System and method for configuration, management, and monitoring of a computer network using inheritance

• US 6,834,301 B1
• Filed: 11/08/2000
• Issued: 12/21/2004
• Est. Priority Date: 11/08/2000
• Status: Expired due to Fees

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: Networks Associates Technology, Inc. (McAfee, LLC)
• Inventors: Hanchett, Paul F.
• Primary Examiner(s): Harvey, Jack
• Assistant Examiner(s): Nguyen, Hai V.
• Application Number:
  US09/708,927
• Time in Patent Office: 1,504 Days
• Field of Search: 709/223, 709/220, 709/226, 709/203, 709/224, 707/1, 707/9, 710/17, 713/201, 713/1, 717/173, 717/175, 717/178, 345/733, 705/1
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system and method using inheritance for the configuration, management, and/or monitoring of computer applications and devices via a computer network are disclosed. The method generally comprises calculating control settings to be enforced by an end node corresponding to a device of the network of devices, the control settings being calculated by the corresponding device. The control settings to be enforced by the end node are applicable to the device and the resources of the device. The calculation is performed by the end node or device by accessing data stored in a network directory defining a hierarchical tree structure containing nodes corresponding to the network of devices and defining control settings corresponding to and to be enforced upon the resources available to the devices. The control settings corresponding to the resources of each device are selectively inherited down the hierarchical tree structure of the network directory.

Claims

1. A system for management of a network of devices and resources available to the devices via a computer network, comprising:

a network directory defining a hierarchical tree structure containing nodes corresponding to the network of devices and defining control settings corresponding to and to be enforced upon the resources available to the devices;

a directory server in communication with the network directory to facilitate accessing data from and storing data to the network directory, the data relating to the nodes of the hierarchical tree structure corresponding to the devices and to the control settings corresponding to the resources; and

an end node corresponding to each device in the network of devices and resources corresponding to the device, the end node being in communication with the directory server and the resources corresponding to the device, the end node being adapted to enforce the control settings corresponding to the resources contained in the network directory,

wherein the control settings corresponding to the resources of each device are selectively inherited down the hierarchical tree structure of the network directory and wherein the control settings are determined at each end node,

wherein a management console is in communication with the network directory and the directory server for providing a user interface, the management console being adapted to selectively display the hierarchical tree structure and the control settings stored in the network directory,

wherein at least one control setting is a scheduled task and wherein the end node causes performance of the task when the scheduled task is to be performed,

wherein the scheduled task is an anti-virus-related task;

wherein further included is a get policy component that obtains relevant policies, a first cache for caching an output of the get policy component, and a calculate policy component that calculates an inheritance with the output received from the first cache and transmits the inheritance to a second cache, wherein the information in the first cache is updated based on a time stamping;

wherein broad control settings are set higher in the hierarchical tree structure while lower level control settings are set at a level of one of the devices.

2. The system for management of a network of devices and resources via a computer network according to claim 1, wherein the end node dynamically calculates the control setting of the selected node by reading the control settings of nodes along a path of nodes from a root of the hierarchical tree structure down to the selected node and wherein the end node overwrites previously written control settings upon reading conflicting control settings at each node along the path of nodes.

3. The system for management of a network of devices and resources via a computer network according to claim 1, wherein the end node dynamically calculates the control setting by reading from the control settings of the end node up to the control settings of a root of the hierarchical tree structure.

4. The system for management of a network of devices and resources via a computer network according to claim 1, wherein each control setting includes a configuration rule and the scheduled task.

5. The system for management of a network of devices and resources via a computer network according to claim 1, wherein the broad control settings require the scanning of all executable files for viruses, cleaning of the files if possible, quarantining of the files if the files can not be cleaned upon detecting a virus, and sending infection reports to a network administrator.

6. The system for management of a network of devices and resources via a computer network according to claim 5, wherein a mid-level control setting is set to report all infections to a local administrator.

7. The system for management of a network of devices and resources via a computer network according to claim 6, wherein the lower level settings require the deletion of infected files of said one of the devices.

8. A method for management of a network of devices and resources available to the devices via a computer network, comprising:

for each device of the network of devices, calculating control settings to be enforced by the device upon the resources corresponding to the device;

wherein the calculating is performed by the device by accessing data stored in a network directory defining a hierarchical tree structure containing nodes, each node corresponding to a device of the network of devices and defining control settings corresponding to and to be enforced upon the resources available to the corresponding device and wherein the control settings corresponding to the resources of each device are selectively inherited down the hierarchical tree structure of the network directory;

wherein the hierarchical tree structure and the control settings stored in the network directory for one of the devices are selectively displayed by a management console, the management console being in communication with the network directory and the directory server, the management console providing a user interface at the corresponding device;

wherein when the control setting is a scheduled task, further comprising causing performance of the task by the end node when the scheduled task is to be performed;

wherein the scheduled task is an anti-virus-related task;

wherein further included is a get policy component that obtains relevant policies, a first cache for caching an output of the get policy component, and a calculate policy component that calculates an inheritance with the output received from the first cache and transmits the inheritance to a second cache, wherein the information in the first cache is updated based on a time stamping;

wherein broad control settings are set higher in the hierarchical tree structure while lower level control settings are set at a level of one of the devices.

