Software administration in an application service provider scenario via configuration directives

• US 7,401,133 B2
• Filed: 04/22/2003
• Issued: 07/15/2008
• Est. Priority Date: 04/23/2002
• Status: Expired due to Fees

• Current Assignee: Secure Resolutions Incorporated
• Original Assignee: Secure Resolutions Incorporated
• Inventors: Wong, Oyland, Huang, Ricky Y., Melchione, Daniel Joseph
• Primary Examiner(s): Jean; Frantz B.
• Application Number:
  US10/421,669
• Publication Number:
  US 20030234808A1
• Time in Patent Office: 1,911 Days
• Field of Search: 709/220, 709/225, 717/177, 719/310
• US Class Current: 709/220
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

Software can be administered via an application service provider scenario. An administrator can specify configuration directives to be implemented at nodes in a network. The nodes can be organized into groups. The configuration directives can be organized into policies. The administration functions can be performed via an application service provider scenario. For example, a browser-based user interface can be used to configure nodes and indicate appropriate settings, software, or behavior for the nodes. Agent software at a node can query a data center to discover and implement the configuration directives. More than one organization can be serviced by an application service provider.

Claims

1. A computer-implemented method of providing software administration services for a set of nodes via an application service provider scenario, the method comprising:

collecting a set of one or more configuration directives for one or more nodes in the set of nodes via an application service provider scenario, wherein the one or more configuration directives are collected via a web protocol, the web protocol comprises an HTTP-based protocol, and the one or more configuration directives are received from activated user interface elements acquired via the application service provider scenario, whereby the application service provider scenario is configured to collect the one or more configuration directives through a firewall; and

responsive to communications initiated by one or more nodes over a network, implementing the configuration directives at the nodes.

2. The method of claim 1 wherein at least two of the nodes are associated in a group, and at least one of the configuration directives is for the group.

3. The method of claim 1 wherein at least two of the configuration directives are associated into a named policy, and at least one node is associated with the policy.

4. The method of claim 1 wherein the configuration directives are received from a plurality of organizations.

5. The method of claim 1 wherein the configuration directives are received from a web browser.

6. The method of claim 1 wherein the configuration directives comprise directives for administering anti-virus software.

7. The method of claim 1 wherein the configuration directives comprise a directive indicating whether a user interface is to be displayed for administered software at an administered node.

8. The method of claim 1 wherein the configuration directives indicate whether a node is to share installable software files with other nodes.

9. The method of claim 1 wherein the configuration directives indicate software to be installed at the nodes.

10. The method of claim 1 wherein the configuration directives indicate a stage of software to be installed at the nodes.

11. The method of claim 1 wherein the software administration services are provided via software as a service.

12. A computer-readable storage medium comprising computer-executable instructions for performing the method of claim 1.

13. A computer-implemented method for achieving administration of anti-virus software at a plurality of computers within a plurality of organizations, the method comprising:

from a plurality of web browsers, receiving a plurality of configuration directives from activated user interface elements to be enforced at the nodes, wherein the configuration directives comprise an indication of configuration of anti-virus software at the nodes and are received in an application service provider scenario;

associating the configuration directives in a database with the nodes, wherein the database comprises an organizations database table; and

responsive to a request from agent software at a polling node, providing information to the agent software at the polling node by which anti-virus software at the polling node can be configured according to one of the configuration directives associated with the polling node;

wherein the receiving and the providing are accomplished via an HTTP-based protocol configured to provide the information to the polling node through a firewall.

14. A method of providing application services to a plurality of enterprises, the method comprising:

via an application service provider scenario configured to utilize an HTTP-based protocol, collecting indications through a firewall indicating configuration directives to be implemented at computers within the enterprises;

periodically receiving communications from agent software on the computers within the enterprises via an HTTP-based protocol; and

wherein the indications are received via activated user interface elements acquired via the application service provider scenario

responsive to the communications, implementing the configuration directives through a firewall at the computers within the enterprises.

15. The method of claim 14 further comprising:

grouping one or more of the configuration directives into a named set; and

associating the named set with one or more computers.

16. The method of claim 14 wherein the requests are received from an agent automatically without action by a user.

17. A computer-readable storage medium having computer-executable instructions for performing the method of claim 14.

18. A system for providing software administration services to a plurality of nodes via an application service provider scenario, the system comprising:

a data store operable to associate the nodes with configuration directives to be implemented thereat; and

a data center operable to receive indications of configuration directives to be associated with the nodes from activated user interface elements through a firewall via an HTTP-based protocol in an application service provider scenario and modify the data store responsive to the indications;

wherein the data center is further operable to receive communications from the nodes via an HTTP-based protocol whereby the configuration directives are implemented through a firewall according to configuration directive information in the data store.

19. The system of claim 18 wherein the data center is operable to receive indications of one or more groups into which the nodes are placed;

and at least one configuration directive is associated with the groups.

20. A system for administering software via a network, the system comprising:

means for receiving information associating nodes with configuration directives via activated user interface elements in an application service provider scenario; and

means for replying to communications from the nodes to implement the configuration directives at the nodes associated thereto;

wherein the means for receiving information is configured to receive the information through a firewall via an HTTP-based protocol; and

wherein the means for replying to communications is configured to reply to the communications through a firewall via an HTTP-based protocol.

21. The system of claim 20 wherein the system administers software at 1,000,000 or more nodes.

22. The system of claim 20 wherein the system administers software at 10,000,000 or more nodes.

23. A computer user interface for achieving software administration at a plurality of computers, the computer user interface comprising:

a user interface element for specifying that a named set of one or more configuration directives are to be applied to a named group of one or more computers;

wherein the user interface element is delivered by a data center via an HTTP-based protocol through a firewall, and responsive to activation of the user interface element, the data center responds to HTTP-based polls by polling computers out of the one or more computers of the named group with information indicating that the configuration directives are to be implemented at the polling computers; and

wherein the computer user interface element is presented via an application service provider scenario.

24. A computer user interface for achieving software administration at a plurality of computers, the computer user interface comprising:

a user interface element for specifying that a named set of one or more configuration directives are to be applied to a named group of one or more computers;

wherein the user interface element is delivered by a data center via an application service provider scenario utilizing an HTTP-based protocol, and responsive to activation of the user interface element, the data center responds to polls by polling computers out of the one or more computers of the named group with information indicating that the configuration directives are to be implemented at the polling computers;

wherein the polls are handled according to an application service provider scenario; and

wherein the application service provider scenario is configured to deliver the user interface element and handle the polls through a firewall.