Method and apparatus for managing a peer-to-peer collaboration system

• US 7,546,359 B2
• Filed: 10/24/2001
• Issued: 06/09/2009
• Est. Priority Date: 10/24/2001
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Groove Networks, Inc. (Microsoft Corporation)
• Inventors: Tierney, William D., Moore, Kenneth G.
• Primary Examiner(s): Donaghue; Larry D
• Assistant Examiner(s): Tang; Karen C
• Application Number:
  US10/036,275
• Publication Number:
  US 20030236820A1
• Time in Patent Office: 2,785 Days
• Field of Search: 709/203, 709/217, 709/219, 709/205, 709/204, 709/207, 709/223, 709/206, 709/229, 726/26, 705/59
• US Class Current: 709/223
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1085 Content sharing, e.g. peer-to-peer [P2P]
• CPC Class Codes: G06F 21/1087 Synchronisation
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Users and devices in a peer-to-peer collaboration system can join a management domain in which members are administered as a group by a centralized management server operated by an enterprise. In response to a administrator request to join the management domain, the user downloads an injectible identity file containing a definition of the managed user/device into the user system. The user then joins the managed domain by associating the injected identity with their actual identity. Once a user or device is part of a management domain, that user or device receives license rights and policy restrictions that are associated with the domain. In return, the management server interacts with the individual peer-to-peer collaboration systems to enable the enterprise to monitor the usage of, and control the behavior of, that specific identity within the peer-to-peer collaboration system.

Claims

1. A method for managing a peer-to-peer collaboration system, the method comprising:

(a) using client software operating in a first device and client software operating in a second device to connect a first user of the first device to a second user of the second device in a peer-to-peer collaboration session including the first user and second user, the first user having a first collaboration identity in a shared space and the second user having a second collaboration identity in the shared space;

(b) downloading from a management server to the client software operating in the first device a definition file containing a definition of a managed entity;

(c) associating a management identity in the definition file with the first collaboration identity or first device information in the client software operating in the first device in order to create the managed entity, the management identity associated with the managed entity being different than the first collaboration identity, the management identity allowing the first user or the first device to be identified by the management server, wherein said associating comprises incorporating information from the definition file into another file stored on the first device, wherein the definition file is an operating system registry file, and the another file is a portion of a system registry on the first device;

(d) interacting, between the management server and the client software operating in the first device using the management identity, to exchange management information associated with operation of the managed entity in the peer-to-peer collaboration session separately from collaborative information exchanged between the first user and the second user, wherein the management information exchanged comprises at least a policy restriction file, wherein said interacting further comprises steps;

i) creating a client list of policy restrictions in the client software operating in the first device of the managed entity;

ii) sending the client list of policy restrictions to the management server;

iii) creating a server list of policy restrictions in the management server;

iv) comparing the client list of policy restrictions to the server list of policy restrictions; and

v) adjusting and synchronizing the client list of policy restrictions in the client software operating in the first device based on the comparison on step iv);

wherein the steps i) to v) are repeated; and

(e) in response to information in the policy restriction file, restricting at least one function in the client software.

2. The method of claim 1 wherein the managed entity is a managed user, the definition file is an injectible identity file, and the another file on the first device is a user account file.

3. The method of claim 1 wherein the managed entity is a managed device and the definition file is a device information file.

4. The method of claim 1, wherein the management information exchanged is a license file and said interacting comprises in response to information in the license file, enabling at least one function in the client software.

5. The method of claim 1, wherein the management information comprises event notifications and statistical information and said interacting to exchange the management information comprises:

i) periodically sending the event notifications and the statistical information from the client software operating in the first device of the managed entity to the management server.

6. The method of claim 5 wherein the event notifications include error notifications.

7. The method of claim 5 wherein the event notifications and the statistical information are temporarily stored in a memory located at a client site.

