Method and apparatus to facilitate cross-domain push deployment of software in an enterprise environment

• US 7,069,581 B2
• Filed: 10/04/2001
• Issued: 06/27/2006
• Est. Priority Date: 10/04/2001
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Kadam, Sunil S., Fu, Tianying, Bacus, Michael P.
• Primary Examiner(s): Zand, Kambiz
• Application Number:
  US09/971,333
• Publication Number:
  US 20030070089A1
• Time in Patent Office: 1,727 Days
• Field of Search: 713/201, 713/202, 726/3
• US Class Current: 726/3
• CPC Class Codes: G06F 8/60 Software deployment

Abstract

One embodiment of the present invention provides a system to facilitate cross-domain push deployment of software in an enterprise environment. The system operates by receiving a machine name and a domain name associated with a client at a server. Next, the system creates an entry in a database, which associates the machine name with the domain name. This entry establishes what software to deploy to the client. The system then accepts a user name and a password from the server administrator to gain access to the client. The system authenticates the server to the client using the user name and password. After authenticating the server to the client, the system pushes the software package to the client.

Claims

1. A method to facilitate cross-domain push deployment of software in an enterprise environment, comprising:

receiving a machine name and a domain name at a server, wherein the machine name and the domain name are associated with a client;

associating the machine name with the domain name, wherein associating the machine name with the domain name establishes what software to deploy to the client, by creating an entry in a hierarchical directory structure based on the machine name and the domain name, so that the deployed software is selected based on a location of the client in the hierarchical directory structure;

accepting a user name and a password at the server, wherein the user name and the password are used to gain access to the client;

authenticating the server to the client using the user name and password;

pushing a software package to the client from the server; and

allowing an agent to download a software policy from the server to the client, wherein the agent enforces the software policy;

wherein pushing the software package to the client includes;

copying the software package to the client from the server;

installing the agent from the software package onto the client; and

executing the agent on the client;

wherein the software package includes a self-extracting header and a compressed installation package;

wherein the self-extracting header is an executable program that opens the compressed installation program upon execution and installs a payload of the compressed installation package;

wherein the payload is capable of downloading software and security policies from the server and enforcing the security policies.

2. The method of claim 1, wherein the domain name is associated with a domain, wherein the domain includes an untrusted domain.

3. The method of claim 2, further comprising accessing the domain across a network.

4. The method of claim 3, wherein the network includes the Internet.

5. The method of claim 1, wherein authenticating the server to the client includes establishing administrator privileges on the client.

6. The method of claim 1, wherein the hierarchical directory structure is organized to map a physical layout of an enterprise system.

7. The method of claim 1, wherein the hierarchical directory structure is organized to map a logical layout of an enterprise system.

8. A computer-readable storage medium storing computer-readable instructions that when executed by a computer cause the computer to perform a method to facilitate cross-domain push deployment of software in an enterprise environment, comprising:

receiving a machine name and a domain name at a server, wherein the machine name and the domain name are associated with a client;

associating the machine name with the domain name, wherein associating the machine name with the domain name establishes what software to deploy to the client by creating an entry in a hierarchical directory structure based on the machine name and the domain name, so that the deployed software is selected based on a location of the client in the hierarchical directory structure;

accepting a user name and a password at the server, wherein the user name and the password are used to gain access to die client;

authenticating the server to the client using the user name and password;

pushing a software package to the client from the server; and

allowing an agent to download a software policy from the server to the client, wherein the agent enforces the software policy;

wherein pushing the software package to the client includes;

copying the software package to the client from the server;

installing the agent from the software package onto the client; and

executing the agent on the client;

wherein the software package includes a self-extracting header and a compressed installation package;

wherein the self-extracting header is executable program that opens the compressed installation program upon execution and installs a payload of the compressed installation package;

wherein the payload is capable of downloading software and security policies from the server and enforcing the security policies.

9. The computer-readable storage medium of claim 8, wherein the domain name is associated with a domain, wherein the domain includes an untrusted domain.

10. The computer-readable storage medium of claim 9, the method further comprising accessing the domain across a network.

11. The computer-readable storage medium of claim 10, wherein the network includes the Internet.

12. The computer-readable storage medium of claim 8, wherein authenticating the server to the client includes establishing administrator privileges on the client.

13. An apparatus to facilitate cross-domain push deployment of software in an enterprise environment, comprising:

a receiving mechanism that is configured to receive a machine name and a domain name at a server, wherein the machine name and the domain name are associated with a client;

an associating mechanism that is configured to associate the machine name with the domain name, wherein associating the machine name with the domain name establishes what software to deploy to the client, by creating an entry in a hierarchical directory structure based on the machine name and the domain name, so that the deployed software is selected based on a location of the client in the hierarchical directory structure;

an accepting mechanism that is configured to accept a user name and a password at the server, wherein the user name and the password are used to gain access to the client;

an authenticating mechanism that is configured to authenticate the server to the client using the user name and password;

a software pushing mechanism that is configured to push a software package to the client from the server;

an allowing mechanism that is configured to allow an agent to download a software policy from the server to the client;

an enforcing mechanism that is configured to enforce the software policy;

a copying mechanism that is configured to copy the software package to the client from the server;

an installing mechanism that is configured to install the agent from the software package onto the client; and

an executing mechanism that is configured to execute the agent on the client;

wherein the software package includes a self-extracting header and a compressed installation package;

wherein the self-extracting header is an executable program that opens the compressed installation program upon execution and installs a payload of the compressed installation package;

wherein the payload is capable of downloading software and security policies from the server and enforcing the security policies.

14. The apparatus of claim 13, wherein the domain name is associated with a domain, wherein the domain includes an untrusted domain.

15. The apparatus of claim 14, further comprising an accessing mechanism that is configured to access the domain across a network.

16. The apparatus of claim 15, wherein the network includes the Internet.

17. The apparatus of claim 13, further comprising an establishing mechanism that is configured to establish administrator privileges on the client.