Method and apparatus for process enforced configuration management

• US 8,332,929 B1
• Filed: 01/09/2008
• Issued: 12/11/2012
• Est. Priority Date: 01/10/2007
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Bhargava, Rishi, Vittal, Chiradeep, Sayeram, Swaroop
• Primary Examiner(s): Gee, Jason
• Application Number:
  US12/008,274
• Time in Patent Office: 1,798 Days
• Field of Search: 726/12, 726/17, 726/21, 726/22, 726/26
• US Class Current: 726/17
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

A system for and method of automatically enforcing a configuration change process for change requests of one or more configurable element within one or more configurable computation systems. The system comprises means for managing a configuration change process for one or more configurable elements within a corresponding configurable computation system, means for generation a configuration request, means for applying a set of authorization rules to the configuration change requests to generate selective authorization of the CEs, and means for selectively locking and unlocking changes to configurable elements within the configurable computational systems.

Claims

1. A method, comprising:

a. accessing one or more change process rules, wherein the rules are associated with one or more configuration change requests to one or more configurable elements (CEs) within at least one configurable computation system (CCS),

wherein each configuration change request generates a change ticket requiring authorization before an implementation of the configuration change request,

wherein the authorization for the change ticket is provided by electronic inputs,

wherein the change ticket comprises an authorization field and an implementation status field;

b. analyzing the one or more configuration change requests using the change process rules and one or more current conditions;

c. selectively authorizing the one or more configuration change requests to a subset of the one or more CEs within the at least one CCS, wherein the selectively authorizing is based on the analysis of the one or more configuration change requests in relation to the change process rules and the one or more current conditions, wherein the selectively authorizing is delayed until the one or more conditions are met, and wherein the authorization for the change is limited to a subset of the one or more CEs that meets the change process rules;

d. configuring one or more selective-locks on the corresponding at least one CCS to enable configuration changes to the subset of the one or more CEs within the at least one CCS; and

e. updating status information in the implementation status field of the change ticket indicating a final result of the configuration change request.

2. The method of claim 1, wherein the one or more current conditions include at least one of a current time, a day of the week, a date, an inventory level, and a state of a mechanical device.

3. The method of claim 1, further comprising the step of authenticating the configuring of the one or more selective-locks.

4. The method of claim 3, wherein the authenticating comprises an SSL key exchange.

5. The method of claim 1, wherein the one or more selective-locks generates status information.

6. The method of claim 5, further comprising the step of associating the status information with at least one of:

a corresponding one or more associated configuration change request, the corresponding CE, and the corresponding CCS.

7. The method of claim 6, wherein the status information contains at least one of:

a status of each CE configuration change, a status of each CCS configuration change, and information associated with the success or failure of at least one CE configuration change.

8. The method of claim 6, further comprising the step of generating a report, wherein the report contains the configuration change status information, wherein the status change information is associated with the one or more configuration change requests and the corresponding one or more CEs within the at least one CCS.