System and method for remote administration of computer network

• US 8,024,450 B1
• Filed: 04/27/2011
• Issued: 09/20/2011
• Est. Priority Date: 12/30/2010
• Status: Active Grant

• Current Assignee: Kaspersky Lab ZAO
• Original Assignee: Kaspersky Lab ZAO
• Inventors: Shiyafetdinov, Damir R., Kulaga, Andrey A., Vasilyev, Sergey A.
• Primary Examiner(s): SERRAO, RANODHI N
• Application Number:
  US13/095,609
• Time in Patent Office: 146 Days
• Field of Search: 709/223, 709/227, 370/401
• US Class Current: 709/223
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 9/5044 considering hardware capabilities
• CPC Class Codes: H04L 41/044 comprising hierarchical management structures
• CPC Class Codes: H04L 43/0817 by checking functioning

Abstract

Disclosed are systems, methods and computer program products for remote administration of a computer network. The system comprises an administration server for remotely managing a computer network. The server deploys administration agents on the computers in the network for performing various administrative tasks. In addition, the server selects a computer with the highest performance rating as a local administration proxy for the network. The server then transmits to the local administration proxy a control signal for performing one or more administrative tasks by administration agents deployed on the computers in the network. The server then establishes, through the local administration proxy, a connection with the administration agents for performing administrative tasks of the computers.

Claims

1. A system for administration of a computer network, the system comprising:

a plurality of administration agents deployed on the computers in the network, wherein an administration agent being configured to;

collect configuration information from a computer on which it is deployed;

transmit the collected configuration information to a remote administration server for computing performance ratings of the computers based on the configuration information and selecting a local administration proxy for the network based on the performance rating; and

perform on the computer one or more administrative tasks specified by the remote administration server through a connection with the remote administration server;

the local administration proxy for the network, wherein the local administration proxy includes a computer with the highest performance rating in the computer network selected by the remote administration server based on the configuration information collected by the administration agents, wherein the local administration proxy being configured to;

receive from the remote administration server a control signal addressed to a computer in the network for performing one or more administrative tasks on said computer; and

in response to the control signal, establish the connection between the remote administration server and the administration agent deployed on said computer for the performing administrative tasks on said computer.

2. The system of claim 1, wherein in the event the local administration proxy fails to communicate with the remote administration server or with the computers in the network:

the administration agents are configured to select a computer with the second highest performance rating as a new local administration proxy for the network; and

the new local administration proxy is configured to notifying the remote administration server about selection of the new local administration proxy for the network.

3. The system of claim 2, wherein selecting a computer with the second highest performance rating comprises:

the administration agents exchanging broadcast messages containing information representing performance ratings of the computers in the network.

4. The system of claim 1, wherein the local administration proxy includes an administration agent configured to:

search for newly activated computers on the network;

deploy an administration agent on a newly activated computer;

collect configuration information from the administration agent; and

transmit the collected configuration information to the remote administration server for computing a performance rating of the newly activated computer based on the collected configuration information and selecting the newly activated computer as a new local administration proxy for the network if the performance rating of the newly activated computer is higher than the performance rating of the local administration proxy.

5. The system of claim 4, wherein searching for newly activated computers is performed using one of message broadcasting or ARP-spoofing on the network.

6. The system of claim 4, wherein the administration agent of the local administration proxy is further configured to:

receive the control signal from the remote administration server using User Datagram Protocol (UDP); and

establish the connection between the remote administration server and the administration agent deployed on said computer using Transmission Control Protocol (TCP).

7. The system of claim 1, wherein the computer network comprises a plurality of subnets, wherein each subnet includes a local administration proxy for the subnet.

8. A method for administration of a computer network, the method comprising:

deploying a plurality of administration agents on computers in the network;

collecting by the administration agents configuration information from the computers;

transmitting the collected configuration information to a remote administration server for computing performance ratings of the computers based on the collected configuration information and selecting a computer with the highest performance rating as a local administration proxy of the remote administration server for the computer network;

receiving, by the selected local administration proxy for the computer network, from the remote administration server a control signal addressed to a computer in the network for performing one or more administrative tasks on said computer, wherein the local administration proxy is a computer with the highest performance rating among the computers in the network;

in response to the control signal, establishing through the local administration proxy a connection between the remote administration server and the administration agent deployed on said computer for the performing administrative tasks on the computer; and

performing on said computer, by the administration agent, one or more administrative tasks specified by the remote administration server through the established connection.

