Using disassociated images for computer and storage resource management

• US 7,565,495 B2
• Filed: 04/02/2003
• Issued: 07/21/2009
• Est. Priority Date: 04/03/2002
• Status: Active Grant

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Kleinschnitz, Donald Jr., Whatcott, Roland D., Arbon, Val A.
• Primary Examiner(s): TSAI, SHENG JEN
• Application Number:
  US10/406,139
• Publication Number:
  US 20030191911A1
• Time in Patent Office: 2,302 Days
• Field of Search: 711/154, 711/161, 711/162, 709/217
• US Class Current: 711/154
• CPC Class Codes: G06F 11/1417 Boot up procedures
• CPC Class Codes: G06F 16/20 of structured data, e.g. relational data
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order

Abstract

The present invention provides tools and techniques for facilitating (314) management of storage (122), software (118), and other resources of a computer (102) at a distinct management computer (110) using a disassociated ample image (104) of the managed computer'"'"'s storage. Ample images may be searched (310) to identify (414) infected files or illegal files, to extract (410) disk usage information, or for other reasons. Ample images may be modified (312) and then deployed (316) back to the original imaged computer and/or to other computers outside the management node. Modifications may change (502, 504, 506) application software, change (508, 510, 512) hardware drivers to match hardware changes on the target computer(s), manipulate (520) partitions, and/or perform other steps to optimize storage, software, or other resources.

Claims

1. A method of computer resource management, comprising:

receiving, at a management node that comprises at least one management computer, at least one ample image captured from an existing computer;

obtaining at the management node meta-data that is structurally associated with the ample image;

indexing the ample image within a plurality of ample images such that the ample image can be located by using at least part of the meta-data as a key;

mounting the ample image within a management environment at the management node, the management environment providing at least the ability to perform at least one file system operation to read files and directories;

identifying a suspect file within the ample image;

tracking, by searching the plurality of ample images, propagation of the suspect file; and

upon identifying the suspect file, repairing at least a portion of the ample image such that the resulting, modified, ample image reflects a different data state, different software state, different operating system environment, or different hardware operating environment than that which existed on the existing computer at the time the image was captured.

2. The method of claim 1, wherein the method further comprises deploying the modified ample image to at least one of:

the existing computer, another computer that is distinct from the management node.

3. The method of claim 1, further comprising modifying the ample image.

4. The method of claim 2, wherein modifying the ample image further comprises performing at least one of the following steps on the ample image in the management environment:

installing an application, updating an application, removing an application, installing a hardware driver, updating a hardware driver, removing a hardware driver, installing system software other than a hardware driver, updating system software other than a hardware driver, removing system software other than a hardware driver, wherein removing a piece of software is done by uninstalling, overwriting, disabling, and/or deleting that software and removing is directed specifically at that software rather than the entire image.

5. The method of claim 2, wherein modifying the ample image further comprises performing at least one of the following steps on the ample image in the management environment:

creating a partition, resizing a partition, resizing clusters of a partition, moving a partition, moving data between partitions, canonizing a partition, deleting a partition, merging two partitions, manipulating a volume segment.

6. The method of claim 1, wherein repairing at least a portion of the ample image comprises performing at least one of the following steps on the ample image in the management environment:

defragmenting files, reclaiming directory space in a partition, recovering data despite corrupted or lost file system information.

7. The method of claim 1, wherein the method further comprises modifying the metadata to reflect a modification of the ample image.

8. The method of claim 1, wherein the method comprises searching the ample image and performing at least one of the following steps on the ample image in the management environment:

extracting disk usage information, determining whether a particular file is present, determining whether at least one file of a particular type is present, determining billing for storage usage.

9. The method of claim 1, wherein repairing at least a portion of the ample image comprises performing at least one of the following pairs of steps on the ample image in the management environment:

detecting a virus and then quarantining or repairing an infected file, detecting a virus and then removing an infected file, identifying an illegal file and then removing the illegal file, identifying a breach of a policy that defines standardized storage locations for particular types of data and then moving or removing data to enforce that policy.

10. The method of claim 1, wherein tracking propagation of the suspect file comprises at least one of:

tracking propagation of the suspect file over time using ample images of a particular existing computer that were captured at different points in time, tracking propagation of the suspect file over multiple computers using ample images of multiple existing computers.

11. The method of claim 1, wherein mounting the ample image comprises mounting the ample image into a file system that is running on a management node computer.

12. The method of claim 1, wherein receiving at a management node at least one ample image captured from an existing computer comprises receiving an image of an entire disk of the existing computer.

13. The method of claim 1, wherein indexing the ample image within a plurality of ample images such that the ample image can be located by using at least part of the meta-data as a key comprises indexing by at least one of:

a user name, a computer name, an image creation time, an IP address, a value identifying installed hardware, a value identifying installed operating system type, a value identifying an installed application, a value given in a registry file of the existing computer.

14. The method of claim 1, wherein at least one facilitating step is performed in response to a script of batch-mode user commands.

15. The method of claim 1, wherein at least one facilitating step is performed in response to a policy specified on a computer-readable medium in a computer-parseable form.

