System and method for managing and communicating software updates

• US 7,574,706 B2
• Filed: 12/15/2003
• Issued: 08/11/2009
• Est. Priority Date: 12/15/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Meulemans, Michael Edward, Showman, Ken, Mohammed, Mazhar, Dadzie, Joseph G., Averbuch, Aaron, Roberts, Jason
• Primary Examiner(s): Vo; Ted T
• Assistant Examiner(s): Rampuria; Satish
• Application Number:
  US10/737,708
• Publication Number:
  US 20050132348A1
• Time in Patent Office: 2,066 Days
• Field of Search: 717168-178, 717138-167
• US Class Current: 717/174
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A system and method for facilitating the selection and implementation of software updates while minimizing the bandwidth and processing resources required to select and implement the software updates. In one embodiment, an update service controls access to software updates, or other types of software, stored on a server.

Claims

1. In a computer system including a client computing device in communication with a software update service, a method for communicating software updates from the software update service to the client computing device, the method comprising:

(a) obtaining a synchronization request from the client computing device to the software update service, wherein the synchronization request includes an identifier of an installed software update if the client computing device stores the installed software update and wherein obtaining the synchronization request includes obtaining an identifier of a failed software update in the synchronization request if the client computing device stores the failed software update;

(b) determining if the synchronization request comprises an identifier of at least one installed software update;

(c) if the synchronization request is determined to comprise an identifier of at least one installed software update, then selecting an additional software update for communication to the client computing device, wherein selecting the additional software update depends on fulfilling at least a first prerequisite defined in the additional software update, wherein the first prerequisite requires the synchronization request to include an identifier for at least one installed software update;

(d) if the synchronization request is determined to not comprise an identifier of at least one installed software update, then selecting a first level software update for communication to the client computing device, wherein the first level software update does not include a prerequisite;

(e) communicating an instruction component of the selected software update to the client computing device from the software update service, wherein the instruction component comprises at least one applicability rule, the at least one applicability rule defining a plurality of conditions required of the client computing device prior to installing the selected software update associated with the instruction component;

(f) storing the instruction component of the selected software update in the client computing device as an installed software update if the client computing device contains at least one component that fulfills all conditions of each applicability rule stored in the instruction component of the selected software update;

(g) storing the instruction component of the selected software update in the client computing device as a failed software update if the client computing device does not contain at least one component that fulfills at least one condition of an applicability rule stored in the instruction component of the selected software update; and

(h) communicating a localized data component of the selected software update from the software update service to the client computing device upon determining the instruction component indicates that the software update service contains no additional software updates available to the client computing device.

2. The method as recited in claim 1, wherein the method further comprises:

determining if at least one instruction component of the selected software update provides an indication that the software update service contains additional software updates available to the client computing device; and

repeating elements (a)-(f) when at least one instruction component of the selected software update is determined to provide an indication the software update service contains additional software updates available to the client computing device;

wherein communicating the localized data component of the selected software update from the software update service to the client computing device includes communicating the localized data component upon determining the instruction component indicates that the software update service contains no additional software updates available to the client computing device.

3. The method as recited in claim 2, wherein the method further comprises:

generating a display containing text derived from the communicated localized data component, wherein the text provides a description of the selected software update.

4. The method as recited in claim 3, wherein the method further comprises:

obtaining a command identifying a selected data file associated with the selected software update; and

in response to receiving the command, communicating the data file associated with the selected software update from the software update service to the client computing device.

5. The method as recited in claim 1, wherein the method further comprises:

determining if the client computing device stores the installed software update;

providing an identifier of the installed software update in the synchronization request if it is determined that the client computing device stores the installed software update.

6. The method as recited in claim 1, wherein the prerequisite defines a condition which requires a combination of software updates referenced in the synchronization request, wherein the condition is defined by at least one logical operator linking the combination of software updates.

7. The method as recited in claim 1, wherein the method further comprises:

restricting the communication of selected software updates related to any failed software update identified in the synchronization request.

8. The method as recited in claim 1, wherein the synchronization request is generated from an automatic update program module executing on the client computing device.

9. The method as recited in claim 1, wherein the synchronization request is invoked by a user requesting a manual update.

