Method and/or system for identifying information appliances

• US 7,493,388 B2
• Filed: 08/19/2005
• Issued: 02/17/2009
• Est. Priority Date: 08/20/2004
• Status: Active Grant

• Current Assignee: BDNA Corporation (Flexera Software LLC)
• Original Assignee: BDNA Corporation (Flexera Software LLC)
• Inventors: Thorpe, John, Marker, Charles, Wen, Chih-Po
• Primary Examiner(s): Hu; Jinsong
• Application Number:
  US11/207,557
• Publication Number:
  US 20060064619A1
• Time in Patent Office: 1,278 Days
• Field of Search: 709/218, 709/220, 709/223, 709/224, 709/225, 705/28, 705/29
• US Class Current: 709/224
• CPC Class Codes: G06F 9/50 Allocation of resources, e.g. of the central processing unit [CPU]
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies

Abstract

Methods and/or systems for identifying and/or representing information appliances on a communication system retrieve data sets and store signature data for later identification of individual information systems.

Claims

1. A method of using a computer programmed with an automatic inventory discovery system to discover the existence and attributes of a plurality of assets of an entity and to keep track of said inventory over time even as assets are changed comprising:

A) using a computer programmed by an automatic inventory discovery system to probe one or more networks to which assets used by an entity are coupled to detect responding addresses

B) for each responding address, using a fingerprint from a plurality of fingerprints to determine the type of asset present at said responding address, said determination being made by attributes gathered from said responding address, each fingerprint providing a definition of a type of asset which can be recognized by said automated inventory discovery system, said definition provided in each said fingerprint by inclusion of a list of attributes said asset can have, each attribute listed in said fingerprint definition either including a collection instruction or pointing to a file containing a collection instruction which can control a collection computer to gather said attribute from a device at said responding address, and using said collection instruction for each attribute to control a computer to collect said attribute;

C) using one or more complete or partial fingerprint matching rules to compare attributes collected from said responding address to attributes listed in said fingerprint, and drawing a conclusion as to the existence or non existence at said responding address of an asset of the type defined by said fingerprint and making an entry in a data repository storing records for all assets found by said automated inventory discovery system and their attributes for each attribute found;

D) repeating the process of using other fingerprints in said plurality of fingerprints so as to discover as many instances of assets coupled to said one or more networks as can be discovered using said fingerprints and their attributes and making entries in said data repository for said discovered assets and their attributes so as to build in said data repository an inventory of particular instances of assets of types which can be recognized using said fingerprints;

E) using a plurality of attributes gathered about each instance of an asset to create a unique a signature data set for said instance of said asset, said signature data set being unique to said particular instance of an asset, which means that said signature data set for each particular instance of a type of asset can be used to identify said particular instance of an asset when attributes said particular instance of said asset are fetched again in subsequent iterations of steps B and C;

F) storing said signature data set;

G) repeating the process of using said fingerprints to scan said network or networks from time to time to gather attributes, each said scan after a first scan being referred to as a subsequent scan;

H) using said signature data sets and signature data set matching rules to compare each said signature data set to attributes gathered in each subsequent scan so as to ascertain whether said asset to which said signature data set pertains still exists and is coupled to said network or networks and so as to prevent double counting of said asset in inventory thereby providing the ability to track assets in inventory over time including changes therein.

2. The method of claim 1 further comprising:

using weighted partial fingerprint matching rules in steps C and D to compare collected attributes to said fingerprints to draw conclusions as to whether an instance of a type of asset identified by said fingerprint has been found or not, said weighted matching rules finding matches if one or more predetermined more heavily weighted attributes in a fingerprint match attributes found in steps B, C and D;

wherein step H is carried out by matching each said stored signature data set for an instance an asset against said plurality of attributes fetched in said subsequent scan using full matching rules or partial signature data set matching rules in which matches on some attributes that were used to make up said signature data set are weighted more heavily than matches on other attributes that were used to make up said signature data set, and a match can be found if matches exist between one or more attributes in said signature data set which are more heavily weighted than other attributes in said signature data set and attributes collected on a said subsequent scan so as to determine if an instance of an asset which is found on a subsequent scan is the same instance of said asset as has been previously detected even if the attributes of said instance of said asset which were used to generate a signature data set for said instance of said asset have changed since said instance of said asset was last detected.

3. The method of claim 2 step H wherein some attributes used to generate said signature data set are weighted more heavily than other and wherein said partial signature data set matching rules are used in a process where matches on attributes which are more heavily weighted than other attributes can cause matches to be declared even when matches are not found for all the attributes which went into generating said signature data set for a particular instance of a type of asset.