9. The method of claim 8, wherein in the event the local administration proxy fails to communicate with the remote administration server or with the computers in the network:

selecting by the administration agents a computer with the second highest performance rating as a new local administration proxy for the network; and

notifying the remote administration server about selection of the new local administration proxy for the network.

10. The method of claim 9, wherein selecting a computer with the second highest performance rating comprises:

exchanging by the administration agents broadcast messages containing information representing performance ratings of the respective computers.

11. The method of claim 8, further comprises:

searching by the administration agent of the local administration proxy newly activated computers on the network;

deploying an administration agent on a newly activated computer;

collecting by the administration agent configuration information from the computer; and

transmitting the collected configuration information to the remote administration server for computing a performance rating of the newly activated computer based on the collected configuration information and selecting the newly activated computer as a new local administration proxy for the network if the performance rating of the newly activated computer is higher than the performance rating of the local administration proxy.

12. The method of claim 11, wherein searching for newly activated computers is performed using one of message broadcasting or ARP-spoofing on the network.

13. The method of claim 8, further comprises:

receiving, by the administration agent of the local administration proxy, the control signal from the remote administration server using User Datagram Protocol (UDP); and

establishing, by the administration agent of the local administration proxy, the connection between the remote administration server and the administration agent deployed on said computer using Transmission Control Protocol (TCP).

14. The method of claim 8, wherein the computer network comprises a plurality of subnets, wherein each subnet includes a local administration proxy for the subnet.

15. A computer program product embedded in a non-transitory computer-readable storage medium, the computer-readable storage medium comprising computer-executable instructions for administration of a computer network, the medium comprises instructions for:

deploying a plurality of administration agents on computers in the network;

collecting by the administration agents configuration information from the computers;

transmitting the collected configuration information to a remote administration server for computing performance ratings of the computers based on the collected configuration information and selecting a computer with the highest performance rating as a local administration proxy of the remote administration server for the computer network;

receiving, by the selected local administration proxy for the computer network, from the remote administration server a control signal addressed to a computer in the network for performing one or more administrative tasks on said computer, wherein the local administration proxy is a computer with the highest performance rating among the computers in the network;

in response to the control signal, establishing through the local administration proxy a connection between the remote administration server and the administration agent deployed on said computer for the performing administrative tasks on the computer; and

performing on said computer, by the administration agent, one or more administrative tasks specified by the remote administration server through the established connection.

16. The medium of claim 15, wherein in the event the local administration proxy fails to communicate with the remote administration server or with the computers in the network:

selecting by the administration agents a computer with the second highest performance rating as a new local administration proxy for the network; and

notifying the remote administration server about selection of the new local administration proxy for the network.

17. The medium of claim 16, wherein instructions for selecting a computer with the second highest performance rating comprises:

instructions for exchanging by the administration agents broadcast messages containing information representing performance ratings of the respective computers.

18. The medium of claim 15, further comprises instructions for:

searching by the administration agent of the local administration proxy newly activated computers on the network;

deploying an administration agent on a newly activated computer;

collecting by the administration agent configuration information from the computer; and

transmitting the collected configuration information to the remote administration server for computing a performance rating of the newly activated computer based on the collected configuration information and selecting the newly activated computer as a new local administration proxy for the network if the performance rating of the newly activated computer is higher than the performance rating of the local administration proxy.

19. The medium of claim 18, wherein searching for newly activated computers is performed using one of message broadcasting or ARP-spoofing on the network.

20. The medium of claim 15, further comprises instructions for:

receiving, by the administration agent of the local administration proxy, the control signal from the remote administration server using User Datagram Protocol (UDP); and

establishing, by the administration agent of the local administration proxy, the connection between the remote administration server and the administration agent deployed on said computer using Transmission Control Protocol (TCP).