8. Apparatus comprising a computer adapted to operate within a managed peer-to-peer collaboration system, the computer being a first device and the managed peer-to-peer collaboration system comprising a second device, the apparatus comprising:

client software recorded on computer storage media in the first device, the software when operated, connecting a first user of the first device to a second user in a peer-to-peer collaboration session including the first and second users, the first user having a first collaboration identity in a shared space and the second user having a second collaboration identity in the shared space;

a download manager that downloads from a management server to the client software operating in the first device a definition file containing a definition of the identity of a managed entity, wherein the definition file is an operating system registry file;

a mechanism in the client software that associates the definition with the first collaboration identity or first device information in order to create the managed entity, the management identity associated with the managed entity being different than the first collaboration identity, the management identity allowing the first user or the first device to be identified by the management server, wherein associating comprises incorporating the definition of the identity of the managed entity into another file stored on the first device, the another file being a portion of a system registry on the first device; and

a mechanism that exchanges management information relating to the managed entity between the client software operating in the first device and the management server using the management identity, the management information relating to monitoring operation of the managed entity and/or synchronizing the managed entity with information on the management server, the management information exchanged being associated with the identity of the managed entity, wherein;

the management information exchanged comprises at least a policy restriction file, wherein the policy restriction file comprises a list of policy restrictions in the client software operating in the first device or a list of policy restrictions in the management server;

the exchange of management information is repeated; and

the apparatus is adapted to, in response to information in the policy restriction file, restrict at least one function in the client software.

9. The apparatus of claim 8 wherein the managed entity is a managed user and the definition file is an injectible identity file.

10. The apparatus of claim 8 wherein the managed entity is a managed device and the definition file is a device information file.

11. The apparatus of claim 10 wherein the device information file is a Windows REG file.

12. The apparatus of claim 8, wherein the mechanism that exchanges information comprises:

policy control software in the management server that sends at least one policy restriction file from the management server to the managed user; and

policy control software in the client software that, in response to information in the policy restriction file, restricts at least one function in the client software.

13. The apparatus of claim 8, wherein the mechanism that exchanges information comprises:

management software in the management server that creates a client list of policy restrictions in the client software of the managed user;

a transport mechanism that sends the client list to the management server;

management software in the client software that creates a server list of policy restrictions in the management server;

a mechanism that compares the client list to the server list; and

a mechanism that periodically adjusts and synchronizes the policy restrictions in the client software in cooperation with the comparison mechanism.

14. The apparatus of claim 8, wherein the mechanism that exchanges information comprises:

customer service management software that periodically sends event notifications and statistical information from the client software of the managed user to the management server.

15. The apparatus of claim 14 wherein the event notifications include error notifications.

16. The method of claim 14 wherein event notifications and statistical information are temporarily stored in a memory located at a client site.

17. The apparatus of claim 8, wherein:

the exchanged management information comprises a license file; and

the apparatus is adapted to, in response to information in the in the license file, enable at least one function in the client software.

18. The apparatus of claim 9, wherein the another file is a user account file.

19. At least one computer readable storage medium encoded with instructions, that are executable in a computer system to perform a method managing a peer-to-peer collaboration system, comprising acts of:

connecting a first user to a second user in a peer-to-peer collaboration session including the first and second users, the first user having a first collaboration identity in a shared space and the second user having a second collaboration identity in the shared space;

downloading from a management server to client software operating in the computer system a definition file containing a definition of a managed entity;

associating a management identity in the definition file with the first collaboration identity in the client software in order to create the managed entity, the management identity associated with the managed entity being different than the first collaboration identity, the management identity allowing the first user or the computer system to be identified by the management server, wherein associating comprises incorporating information from the definition file into another file stored on the computer system, wherein the definition file is an operating system registry file, and the another file is a portion of a system registry on the first device; and

interacting with the management server using the management identity to exchange management information relating to the managed entity within a collaboration session using the shared space, wherein the management information exchanged comprises at least a policy restriction file, and the interacting further comprises;

in response to information in the policy restriction file, restricting at least one function in the client software, wherein said interacting further comprises steps;

i) creating a client list of policy restrictions in the client software operating in the computer system of the managed entity;

ii) sending the client list of policy restrictions to the management server;

iii) creating a server list of policy restrictions in the management server;

iv) comparing the client list of policy restrictions to the server list of policy restrictions; and

v) adjusting and synchronizing the client list of policy restrictions in the client software operating on the computer system based on the comparison on step iv);

wherein the steps i) to v) are repeated.