4. The method of claim 2 wherein a history of signature data sets for an instance of an asset is maintained for querying and viewing.

5. The method of claim 2 wherein:

said signature data set comprises a multi-part stored data element representative of said instance of said asset to which said signature data set applies and its attributes.

6. The method of claim 1 wherein step B comprises using fingerprints at a first level of a hierarchical fingerprint tree to determine what type of operating system is controlling a computer asset which coupled to said responding address or what other type of asset is located at each responding address, and then using further fingerprints nested under the fingerprint at said first level which successfully identified the type of operating system or asset at said responding address to identify further attributes which exist for said asset coupled to said responding address.

7. The method of claim 6 wherein step C further comprises the steps:

assigning weighing factors to one or more of said attributes in at least some of said fingerprints;

using said weighing factors in any fingerprint with weighted attributes in said matching process of step C such that partial matches on some attributes which are more heavily weighted than other attributes will cause a match to be found even though there is not a match on all said attributes.

8. The method of claim 1 wherein step C further comprises the steps:

if said matching is a partial matching using a partial matching rule, updating said attribute data stored about an instance of an asset with any collected attribute data about said instance which is changed from attribute data previously stored about said asset, and if any attributes used in said signature data set are changed, updating said signature data set using said changed attribute data.

9. The method of claim 1 wherein said plurality of fingerprints are organized into a hierarchical tree with a top level being fingerprints which identify by their attributes all types of assets which said automatic inventory discovery system can recognize, and wherein steps A and B comprises the steps:

initializing a fingerprint search index at a position in said hierarchical tree of fingerprints which controls said automated inventory discovery system to determine if a network is present and using said fingerprint to determine if a network is present;

using fingerprints at a next level down in said hierarchical tree of fingerprints to determine what network interface cards are installed on said network and are responding;

using fingerprints at a next level down in said hierarchical tree of fingerprints to determine which operating systems are installed on devices coupled to said network through said network interface cards discovered previously;

using fingerprints at other levels down in said hierarchical tree of fingerprints to determine other attributes about devices coupled to said network through said network interface cards discovered previously using element IDs that are mapped to attribute IDs which are mapped to said collection instructions which are used to control said collection computer to collect said attributes;

and wherein said rules.

10. The method of claim 1 wherein steps G and H are carried out to gather attribute data on said subsequent scans and use both full and partial signature data set matching rules to determine if an instance of an asset has been found and counted in inventory before, said step of using both full and partial signature data set matching rules comprising first comparing attribute data collected on said subsequent scan using a full signature data set matching rule which requires all attributes which went into generating said signature data set for an instance of an asset to exactly match attribute data collected on said subsequent scan, and, if an exact match does not exist, using a partial matching rule to compare said signature data set to attribute data collected on said subsequent scan and declaring a match if at least some of said attributes that went into making up said signature data set match attributes collected on said subsequent scan.

11. The method of claim 10 wherein said step of using a partial matching rule comprises the steps of comparing attributes of said signature data set to said attributes gathered during said subsequent scan, and declaring a match for the instance of said asset to which said signature data set applies if a predetermined number of attributes in said signature data set for said instance of said attribute match attributes collected on said subsequent scan.

12. The method of claim 10 wherein said step of using a partial matching rule comprises the steps of comparing attributes of said signature data set to said attributes gathered during said subsequent scan and declaring a match for the instance of said asset to which said signature data set applies if a predetermined number of attributes in said signature data set for said instance of said attribute match attributes collected on said subsequent scan, and further comprising:

detecting when said second plurality of characteristics varies from characteristics indicated by said signature data set;

updating said signature data set when said comparing indicates a difference.

13. The method of claim 10 wherein said step of using a partial matching rule comprises the steps of comparing attributes of said signature data set to said attributes of said subsequent scan and declaring a match for the instance of said asset to which said signature data set applies if a predetermined number of attributes in said signature data set for said instance of said attribute which are more heavily weighted than other attributes in said signature data set match attributes collected on said subsequent scan.

14. The method of claim 1 further comprising the steps:

determining if a particular asset detected in a previous scan was not detected again on a subsequent scan;

if an asset detected on a previous scan is not detected on a subsequent scan, searching attribute data detected on said subsequent scan to determine if the asset has been moved to or can be identified with another server;

if the asset has been moved to or can be identified with another server, updating automated inventory records accordingly; and

if the asset that disappeared cannot be located in the attribute data collected in said subsequent scan, removing said asset from said automated inventory records.

