Primitive functions for use in remote computer management

• US 8,200,794 B1
• Filed: 06/30/2004
• Issued: 06/12/2012
• Est. Priority Date: 06/30/2004
• Status: Active Grant

• Current Assignee: Datto LLC
• Original Assignee: Kaseya International Limited (Kaseya Limited)
• Inventors: Sutherland, Mark J., Wong, Paul Y.
• Primary Examiner(s): Jakovac, Ryan
• Application Number:
  US10/883,643
• Time in Patent Office: 2,904 Days
• Field of Search: 709/223, 709/222, 717168-178
• US Class Current: 709/222
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

The invention facilitates remote management of a computer via a network. Remote computer management capability can be expanded beyond that previously available through the addition of one or more new primitive functions that can be performed on a managed computer.

Claims

1. A non-transitory computer readable storage memory encoded with one or more computer programs and/or data structures for facilitating remote management of a managed computer, the one or more computer programs being executed to cause a processor to perform:

transmitting periodic messages from the managed computer to a remote computer management server to determine whether there is an outstanding management action that needs to be performed by the managed computer;

receiving at least one command that effects performance of the management action, the management action comprising execution of one or more primitive functions from a set of primitive functions including one or more of the following primitive functions;

Get value for script variable;

Added printers to audit;

Get File in multiple blocks;

Enumerate registry subkeys;

Enumerate registry values;

Enumerate directory listing;

Incremental audit;

Execute application and return output; and

Extend audit to include file types in addition to .exe;

performing one of the above-described primitive functions via agent software installed on the managed computer;

transmitting from the remote computer management server to the managed computer, after installation of agent software on the managed computer, a dynamically loaded library (DLL) including one or more sets of instructions and/or data that when implemented by the agent software, produce functionality not enabled by the agent software at the time the DLL is transmitted to the managed computer, the functionality enabled by the DLL comprising

enabling the agent software to provide an interface function call definition configured to pass commands to the DLL for execution, the commands comprising at least one command that identifies the DLL,

identifying at least one device connected to the managed computer,

scanning a local area network (LAN) associated with the managed computer to identify the at least one device by issuing an address resolution protocol (ARP) command to each IP address assigned to the LAN,

receiving responses at the managed computer indicating the presence of the at least one device,

transmitting device identification information to the remote computer management server indicating existence of the at least one device,

receiving at the managed computer another DLL comprising additional commands instructing the agent software to perform management actions responsive to the identification information transmitted, the additional commands identifying a communication protocol to be used by the agent software when communicating with the at least one device; and

transmitting from the managed computer to the remote computer management server via a network a result of the performance of the management action.

2. A non-transitory computer readable storage memory as in claim 1, further comprising instructions and/or data for receiving at the managed computer a request via the network from the remote computer management server to perform a management action.

3. A non-transitory computer readable storage memory as in claim 1, wherein the network is the Internet.

4. A non-transitory computer readable storage memory as in claim 1, further comprising instructions and/or data for routing all communication between the managed computer and the remote computer management server through a single network communications port that is allowed for other network communication by a firewall and/or gateway that mediates communication with the managed computer.

5. A non-transitory computer readable storage memory as in claim 1, further comprising instructions and/or data for authenticating the managed computer to the remote computer management server.

6. A non-transitory computer readable storage memory as in claim 1, further comprising instructions and/or data for encrypting communication between the managed computer and the remote computer management server.

7. A non-transitory computer readable storage memory as in claim 6, wherein the instructions and/or data for encrypting communication between the managed computer and the remote computer management server further comprise instructions and/or data for generating a new encryption key each time that the managed computer initiates communication with the remote computer management server.

8. A non-transitory computer readable storage memory as in claim 7, wherein the instructions and/or data for encrypting communication between the managed computer and the remote computer management server further comprise instructions and/or data for successively comparing different combinations of a specified number of the most recent encryption keys stored by the managed computer and a specified number of the most recent encryption keys stored by the remote computer management server.