10. The method as recited in claim 1, wherein the selected software update is configured to update one or more files installed on the client computing device, wherein communicating the selected software update from the software update service to the client computing device comprises:

obtaining a self-extracting file identifying a plurality of available delta patches for updating at least one version of an installed file;

obtaining an inventory of the one or more files installed on the client computing device;

selecting one or more applicable delta patches to implement the selected software update, wherein selecting the one or more applicable delta patches corresponds to a mapping of the self-extracting file identifying the plurality of available delta patches to the inventory of the one or more files installed on the client computing device; and

transmitting a request for one or more of the selected delta patches.

11. In a computer system including a client computing device in communication with a software update service, a method for communicating software updates from the software update service to the client computing device, the method comprising:

obtaining an authorization request from the client computing device, wherein the authorization request contains an identifier of a client authorization module stored on the client computing device;

determining if the client computing device is associated with a target group, wherein the client computing device is determined to be associated with the target group if the client authorization module indicates that the client computing device is associated with the target group;

communicating a server cookie from the software update service to the client computing device if the client computing device is determined to be associated with the target group, wherein the server cookie identifies the target group;

obtaining a request for at least one software update stored on the software update service, wherein the request contains the server cookie, an identifier of any installed software update if the client computing device stores the installed software update, and an identifier of a failed software update if the client computing device stores the failed software update;

in response to obtaining the request for the at least one software update, determining if a software update is associated with the target group identified in the server cookie;

communicating the software update from the software update service to the client computing device if the software update is determined to be associated with the target group identified in the server cookie;

wherein the software update is a first level software update if the request is determined to not comprise an identifier of at least one installed software update, wherein the first level software update does not include a prerequisite; and

wherein the software update is an additional software update if the request is determined to comprise an identifier of at least one installed software update, wherein selecting the additional software update depends on fulfilling at least a first prerequisite defined in the additional software update, wherein the first prerequisite requires the synchronization request to include an identifier for at least one installed software update;

wherein communicating the software update includes communicating an instruction component of the software update, wherein the instruction component comprises at least one applicability rule, the at least one applicability rule defining a plurality of conditions required of the client computing device prior to installing the software update associated with the instruction component;

processing the instruction component of the software update to determine if the instruction component provides an indication that the software update service contains additional software updated available to the client computing device;

storing the instruction component of the software update in the client computing device as a failed software update if the client computing device does not contain at least one component that fulfills at least one condition of an applicability rule stored in the instruction component of the software update; and

communicating a localized data component of the software update from the software update service to the client computing device if the instruction component does not provide an indication that the software update service contains additional software updates available to the client computing device.

12. The method as recited in claim 11, wherein the authorization request includes data of a previously stored server cookie, and wherein the server cookie communicated from the software update service to the client computing device includes the data of the previously stored server cookie.

13. The method as recited in claim 11, wherein it is determined that the client computing device is associated with a target group if a server authorization module identifies the same target group identified in the client authorization module.

14. The method as recited in claim 11, wherein the server cookie comprises an expiration time, wherein the method further comprises:

determining if the expiration time of the server cookie has passed;

if the expiration time of the server cookie is determined to have passed, restricting the communication of the software update from the software update service to the client computing device.

15. The method as recited in claim 11, wherein the server cookie stores the expiration time in a clear text format and in an encrypted format, and wherein the server cookie contains encrypted data identifying at least one target group, wherein the method further comprises:

obtaining the expiration time from the server cookie, wherein the client computing device obtains the expiration time from the expiration time stored in the clear text format;

determining if the expiration time has not passed; and

if the expiration time is determined to have not passed, communicating the server cookie from the client computing device to the software update service in the request for at least one software update.

16. The method as recited in claim 11, wherein the authorization module is stored on the client computing device during an installation of a software application.

17. The method as recited in claim 11, wherein the authorization module is stored on the client computing device during an update process of a software application.

18. The method as recited in claim 11, wherein the method further comprises:

processing the localized data component for the selection of at least one update file for updating files installed on the client computing device.