9. The method for management of a network of devices and resources via a computer network according to claim 8, further comprising enforcing the control settings by the device upon the resources available to the device.

10. The method management of computer application via a computer network according to claim 9, further comprising dynamically calculating the control settings of a selected node of the hierarchical tree structure by the device.

11. The method management of computer application via a computer network according to claim 10, wherein the dynamic calculating includes reading control settings of nodes along a path of nodes from a root of the hierarchical tree structure down to the selected node and overwriting previously written control settings upon reading conflicting control settings at each node along the path of nodes.

12. The method management of computer application via a computer network according to claim 10, wherein the dynamic calculating includes reading control settings of nodes along a path of nodes from the control setting of the selected node up to the control settings of a root of the hierarchical tree structure.

13. The method of management of a network of devices and resources via a computer network according to claim 8, wherein each control setting includes a configuration rule and the scheduled task.

14. A method for management of a network of devices and resources via a computer network according to claim 8, further comprising selectively transmitting data from a software repository of the directory server to the device.

15. A computer program product for management of a network of devices and resources available to the devices via a computer network, comprising:

for each device of the network of devices, computer code that calculates control settings to the enforced by the device upon the resources corresponding to the device, wherein the calculating is performed by the device by accessing data stored in a network directory defining a hierarchical tree structure containing nodes, each node corresponding to a device of the network of devices and defining control settings corresponding to and to be enforced upon the resources available to the corresponding device and wherein the control settings corresponding to the resources of each device are selectively inherited down the hierarchical tree structure of the network directory; and

a computer readable medium that stores said computer codes;

wherein the hierarchical tree structure and the control settings stored in the network directory are selectively displayed via a user interface;

wherein when the control setting is a scheduled task, further comprising computer code that causes performance of the task by the end node when the scheduled task is to be performed;

wherein the scheduled task is an anti-virus-related task;

wherein further included is a get policy component that obtains relevant policies, a first cache for caching an output of the get policy component, and a calculate policy component that calculates an inheritance with the output received from the first cache and transmits the inheritance to a second cache, wherein the information in the first cache is updated based on a time stamping;

wherein broad control settings are set higher in the hierarchical tree structure while lower level control settings are set at a level of one of the devices.

16. The computer program product for management of a network of devices and resources via a computer network according to claim 15, further comprising computer code that enforces the control settings upon the corresponding device and resources available to the device.

17. The computer program product for management of a network of devices and resources via a computer network according to claim 15, further comprising computer code that dynamically calculates the control setting of a selected node of the hierarchical tree structure by the corresponding device.

18. The computer program product for management of a network of devices and resources via a computer network according to claim 17, wherein the computer code that dynamically calculates includes computer code that reads control settings of nodes along a path of nodes from a root of the hierarchical tree structure down to the selected node and computer code that overwrites previously written control settings upon reading conflicting control settings at each node along the path of nodes.

19. The computer program product for management of a network of devices and resources via a computer network according to claim 17, wherein the computer code that dynamically calculates includes computer code that reads control settings of nodes along a path of nodes from the control settings of the selected node up to the control settings of a root of the hierarchical tree structure.

20. The computer program product for management of a network of devices and resources via a computer network according to claim 15, wherein each control setting includes a configuration rule and the scheduled task.

21. The computer program product for management of a network of devices and resources via a computer network according to claim 15, further comprising computer code that selectively transmits data from a software repository of the directory server to the device via the end node corresponding to the device.

22. A computer program product for management of a network of devices and resources available to the devices via a computer network, comprising:

computer code that contains a network directory defining a hierarchical tree structure containing nodes corresponding to the network of devices and defining control settings corresponding to and to be enforced upon the resources available to the devices;

computer code that facilitates communication between a directory server and the network directory to facilitate accessing data from and storing data to the network directory, the data relating to the nodes of the hierarchical tree structure corresponding to the devices and to the control settings corresponding to the resources;

computer code that facilitates communication between the device and the directory server and the resources corresponding to the device, the device computer code being adapted to enforce the control settings corresponding to the resources contained in the network directory, wherein the control settings corresponding to the resources of each device are selectively inherited down the hierarchical tree structure of the network directory; and

a computer readable medium that stores said computer codes;

wherein the hierarchical tree structure and the control settings stored in the network directory are selectively displayed, and computer code that selectively displays is in communication with the network directory and the directory server and provides a user interface;

wherein when the control setting is a scheduled task, further comprising computer code that causes performance of the task by the end node when the scheduled task is to be performed;

wherein the scheduled task is an anti-virus-related task;

wherein further included is a get policy component that obtains relevant policies, a first cache for caching an output of the get policy component, and a calculate policy component that calculates an inheritance with the output received from the first cache and transmits the inheritance to a second cache, wherein the information in the first cache is undated based on a time stamping;

wherein broad control settings are set higher in the hierarchical tree structure while lower level control settings are set at a level of one of the devices.