Method and system for dynamically distributing updates in a network

• US 6,484,315 B1
• Filed: 02/01/1999
• Issued: 11/19/2002
• Est. Priority Date: 02/01/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ziese, Kevin J.
• Primary Examiner(s): DAM, TUAN QUANG
• Application Number:
  US09/241,823
• Time in Patent Office: 1,387 Days
• Field of Search: 713/100, 713/153, 713/163, 713/187, 713/191, 713/200, 709/203, 709/201, 709/221, 709/220, 709/227, 709/217-222, 707/203, 707/202, 707/204, 707/10, 340/541, 340/540, 714/13, 714/18, 714/38, 717/168-178
• US Class Current: 717/173
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99954 Version management

Abstract

A first version of a program operating at a network site is updated by automatically downloading from a remote site any update for the program in response to an automated event. A downloaded update is installed to generate a second version of the program. The second version of the program is operated at the network site in place of the first version.

Claims

1. A method for updating a first version of a program operating at a network site, comprising:

in response to an automated event, automatically downloading from a remote site any update for the program;

automatically installing a downloaded update to generate a second version of the program;

after installation of the downloaded update, automatically determining whether the second version of the program is operating correctly;

in response to correct operation of the second version, operating the second version of the program in place of the first version at the network site; and

in response to incorrect operation of the second version, automatically restoring the first version of the program for operation at the network site.

2. A method for updating a first version of a program operating at a network site, comprising:

in response to an automated event, automatically downloading from a remote site any update for the program;

installing a downloaded update to generate a second version of the program; and

operating the second version of the program in place of the first version at the network site;

automatically distributing the downloaded update to a disparate network site operating the first version of the program;

automatically installing the downloaded update to generate the second version of the program at the disparate network site; and

automatically operating the second version of the program in place of the first version at the disparate network site.

3. A method for updating a first version of a program operating at a network site, comprising:

in response to an automated event, automatically downloading from a remote site any update for the program;

installing a downloaded update to generate a second version of the program;

after installation of the downloaded update, automatically determining whether the second version of the program is operating correctly at the network site;

in response to incorrect operation of the second version, automatically restoring the first version of the program for operation at the network site; and

in response to correct operation of the second version at the network site;

automatically distributing the downloaded update to a disparate network site operating the first version of the program;

automatically installing the downloaded update to generate the second version of the program at the disparate network site; and

automatically operating the second version of the program in place of the first version at the disparate network site.

4. A method for updating a first version of a program operating at a network site, comprising:

in response to an automated event, automatically downloading from a remote site any update for the program;

automatically installing a downloaded update to generate a second version of the program; and

operating the second version of the program in place of the first version at the network site;

broadcasting over a network an update message;

receiving in response to the update message a request for the downloaded update from each of a plurality of disparate network sites operating the first version of the program;

automatically distributing the downloaded update to the disparate network sites requesting the downloaded update;

automatically installing the downloaded update to generate the second version of the program at each of the disparate network sites; and

automatically operating the second version of the program in place of the first version at each of the disparate network sites.

5. The method of claim 4, further comprising:

receiving a recovery event at one of the network sites;

automatically restoring the first version of the program at the network site at which the recovery event was received;

broadcasting a recovery message from the network site over the network; and

automatically restoring the first version of the program at each of the remaining network sites operating the second version of the program.

6. The method of claim 5 wherein the recovery event occurs in response to incorrect operation of the second version of the program.

7. An intrusion detection system, comprising:

a private network including a plurality of sites connected to a public network, each site including an intrusion detection sensor operating with a first set of intrusion detection signatures; and

each of the intrusion detection sensors operable to automatically download from a remote site any update for the intrusion detection signatures in response to a specified event, to automatically install a downloaded update to generate a second set of intrusion detection signatures, to operate with the second set of intrusion detection signatures, and to automatically distribute the downloaded update to the remaining intrusion detection sensors for installation.

8. The system of claim 7, wherein the specified event is an automated event.

9. The system of claim 8, wherein the automated event is a timed event.