15. The method of claim 14 wherein steps A, B and C comprise the steps:

using fingerprints to determine the existence or non existence of one or more networks and addresses on said one or more networks which are responsive;

at each active address, using one or more fingerprints to determine a network card MAC address;

at each active address, using one or more fingerprints to determine a disk drive serial number; and

at each active address, using one or more fingerprints to determine the serial number of an operating system controlling a computer at said active address;

comparing said MAC address, said disk drive serial number and said operating system serial number, or some sub-combination of said MAC address, said disk drive serial number and said operating system serial number, hereafter referred to as “

basic attributes,”

gathered from an asset at a first active address against the basic attributes gathered from all assets which are responsive at said addresses on said one or more networks and determining if said basic attributes of said asset at said first active address matches the basic attributes of any asset previously discovered on any previous scan, and, if so, repeating the comparison process for basic attribute data gathered from an asset at another active address against basic attribute data of any asset previously discovered on any previous scan, and, if there is a match, repeating said comparison process for basic attribute data gathered from each said active address until all active addresses are exhausted, and if any basic attribute data does not match basic attribute data of any asset using all of said MAC address, said disk drive serial number and said operating system serial number or some sub-combination of said MAC address, said disk drive serial number and said operating system serial number, creating a new asset in said data repository storing records of assets found by said automatic inventory discovery system and the attributes thereof using at least said basic attribute data, and if there is a partial match on said basic attribute data at any active address and basic attribute data of any device previously discovered, updating basic attribute data for said previously discovered asset with whatever basic attribute data has changed using the latest values thereof.

16. The method of claim 1 wherein said attributes which define said signature data set of each instance of a computer type asset comprise two or more of:

a network adaptor card serial number;

an Ethernet MAC (Media Access Control) address;

a CUP serial number;

an operating system identification/registration number;

a CPU clock speed;

installed memory identifications; and

installed hard disk drive identifications.

17. The method of claim 1 wherein step H is performed by:

comparing separable portions of said signature data set to collected attribute data from each instance of an asset such that a match of attributes from said instance of an asset to a majority of said separable portions of said signature data set indicates a match for an instance of an asset found by said automated inventory discovery system to an instance of an asset whose attributes are stored in said data repository and which is associated with said signature data set.

18. The method of claim 1 wherein step E is carried out by generating a set of integer values as said signature data set by mathematically deriving said integer values from said attributes of said instance of said asset with which said signature data set is associated.

19. The method of claim 1 wherein steps A and B include the steps:

using fingerprints arranged in hierarchical order to determine whether a network exists, and, if a network exists, which addresses on said network are responding, and, at each responding address, what type of asset is responding and what operating system, if any, controls said asset and

using information gathered regarding said type of asset at each responding address and the operating system, if any, controlling said asset to control the selection of further fingerprints to control the type of attributes fetched and the manner in which said attributes are fetched and matched against other attributes gathered on previous scans, if any.

20. The method of claim 1 wherein step E is carried out by generating said signature data set for each instance of an asset from un-correlated attributes of said instance of said asset where un-correlated attributes mean attributes that are independent of each other such that when one attribute used to generate said signature data set changes, the other attributes used to generate said signature data set do not also change.

21. An automated inventory discovery apparatus able to uniquely identify multiple assets coupled to the networks of an entity comprising:

a computer executing a query process able to determine the existence of one or more networks and determine addresses on said networks which are responding and request and receive from devices at said responding addresses data defining attributes of multiple assets coupled to said network(s) at said responding addresses, said attributes characterizing each said asset, said query process using one or more fingerprints from a plurality of fingerprints to determine the type of asset present at each said responding address, and the operating system, if any, controlling each said asset, said determination being made from attributes gathered from each said responding address, each fingerprint providing a definition of a type of asset which can be recognized by said automated inventory discovery system, said definition provided in each said fingerprint by inclusion of a list of attributes assets of the type associated with said fingerprint will have, each attribute listed in said fingerprint definition either including a collection instruction or pointing to a file containing a collection instruction which is used to control a collection computer to rather said attribute from an asset at said responding address;

a computer programmed to use a matching process comprised of using one or more complete and/or partial matching rules to compare attributes collected from each said responding address to attributes listed in said fingerprint, and draw a conclusion as to the existence or non existence at said responding address of an asset of the type defined by said fingerprint, and making an entry in a data repository storing records for all assets found by said automated inventory discovery system and their attributes for each attribute found, and if a partial match indicates an asset previously found is present but one or more of its attributes have changed, updating any changed attributes for said asset in said data repository;

a computer executing a signature data set generation process which generates from attributes collected from each instance of an asset found by said one or more computers executing said query and matching processes a unique signature data set for storage and association with said instance of said assets;

a computer executing a signature data comparison process which gathers attribute data from multiple assets coupled to said one or more networks in multiple subsequent scans and compares said gathered attributes using full matching rules, and, if no full match is found, using partial matching rules to compare signature data sets for assets which have previously been found and recorded with their attributes in said data repository to attributes collected during said multiple subsequent scans so as to determine, by virtue of full or partial matches between said gathered attributes and said signature data sets, which assets whose attributes were collected in one or more of said subsequent scans are assets which have been previously counted by said automated inventory discovery apparatus.

