010
• Est. Priority Date: 04/13/2009
• Status: Abandoned Application

• Current Assignee: Gyeyeong Technology & Information Company Limited
• Original Assignee: Gyeyeong Technology & Information Company Limited
• Inventors: Yun, Yong
• Application Number:
  US12/662,345
• Publication Number:
  US 20100275252A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A software management apparatus and method are disclosed. A software installation attempt made in one of multiple user terminals connected through a corporate network is detected, and a management operation is performed to permit software installation, to block the use of the user terminal, or to provide a popup notification according to the rights assigned to the user terminal. In addition, unlike existing approaches to prevention of unauthorized software installation that may not handle already installed software, the software management apparatus and method enable the system manager to handle and remove software that is already installed in a user terminal before installation of the apparatus and method. As a result, unauthorized installation of software in corporate computers can be effectively prevented.

Claims

1. A software management method for a management apparatus controlling a plurality of user terminals, comprising:

receiving an identification code and a unique key that is obtained by hashing software related to an installation attempt from a user terminal;

determining whether to permit or prohibit installation of the software related to the installation attempt by comparing the identification code and unique key with management information; and

controlling the user terminal to install or remove the software according to the determination.

2. The software management method of claim 1, wherein the unique key is a hash value obtained by applying a one-way hashing function to an installation file of the software.

3. The software management method of claim 1, wherein the identification code corresponds to a hardware address (MAC) or a BIOS serial number of the user terminal.

4. The software management method of claim 1, wherein the management information comprises information regarding the type and quantity of software available for installation for each user terminal.

5. The software management method of claim 1, further comprising:

generating unique keys for multiple pieces of software to be managed, before receiving an identification code and a unique key from a user terminal; and

storing the generated unique keys in a database.

6. The software management method of claim 1, wherein determining whether to permit or prohibit installation of the software related to the installation attempt comprises:

identifying the user terminal associated with the identification code;

identifying the type of the software on the basis of the unique key; and

checking whether to permit or prohibit installation of the software by comparing the identification results with the management information related to the user terminal.

7. The software management method of claim 6, wherein checking whether to permit or prohibit installation of the software further comprises determining to permit installation of the software when the identified type indicates update.

8. The software management method of claim 1, further comprising:

receiving current installation information regarding already installed software from a user terminal;

receiving a request for an uninstall list of software to be deleted from the user terminal and an identification code of the user terminal; and

identifying the user terminal using the identification code, creating an uninstall list on the basis of the current installation information, and sending the uninstall list to the user terminal.

9. The software management method of claim 8, wherein the current installation information is periodically received, and the uninstall list is sent and received through an HTTP POST method with UTF-8 character encoding.

10. The software management method of claim 8, wherein the uninstall list is an INI file that contains information regarding specific software including the sequence number, name, package identifier, and number of software items in the package.

11. The software management method of claim 8, wherein identifying the user terminal and creating an uninstall list comprises:

identifying the user terminal using the received identification code;

creating an uninstall list of software to be deleted by comparing the management information related to the identified user terminal with the current installation information; and

sending the created uninstall list to the user terminal.

12. A software management method for a user terminal that is controlled by a management apparatus, comprising:

detecting a software installation attempt;

generating an identification code of the user terminal and a unique key of software related to the installation attempt, and sending the identification code and unique key to the management apparatus; and

installing the software related to the installation attempt or prohibiting the installation attempt according to control information from the management apparatus.

13. The software management method of claim 12, wherein generating an identification code and a unique key comprises:

detecting a process for installing the software;

extracting an installation file of the software; and

generating the unique key by hashing the installation file.

14. The software management method of claim 12, further comprising displaying, when the installation attempt is prohibited, a notification popup indicating an installation abortion notification according to policy information from the management apparatus.

15. The software management method of claim 12, further comprising:

sending current installation information regarding already installed software to the management apparatus;

sending a request for an uninstall list of software to be deleted and the identification code to the management apparatus;

receiving an uninstall list corresponding to the current installation information from the management apparatus; and

maintaining or removing the installed software according to the uninstall list.

16. The software management method of claim 15, further comprising notifying the management apparatus of the result of software removal.

17. The software management method of claim 15, further comprising:

receiving policy information related to usage restriction from the management apparatus after maintaining or removing the installed software; and

displaying a bluescreen to prohibit the use of the user terminal, or displaying a notification popup indicating prohibition of the use of the software according to the received policy information.

18. A software management apparatus for controlling a plurality of user terminals, comprising:

a data transceiver module receiving an identification code and unique key from a user terminal, and sending control information for software installation permission or rejection to the user terminal;

a terminal management module identifying a user terminal indicated by a received identification code and unique key, and determining whether to permit or block software installation; and

a key comparison module comparing a unique key from a user terminal with management information stored in a database, and determining whether to permit or block software installation.

19. The software management apparatus of claim 18, wherein the terminal management module comprises:

a terminal recognizer identifying a user terminal by comparing the received identification code with terminal information stored in the database; and

a setting manager determining the right for software installation assigned to the identified user terminal, and offering control information for controlling the user terminal according to the determination.

20. The software management apparatus of claim 18, wherein the database comprises:

a terminal information DB storing terminal information for identifying user terminals and information for software installation permission and rejection;

a unique key DB storing unique keys of various software; and

a policy information DB defining blocking levels of software.

21. The software management apparatus of claim 18, further comprising a list generation module receiving a request for an uninstall list of software to be deleted through the data transceiver module, creating an uninstall list with reference to the database, and sending the uninstall list to the requesting user terminal.

22. A user terminal controlled by a management apparatus, comprising:

an identification code generation module generating a unique identification code of the user terminal;

an automatic scan module detecting a software installation attempt;

a key generation module generating, upon detection of a software installation attempt, a unique key corresponding to the software related to the installation attempt;

a data transceiver module sending the identification code and unique key to the management apparatus, and receiving control information for software installation permission or rejection from the management apparatus; and

an installation control module permitting or blocking software installation according to the control information from the management apparatus.

23. The user terminal of claim 22, wherein the key generation module comprises:

a file extractor extracting an installation file of the software; and

a hashing block generating the unique key by hashing the extracted installation file.

24. The user terminal of claim 23, wherein the hashing block generates the unique key using a one-way hashing function.

25. The user terminal of claim 22, further comprising a terminal control module that comprises:

a bluescreen provider blocking the use of the user terminal and providing a means for deleting the software; and

a popup provider outputting a popup window indicating blocking the use of the software on the display screen.

26. The user terminal of claim 22, wherein the identification code corresponds to a hardware address (MAC) or a BIOS serial number of the user terminal.

27. The user terminal of claim 22, further comprising an uninstallation handling module that comprises:

a list requester sending current installation information and a request for an uninstall list of software to be deleted to the management apparatus, receiving an uninstall list and identifying software to be deleted using the uninstall list; and

a removal executor deleting the software identified by the list requester.

28. The user terminal of claim 27, wherein the uninstall list is sent and received through an HTTP POST method with UTF-8 character encoding at a period of ten minutes.

29. The user terminal of claim 27, wherein the uninstall list contains information regarding specific software including the sequence number, name, package identifier, and number of software items in the package.