19. The method as recited in claim 18, wherein processing the localized data component includes:

displaying data of the localized data component on a display of the client computing device, wherein the display includes a component for generating a request for a selected update; and

obtaining at least one request indicating the selection of at least one update file for updating files installed on the client computing device.

20. The method as recited in claim 11, wherein the server authorization module is a software plug-in configured to by dynamically added or removed from the software update service.

21. The method as recited in claim 11, wherein the request for at least one software update is generated from an automatic update program module executing on the client computing device.

22. The method as recited in claim 11, wherein the request for at least one software update is invoked by a user requesting a manual update.

23. The method as recited in claim 11, wherein the software update is configured to update one or more files installed on the client computing device, wherein communicating the software update from the software update service to the client computing device comprises:

obtaining a selection of one or more available software updates for updating one or more files installed on the client computing device;

obtaining a self-extracting file identifying a plurality of available delta patches for updating at least one version of an installed file;

obtaining an inventory of the one or more files installed on the client computing device;

selecting one or more applicable delta patches to implement the selected software updates, wherein selecting the one or more applicable patches corresponds to a mapping of the self-extracting file identifying the plurality of available delta patches to the inventory of the one or more files installed on the client computing device; and

transmitting a request for one or more of the selected delta patches.

24. In a computer system including a client computing device in communication with a server, a method for communicating a data structure from the server to the client computing device, the method comprising:

determining if the client computing device is associated with a target group, wherein the client computing device is determined to be associated with the target group if the client computing device contains an authorization module indicating that the client computing device is associated with the target group;

communicating a server cookie from the server to the client computing device if the client computing device is determined to be associated with the target group, wherein the server cookie identifies the target group;

obtaining a request for at least one data structure stored on the server, wherein the request contains the server cookie and wherein obtaining the request includes obtaining an identifier of a failed data structure if the client computing device stores the failed data structure;

in response to obtaining the request, determining if a data structure is associated with the target group identified in the server cookie;

communicating the data structure from the server to the client computing device if the data structure is determined to be associated with the target group identified in the server cookie;

wherein the data structure is a first level data structure if the request is determined to not comprise an identifier of at least one installed data structure, wherein the first level data structure does not include a prerequisite; and

wherein the data structure is an additional data structure if the request is determined to comprise an identifier of at least one installed data structure, wherein selecting the additional data structure depends on fulfilling at least a first prerequisite defined in the additional data structure, wherein the first prerequisite requires the synchronization request to include an identifier for at least one installed data structure;

including communicating an instruction component of the data structure, wherein the instruction component comprises at least one applicability rule, the at least one applicability rule defining a plurality of conditions required of the client computing device prior to installing the data structure associated with the instruction component;

processing the instruction component of the data structure to determine if the instruction component provides an indication that the server contains additional data structures available to the client computing device;

storing the instruction component of the data structure in the client computing device as a failed data structure if the client computing device does not contain at least one component that fulfills at least one condition of an applicability rule stored in the instruction component of the data structure; and

communicating a localized data component of the data structure from the server to the client computing device if the instruction component does not provide an indication that the server contains additional data structures available to the client computing device.

25. The method as recited in claim 24, wherein the method further comprises:

obtaining an authorization request from the client computing device, wherein the authorization request contains an identifier of the authorization module stored on the client computing device;

in response to obtaining the authorization request, determining if the client computing device is associated with a target group, wherein the client computing device is determined to be associated with the target group if the authorization request identifies at least one authorization module stored on the client computing that is associated with the target group.

26. The method as recited in claim 24, wherein the server cookie comprises an expiration time, wherein the method further comprises:

determining if the expiration time of the server cookie has passed;

if the expiration time of the server cookie is determined to have passed, restricting the communication of the data structure from the server to the client computing device.

27. The method as recited in claim 24, wherein the server cookie stores the expiration time in a clear text format and in an encrypted format, and wherein the server cookie contains encrypted data identifying at least one target group, wherein the method further comprises:

obtaining the expiration time from the server cookie, wherein the client computing device obtains the expiration time from the expiration time stored in the clear text format;

determining if the expiration time has not passed; and

if the expiration time is determined to have not passed, communicating the server cookie from the client computing device to the server in the request for at least one data structure.