22. The system of claim 21 wherein said signature data comparison process includes:

a partial matching process which is carried out for each particular instance of an asset when there does not exist a full match between attributes gathered on a subsequent scan and attributes of said signature data set, said partial matching process using partial matching rules which declare a match when at least some of said attributes gathered from a device on a subsequent scan match attributes which are part of a signature data set associated with a previously discovered asset and which are more heavily weighted than other attributes in said signature data set.

23. A computer readable medium which is any volatile or nonvolatile memory capable of storing computer executable instructions, said computer readable medium storing computer executable instructions which, when executed, control said computer to perform the following process:

A) using a computer programmed by an automatic inventory discovery system to probe one or more networks to which assets used by an entity are coupled to detect responding addresses;

B) for each responding address, using a fingerprint from a plurality of fingerprints to determine the type of asset present at said responding address, said determination being made by attributes gathered from said responding address, each fingerprint providing a definition of a type of asset which can be recognized by said automated inventory discovery system, said definition provided in each said fingerprint by inclusion of a list of attributes said asset can have, each attribute listed in said fingerprint definition either including a collection instruction or pointing to a file containing a collection instruction which can control a collection computer to gather said attribute from a device at said responding address;

C) using one or more complete or partial matching rules to compare attributes collected from said responding address to attributes listed in said fingerprint, and drawing a conclusion as to the existence or non existence at said responding address of an asset of the type defined by said fingerprint and making an entry in a data repository storing records for all assets found by said automated inventory discovery system and their attributes for each attribute found, and if a partial match indicates an asset previously found is present but one or more of its attributes have changed, updating any changed attributes for said asset in said data repository;

D) repeating the process of using fingerprints in said plurality of fingerprints so as to discover as many assets coupled to said one or more networks as possible and make entries therefor in said data repository so as to build in said data repository an inventory of particular instances of assets of all the types which can be recognized using said fingerprints;

E) using attributes gathered about each instance of an asset to create a unique signature data set for said instance of said asset, said signature data set being unique to said particular asset, which means that said signature data set for each particular instance of a type of asset can be used to identify said particular instance of said asset when attribute data about said particular asset is fetched again in subsequent scans of said one or more networks;

F) storing said signature data set;

G) repeating the process of scanning said network or networks using said plurality of fingerprints from time to time to gather attributes, each said scan after a first scan being referred to as a subsequent scan;

H) using said signature data sets and full and partial signature data set matching rules to compare each said signature data set to attributes gathered in each subsequent scan so as to ascertain whether said asset to which said signature data set pertains still exists and is coupled to said network or networks and so as to prevent double counting of said asset in inventory thereby providing the ability to track assets in inventory over time including changes therein.

24. A computer readable medium which is any volatile or nonvolatile memory capable of storing computer executable instructions and storing computer executable instructions that when executed by a computer cause said computer to perform the process of claim 23 to generate a signature data set for each instance of a plurality of assets coupled to said one or more networks, and further performing the following steps:

using weighted partial matching rules in steps C and D to compare collected attributes to attributes in said fingerprints to draw conclusions as to whether an instance of an asset type identified by said fingerprint has been found or not, said weighted partial matching rules finding matches if one or more predetermined more heavily weighted attributes in a fingerprint match attributes found in a scan of said one or more networks;

and

wherein step H is carried out by matching each said stored signature data set for an instance an asset against said plurality of attributes fetched in a subsequent scan using full matching rules to compare attributes collected in a subsequent scan to each signature data set for each instance of an asset previously found, and, if for any particular instance of an asset there is not a full match to said signature data set stored for said instance of an asset, using one or more partial matching rules in which matches on predetermined attributes are weighted more heavily than matches on other attributes, and a match will be found if one or more of said more heavily weighted attributes in said signature data set match attribute data collected on said subsequent scan, said match being a declaration that an instance of an asset which is found on a subsequent scan is the same instance of said asset as has been previously detected even if some attributes of said instance of said asset have changed.