Dynamic identification and administration of networked clients

• US 7,568,018 B1
• Filed: 03/19/2004
• Issued: 07/28/2009
• Est. Priority Date: 03/19/2004
• Status: Active Grant

• Current Assignee: New Boundary Technologies Incorporated
• Original Assignee: New Boundary Technologies Incorporated
• Inventors: Harris, Emily J. D., Pickett, David A., Hove, James B.
• Primary Examiner(s): Donaghue; Larry D
• Assistant Examiner(s): Pollack; Melvin H
• Application Number:
  US10/805,173
• Time in Patent Office: 1,957 Days
• Field of Search: 709/203, 709220-224, 709/248, 709/249, 713/1, 713/2, 713/100, 717168-178, 715734-736, 715/748, 715/749, 707/10, 707/104.1, 707/203
• US Class Current: 709/221
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history

Abstract

The present inventive subject matter relates to networked computing environments and more specifically to dynamic identification and administration of networked clients. Various embodiments of the present inventive subject matter include systems and methods for defining, on a server, a configuration of interest comprising one or more potential properties of a client, communicating the configurations of interest over a network to one or more clients, dynamically evaluating a client state relative to the configurations of interest, and communicating a representation of the client state in relation to the configuration of interest to the server. Further embodiments include automatically creating and displaying associations of clients based on configurations of interest. Yet further embodiments include clients requesting and receiving updates to the configurations of interest. Still further embodiments include actions associated with configurations of interest. Such actions, in various embodiments, include performing administrative actions on various networked clients.

Claims

1. A system comprising:

a network administered by a network administrator, wherein the network includes at least one network administration server in communication with a plurality of client computers over which the network administrator has administrative responsibilities;

network administration software operative on the at least one network administration server to perform the following functions;

maintain a list of client computers over which the network administrator has administrative responsibilities;

define one or more configurations of interest, wherein the configurations of interests include a state of a configuration parameter of a client computer;

define and associate one of the configurations of interest with one or more actions to be taken, wherein the action includes at least updating software and one or more of;

installing a file, overwriting a file, removing a file, adding a registry setting, changing a registry setting, removing a registry setting, and modifying an operating system file permission;

distribute data to a plurality of the client computers selected from the list of client computers, wherein the data defines at least one of the configurations of interest; and

receive from each particular computer in the plurality of client computers a state of a configuration of the particular client computer relative to a configuration of interest distributed to the particular computer;

wherein, the plurality of client computers include at least one program operative on the plurality of client computers to;

receive the data defining the at least one configuration of interest;

store the at least one configuration of interest on the client computer;

repeatedly determine the state of the configuration of the client computer relative to the at least one configuration of interest;

report to the network administration server the state of the configuration of the client computer relative to the at least one configuration of interest;

repeatedly determine whether the state of the configuration of the client matches the at least one configuration of interest, and when the state of the configuration of the client matches the configuration of interest, determine whether at least one of the one or more actions to be taken associated with the at least one configuration of interest is a client-side action; and

automatically perform the client-side action associated with the at least one configuration of interest;

and further wherein the network administration software is further operative on the at least one network administration server to;

receive the reported state of the configuration of the plurality of client computers relative to the respective at least one configuration of interest;

record an indication of each state of the configuration of the plurality of client computers relative to the respective configurations of interest;

determine whether the reported state of the configuration of the plurality of client computers matches at least one of the distributed configurations of interest, and when the reported state of the configuration of at least one of the plurality of client computers changes with respect to at least one of the distributed configurations of interest, determine whether at least one of the one or more actions to be taken associated with the at least one of the distributed configurations of interest is a server-side action;

automatically perform the server-side action associated with the at least one of the distributed configurations of interest; and

provide at least one indication of one of the client computers with at least one of the configurations of interest.

2. The system of claim 1, wherein the at least one program operative on the plurality of client computers is further configured to:

periodically request from the network administration server at least one updated configuration of interest;

receive the at least one updated configuration of interest; and

reevaluate the state of the configuration of the client computer with respect to the at least one updated configuration of interest; and

report to the network administration server the state of the configuration of the client computer relative to the at least one updated configuration of interest.

3. The system of claim 1, wherein the network administration software is further operative to:

group client computers with similar configuration states in a display communicatively coupled to the network administration server; and

dynamically update the display as client computers change the state of configuration with respect to a distributed configuration of interest.

4. The system of claim 1, wherein the one or more configurations of interest are defined using a logical statement including a property identifier, a value, and a comparison operator, wherein the property identifier represents a client property to be evaluated locally on a client computer, the value is what the property identifier is to be compared to, and the comparison operator is how the property is to be compared to the value.

