Managing software patches

• US 8,151,258 B2
• Filed: 03/09/2005
• Issued: 04/03/2012
• Est. Priority Date: 03/09/2005
• Status: Expired due to Fees

• Current Assignee: Channel IP BV
• Original Assignee: Ipass Incorporated (Pareteum Corp.)
• Inventors: Russell, Michael D., Killen, Justin E., Chernyakhovsky, Alexander
• Primary Examiner(s): Vo, Ted T
• Application Number:
  US11/076,813
• Publication Number:
  US 20060206757A1
• Time in Patent Office: 2,582 Days
• Field of Search: 717168-178
• US Class Current: 717/172
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

In one embodiment, the method includes determining a first set of software patches based on a group of software patches installed on a computing device and a group of available software patches. The method can also include receiving the first set of software patches over a network connection. The method can also include determining, after receiving the first set of software patches, a second set of software patches based on the group of software patches installed on the computing device and the first set of software patches, wherein the group of installed software patches has changed since determining the first set. The method can also include installing on the computing device the second set of software patches.

Claims

1. A computer-implemented method comprising:

installing a patch management agent on a computing device;

determining a first set of software patches based on a group of software patches installed on the computing device and a group of available software patches;

receiving at the computing device, the first set of software patches over a network connection;

after receiving the first set of software patches, determining, by the patch management agent, a second set of software patches based on the group of software patches installed on the computing device and the first set of software patches, wherein the group of software patches installed on the computing device has changed since determining the first set, and wherein the second set is a subset of the first set; and

installing, by the agent, the second set of software patches on the computing device.

2. The computer-implemented method of claim 1, wherein the receiving is resumeable after an interruption to the network connection.

3. The computer-implemented method of claim 1, wherein the receiving includes, if the network connection is interrupted after part of a software patch has been received, receiving a remainder of the software patch after the network connection is restored.

4. The computer-implemented method of claim 1, wherein installing includes configuring the second set of software patches for operation with a software system of the client computing device.

5. The computer-implemented method of claim 1, wherein the installed software patches have been integrated into a software system of the client computing device and configured for operation with the software system.

6. The computer-implemented method of claim 1, wherein the network connection is non-continuous.

7. The computer-implemented method of claim 1, wherein the network connection is intermittently inoperable.

8. An apparatus comprising:

a patch management agent installed on a client computing device having a processor and a memory, the client computing device being coupled to a network connection,

the patch management agent including;

a patch list receiving unit configured to receive an available software patch list;

a patch procurement unit configured to receive, over the network connection, a first group of software patches of the available software patch list, wherein after an interruption to the network connection, the patch procurement unit further configured to receive a remaining group of software patches of the available software patch list;

a patch determination unit configured to determine an installation group of software patches based on which of the first and remaining groups of software patches are not already installed on the client computing device, wherein the installation group is a subset of the first and remaining groups; and

a patch installation unit configured to install the installation group of software patches on the client computing device.

9. The apparatus of claim 8, wherein the patch determination unit is to determine which of the first and the remaining patches are to be installed based on patches that are installed on the computing device.

10. The apparatus of claim 9, wherein the patch determination unit is to determine which of the first and the remaining patches are to be installed based on whether the client computing device is configurable for installing those of the first and remaining patches to be installed on the client computing device.

11. The apparatus of claim 8, wherein the patch determination unit is to determine which of the first and remaining patches are to be installed based on whether the client computing device includes patches required by those of the first and remaining patches to be installed on the client computing device.

12. The apparatus of claim 8, the patch procurement unit is to receive the patches from a command server via the network connection.

13. The apparatus of claim 8, the patch procurement unit is to receive the patches from a patch server via the network connection.

14. A system comprising:

a command server, coupled to a network, configured to create a data set indicating patches that are available for installation on a computer, and to store the patches that are available for installation; and

an agent installed on the computer, the computer having a processor and a memory, the client computer being coupled to the network, the agent configured to;

receive the data set via the network;

determine a first set of needed patches, wherein the first set of needed patches includes ones of the patches indicated in the data set that are not installed on the computer;

request, from the command server, the first set of needed patches via the network;

receive the first set of needed patches via the network;

determine that ones of the first set of needed patches have been installed on the computer since the first set of needed patches was determined;

determine a second set of needed patches, wherein the second set of needed patches includes ones of the first set of needed patches that are not installed on the computer, and wherein the second set of needed patches is a subset of the first set of needed patches; and

install, on the computer, the second set of needed patches.

15. The system of claim 14, wherein the data set is represented in extensible markup language (XML).

16. The system of claim 14, the command server configured to present the needed patches list on an administrative console.