20. The at least one computer readable storage medium of claim 19 wherein the managed entity is a managed user and the definition file is an injectible identity file.

21. The at least one computer readable storage medium of claim 19 wherein the managed entity is a managed device and the definition file is a device information file.

22. The at least one computer readable storage medium of claim 21 wherein the device information file is a Windows REG file.

23. The at least one computer readable storage medium of claim 19, wherein the program code for interacting comprises:

sending at least one policy restriction file from the management server to the managed user; and

responding to information in the policy restriction file for restricting at least one function in the client software.

24. The at least one computer readable storage medium of claim 19, wherein the program code for interacting comprises:

creating a client list of policy restrictions in the client software of the managed user;

sending the client list to the management server;

creating a server list of policy restrictions in the management server;

comparing the client list to the server list; and

cooperating with the comparing program code for adjusting and synchronizing the policy restrictions in the client software.

25. The at least one computer readable storage medium of claim 24 wherein the program code for adjusting and synchronizing the policy restrictions operates periodically.

26. The at least one computer readable storage medium of claim 19, wherein the program code for interacting comprises:

periodically sending event notifications and statistical information from the client software of the managed user to the management server.

27. The at least one computer readable storage medium of claim 26 wherein the event notifications include error notifications.

28. The at least one computer readable storage medium of claim 26 further comprising program code for temporarily storing event notifications and statistical information in a memory located at a client site.

29. The at least one computer readable storage medium of claim 19, wherein:

the exchanged management information comprises a license file; and

the interacting further comprises in response to information in the in the license file, enabling at least one function in the client software.

30. The at least one computer readable medium of claim 20, wherein the another file is a user account file.

31. Apparatus comprising a computer adapted to operate within a managed peer-to-peer collaboration system in which users having identities are directly connected to each other in a collaboration session using a shared space by client software operating in devices and wherein the users can communicate with a management server using the client software, the apparatus comprising:

means operable in devices for connecting a first user having a first collaboration identity in the shared space to a second user having a second collaboration identity in the shared space in a peer-to-peer collaboration session including the first and second users;

means for downloading from a management server to the client software a definition file containing a definition of the identity of the managed entity;

means in the client software for associating the identity of the managed entity with the first collaboration identity or first device information in the client software in order to create the managed entity, the management identity associated with the managed entity being different than the first collaboration identity, the management identity allowing the first user or the first device to be identified by the management server, wherein associating comprises incorporating the definition of the identity of the managed entity into another file on the first device, wherein the definition file is an operating system registry file, and the another file is a portion of a system registry on the first device;

means for exchanging management information associated with the managed entity using the management identity, the management information relating to the collaboration session, and the management information being exchanged between the client software operating in the first device and the management server, and the management information identifying an entity to which the information relates using the identity of the managed entity, wherein;

the management information exchanged comprises at least a policy restriction file, wherein the policy restriction file comprises a list of policy restrictions in the client software operating in the first device or a list of policy restrictions in the management server;

the exchange of management information is repeated; and

means for restricting at least one function in the client software in response to information in the policy restriction file.

32. The apparatus of claim 31 wherein the managed entity is a managed user and the definition file is an injectible identity file.

33. The apparatus of claim 31 wherein the managed entity is a managed device and the definition file is a device information file.

34. The apparatus of claim 33 wherein the device information file is a Windows REG file.

35. The apparatus of claim 31, wherein the means for exchanging management information comprises:

means for sending at least one policy restriction file from the management server to the managed user; and

means responsive to information in the policy restriction file for restricting at least one function in the client software.

36. The apparatus of claim 31, wherein:

the exchanged management information comprises a license file; and

the apparatus further comprises means for enabling at least one function in the client software in response to information in the in the license file.

37. The apparatus of claim 32, wherein the another file is a user account file.