5. A system comprising:

a network administered by a network administrator, wherein the network includes at least one network administration server in communication with a plurality of client computers over which the network administrator has administrative responsibilities;

network administration software operative on the at least one network administration server to perform the following functions;

maintain a list of client computers over which the network administrator has administrative responsibilities;

define one or more configurations of interest, wherein the configurations of interests include a state of a configuration parameter of a client computer;

define and associate one of the configurations of interest with one or more actions to be taken;

distribute data to a plurality of the client computers selected from the list of client computers, wherein the data defines at least one of the configurations of interest; and

receive from each particular computer in the plurality of client computers a state of a configuration of the particular client computer relative to a configuration of interest distributed to the particular computer;

wherein, the plurality of client computers include at least one program operative on the plurality of client computers to;

receive the data defining the at least one configuration of interest;

store the at least one configuration of interest on the client computer;

repeatedly determine the state of the configuration of the client computer relative to the at least one configuration of interest;

report to the network administration server the state of the configuration of the client computer relative to the at least one configuration of interest;

repeatedly determine whether the state of the configuration of the client matches the at least one configuration of interest, and when the state of the configuration of the client matches the configuration of interest, determine whether at least one of the one or more actions to be taken associated with the at least one configuration of interest is a client-side action; and

automatically perform the client-side action associated with the at least one configuration of interest;

and further wherein the network administration software is further operative on the at least one network administration server to;

receive the reported state of the configuration of the plurality of client computers relative to the respective at least one configuration of interest;

record an indication of each state of the configuration of the plurality of client computers relative to the respective configurations of interest;

determine whether the reported state of the configuration of the plurality of client computers matches at least one of the distributed configurations of interest, and when the reported state of the configuration of at least one of the plurality of client computers changes with respect to at least one of the distributed configurations of interest, determine whether at least one of the one or more actions to be taken associated with the at least one of the distributed configurations of interest is a server-side action;

automatically perform the server-side action associated with the at least one of the distributed configurations of interest; and

provide at least one indication of one of the client computers with at least one of the configurations of interest.

6. The system of claim 5, wherein the at least one program operative on the plurality of client computers is further configured to:

periodically request from the network administration server at least one updated configuration of interest;

receive the at least one updated configuration of interest; and

reevaluate the state of the configuration of the client computer with respect to the at least one updated configuration of interest; and

report to the network administration server the state of the configuration of the client computer relative to the at least one updated configuration of interest.

7. The system of claim 5, wherein the network administration software is further operative to:

group client computers with similar configuration states in a display communicatively coupled to the network administration server; and

dynamically update the display as client computers change the state of configuration with respect to a distributed configuration of interest.

8. The system of claim 5, wherein the one or more configurations of interest are defined using a logical statement including a property identifier, a value, and a comparison operator, wherein the property identifier represents a client property to be evaluated locally on a client computer, the value is what the property identifier is to be compared to, and the comparison operator is how the property is to be compared to the value.

9. The system of claim 5, wherein the actions associated with the configurations of interest include at least updating software and one or more of:

installing a file, overwriting a file, removing a file, adding a registry setting, changing a registry setting, removing a registry setting, and modifying an operating system file permission.

10. A method of administering a computer network, the computer network administered by a network administrator, and the computer network including at least one network administration server in communication with a plurality of client computers over which the network administrator has administrative responsibilities, the method comprising:

at the at least one network administration server;

maintaining a list of client computers over which the network administrator has administrative responsibilities;

defining one or more configurations of interest, wherein the configurations of interests include a state of a configuration parameter of a client computer;

defining and associating one of the configurations of interest with one or more actions to be taken, wherein the action includes at least updating software and one or more of;

installing a file, overwriting a file, removing a file, adding a registry setting, changing a registry setting, removing a registry setting, and modifying an operating system file permission;

distributing data to a plurality of the client computers selected from the list of client computers, wherein the data defines at least one of the configurations of interest; and

receiving from each particular computer in the plurality of client computers a state of a configuration of the particular client computer relative to a configuration of interest distributed to the particular computer.

11. The method of claim 10, further comprising:

at the plurality of client computers;

receiving the data defining the at least one configuration of interest;

storing the at least one configuration of interest on the client computer;

repeatedly determining the state of the configuration of the client computer relative to the at least one configuration of interest;

reporting to the network administration server the state of the configuration of the client computer relative to the at least one configuration of interest;

repeatedly determining whether the state of the configuration of the client matches the at least one configuration of interest, and when the state of the configuration of the client matches the configuration of interest, determining whether at least one of the one or more actions to be taken associated with the at least one configuration of interest is a client-side action; and

automatically performing the client-side action associated with the at least one configuration of interest.

12. The method of claim 11, further comprising:

at the at least one network administration server;

receiving the reported state of the configuration of the plurality of client computers relative to the respective at least one configuration of interest;

recording an indication of each state of the configuration of the plurality of client computers relative to the respective configurations of interest;

determining whether the reported state of the configuration of the plurality of client computers matches at least one of the distributed configurations of interest, and when the reported state of the configuration of at least one of the plurality of client computers changes with respect to at least one of the distributed configurations of interest, determining whether at least one of the one or more actions to be taken associated with the at least one of the distributed configurations of interest is a server-side action;

automatically performing the server-side action associated with the at least one of the distributed configurations of interest; and

providing at least one indication of one of the client computers with at least one of the configurations of interest.

13. The method of claim 10, further comprising:

at the plurality of client computers;

periodically requesting from the network administration server at least one updated configuration of interest;

receiving the at least one updated configuration of interest; and

reevaluating the state of the configuration of the client computer with respect to the at least one updated configuration of interest; and

reporting to the network administration server the state of the configuration of the client computer relative to the at least one updated configuration of interest.

14. The method of claim 10, further comprising:

at the at least one network administration server;

grouping client computers with similar configuration states in a display communicatively coupled to the network administration server; and

dynamically updating the display as client computers change the state of configuration with respect to a distributed configuration of interest.

15. The method of claim 10, wherein the one or more configurations of interest are defined using a logical statement including a client property, a value, and a comparison operator, and further comprising comparing the property identifier with the value using the comparison operator.