16. The method of claim 1, wherein the suspect file comprises:

an infected file;

an illegal file.

17. A computer-readable storage medium configured to cause at least one management node computer to perform a method of computer resource management, the method comprising the steps of:

receiving, at a management node computer, at least one ample image captured from an existing computer;

obtaining at the management node meta-data that is structurally associated with the ample image;

indexing the ample image within a plurality of ample images such that the ample image can be located by using at least part of the meta-data as a key;

identifying a suspect file within the ample image;

tracking, by searching the plurality of ample images, propagation of the suspect file;

upon identifying the suspect file, repairing at least a portion of the ample image in the management environment such that the resulting, modified, ample image reflects a different data state, different software state, different operating system environment, or different hardware operating environment than that which existed on the existing computer at the time the image was captured; and

sending the modified ample image from the management node to be installed on at least one computer that is not in the management node.

18. The configured medium of claim 17, wherein the method further comprises modifying the ample image by performing at least one of the following steps on the ample image:

installing software, updating software, removing software, wherein removing a piece of software is done by uninstalling, overwriting, disabling, and/or deleting that software, and removing is directed specifically at that software rather than the entire image.

19. The configured medium of claim 18, wherein modifying the ample image further comprises performing at least one of the following steps on the ample image:

modifying the partition table, resizing a partition, resizing clusters of a partition, moving data between partitions, canonizing a partition, deleting a partition, merging two partitions, manipulating a volume segment.

20. The configured medium of claim 17, wherein repairing at least a portion of the ample image comprises performing at least one of the following steps on the ample image:

defragmenting files, reclaiming directory space in a partition, recovering data despite corrupted or lost file system information, quarantining an infected file, repairing an infected file, removing an infected file, removing an illegal file.

21. The configured medium of claim 17, wherein the method further comprises modifying the meta-data to reflect a modification of the ample image.

22. The configured medium of claim 17, wherein the method further comprises searching the ample image.

33. The method of claim 17, wherein the suspect file comprises:

an infected file;

an illegal file.

23. A system for computer resource management, comprising:

a management node that includes at least one management computer;

an indexing component that indexes ample images within a plurality of ample images such that a given ample image captured from an existing computer can be located by using meta-data as a key;

a management environment at the management node, the management environment providing at least the ability to perform at least one file system operation to read files and directories, and the management environment providing access to the ample image such that within the management environment the ample image appears as a standard, mounted, directory, volume, partition, or disc;

a searching tool for;

identifying a suspect file within the ample image;

tracking, by searching the plurality of ample images, propagation of the suspect file; and

a modifying tool for repairing, upon identification of the suspect file, at least a portion of the ample image within the management environment such that the resulting, modified, ample image reflects a different data state, different software state, different operating system environment, or different hardware operating environment than that which existed on the existing computer at the time the image was captured.

24. The computer resource management system of claim 23, wherein the suspect file comprises:

an infected file;

an illegal file.

25. The computer resource management system of claim 23, further comprising code for modifying the meta-data to reflect a modification of the ample image.

26. The computer resource management system of claim 23, further comprising a deploying tool for deploying an ample image from the management environment to at least one computer not in the management node.

27. The computer resource management system of claim 23, wherein the modifying tool is capable of modifying the ample image by performing at least one of the following steps on the ample image in the management environment:

creating a file, installing a file, updating a file, removing a file, and wherein removing a file containing software is done by uninstalling, overwriting, disabling, and/or deleting that software, and removing a file is directed specifically at that file rather than the entire image.

28. The computer resource management system of claim 23, wherein the modifying tool is capable of repairing at least a portion of the ample image by performing at least one of the following steps on the ample image in the management environment:

defragmenting files, reclaiming directory space, recovering data despite corrupted or lost file system information.

29. The computer resource management system of claim 23, wherein the searching tool identifies and tracks propagation of the suspect file by at least one of:

tracking propagation of the suspect file over time using ample images of a particular existing computer that were captured at different points in time;

tracking propagation of the suspect file over multiple computers using ample images of multiple existing computers.

30. The computer resource management system of claim 23, wherein the management environment comprises a driver capable of mounting the ample image into a file system that is running on a management node computer.

31. The computer resource management system of claim 23, wherein the management environment comprises a virtual environment that simulates storage-related characteristics of the existing computer.

32. The computer resource management system of claim 23, further comprising a command interpreter that processes a script of batch-mode user commands.

34. A method for managing computer resources, comprising:

receiving, at a management node that comprises at least one management computer, at least one ample image captured from an existing computer;

identifying, at the management node, meta-data associated with the ample image;

indexing the ample image within a plurality of ample images based on the meta-data associated with the ample image;

mounting the ample image to the management node;

identifying a suspect file within the ample image;

tracking, by searching the plurality of ample images, propagation of the suspect file; and

upon identifying the suspect file, repairing, using the management node, at least a portion of the ample image captured from the existing computer.

35. The method of claim 34, wherein the suspect file comprises:

an infected file;

an illegal file.