System and method for software usage discovery

• US 8,473,607 B2
• Filed: 09/02/2009
• Issued: 06/25/2013
• Est. Priority Date: 09/02/2008
• Status: Active Grant

• Current Assignee: Belarc, Inc.
• Original Assignee: Belarc, Inc.
• Inventors: Enscoe, Christopher J., Newman, Gary H.
• Primary Examiner(s): BAROT, BHARAT
• Application Number:
  US12/553,022
• Publication Number:
  US 20100057905A1
• Time in Patent Office: 1,392 Days
• Field of Search: 709202-203, 709217-219, 709223-224, 717/100, 717/106, 717/120
• US Class Current: 709/224
• CPC Class Codes: G06F 11/302 where the computing system component is a software system
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 11/3055 Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction by redundancy in operation G06F11/14; error detection or correction by redundancy in hardware G06F11/16
• CPC Class Codes: G06F 11/323 Visualisation of programs or trace data
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/865 Monitoring of software

Abstract

A method of obtaining information about usage of application executable files and associated software program in a network of computers or on an individual computer is provided. The method involves collecting information about last use of software programs, and associated executable files, on a computer or a set of managed computers from various resources on the computers. The information that is collected includes file name, directory, date and time the executable was last started, a security identifier of the last user, the method of last use, whether the executable was found to be running at the time it was found, and whether the executable is registered to run as a service. From this information, a list is generated regarding software items, and the list is merged such that a given executable has a single software item on the list. Reports are produced detailing information about one or more software items on the list. The reports may be displayed in a graphic user interface designed for that purpose.

Claims

1. A method, comprising:

in a network of computers that are in communication with a server, collecting information, at a given client computer, about executables installed on the given computer, by;

utilizing the collected information and generating one or more software items for each executable, wherein each software item includes an indication as to when the executable was last used and each software item includes a method of last use indicating a technique utilized to determine when the executable was last used, and wherein each software item includes one or more of the following;

1. file name,

2. directory,

3. date and time the executable was last started,

4. security identifier of the last user,

5. whether the executable was found to be running at the time it was found, and

6. whether the executable is registered and run as a service;

recording the one or more software items in a list containing usage data for the executables found on the given computer;

if only one software item is generated for a given executable, including the one software item as part of computer profile data for the given computer;

if multiple software items are generated for the given executable, merging the multiple software items associated with the given executable as the single item and including the single item as part of the computer profile data for the given computer; and

storing the computer profile data in an associated database; and

producing reports about the executables, software programs comprised of the executables, or both, from the computer profile data stored in the database.

2. The method as defined in claim 1 further comprising determining the method of last use by retrieving a last access time maintained by a file system running on the given computer.

3. The method as defined in claim 1 further comprising determining the method of last use by

opening an application'"'"'s executable file by at least one of the following:

opening a document file associated with the application'"'"'s executable,

typing the application name into a “

Run”

menu,

starting the application from its Windows®

Start Menu shortcut; and

extracting usage information including at least one of a date and a time the application'"'"'s executable was launched, a cumulative count of a number of times the application'"'"'s executable has been launched, and a user who launched the application'"'"'s executable.

4. The method as defined in claim 1 further comprising determining the method of last use by opening a Windows®

Pre-fetch folder and extracting a file path of a particular executable on the given computer and a time stamp showing when the particular executable began execution.

5. The method as defined in claim 1 further comprising determining the method of last use by querying a file system for information about currently running processes.

6. The method as defined in claim 5 further comprising determining at least one of a process owner and an actual start time of the currently running processes.

7. The method as defined in claim 1 further comprising determining the method of last use by searching for applications that start running automatically when a user logs on to the given computer.

8. The method as defined in claim 1 wherein the merging process comprises comparing two software items having a same file path in accordance with one or more of the following:

1. when a first software item associated with the given executable has a method of determining last use that is based upon a last access time, and a second software item associated with the given executable does not have such a method of determining last use, then discarding from the list the first software item associated with the given executable that has the method of determining last use that is based upon the last access time, and retaining the second software item;

2. otherwise, if a difference between last use times of the first and second software items is greater than a predetermined threshold, then discarding either the first or second software item associated with an earlier time and retaining an other of the first or second software item;

3. otherwise, when the difference is less than or equal to the predetermined threshold, discarding either the first or second software item that has no last user value and retaining the other of the first or second software item with a valid last user value;

4. when the discarded software item has an IsRunning flag set, transferring that IsRunning flag to the retained software item;

5. when the discarded software item has an IsService flag set, transferring that IsService flag to the retained software item.

9. The method as defined in claim 1 further comprising producing other reports setting forth information about one or more selected executables, or software programs that are comprised of the one or more selected executables, or both.

10. The method as defined in claim 1 wherein producing reports setting forth information about executables and/or software applications includes producing reports that include usage information for all or a subset of the computers in the network.

30. The method as defined in claim 1 wherein the method of last use is assigned a value signifying that the indication as to when the executable was last used is not useful.

11. A system for managing a set of computers in a network of computers, comprising

a plurality of client computers and a server;

one or more client computers embodying program instructions for determining usage of installed executables on each client computer to create one or more software items where each software item includes an indication as to when the executable was last used and each software item includes a method of last use indicating a technique utilized to determine when the executable was last used, the client computers uploading the one or more software items associated with each respective executable to the server;

a software module embodying program instructions for performing a merge of multiple software items as a single software item if the multiple software items exist for a given executable and utilizing the single software item if only one software item exists for the given executable, and producing a list of software items that includes one item for each given executable;

the server, in communicating relationship with the client computers, embodying program instructions relating to;

collecting, for each client computer, usage information associated with the installed executables on each client computer based on the one item for each given executable, and producing reports based on the computer usage information associated with the installed executables and software programs comprised of the installed executables or both that are installed on each client computer; and

a computer information database in which selected information associated with the computer usage information is stored in one or more database records.

12. The system as defined in claim 11 further comprising the server producing the reports based upon the one or more database records, wherein the reports include information about usage of one or more executables, software programs comprising the one or more executables, versions thereof, users thereof, and frequency of use of the one or more executables, the software programs or both.

13. The system as defined in claim 11 wherein the client computers are grouped based upon computer grouping criteria that are selected from information in the database, and the reports that are produced for the client computers within a given group and subgroups thereof.

14. The system as defined in claim 13 wherein said groups are based upon primary and secondary criteria.

15. The system as defined in claim 11 wherein the software module operates within a given client computer, and uploads the list to the server.

16. The system as defined in claim 11 wherein the software module operates within the server.

17. The system as defined in claim 11 further comprising a graphic user interface having a display for depiction of software versions of a particular software program that are being used in one or more of the client computers or an individual computer, and for depiction of at least one of a date of last use of the particular software program and a last user to use the particular software program.

18. The system as defined in claim 11 further comprising a graphic user interface having a display for depiction of a list of computers that are using a particular version of software.

19. The system as defined in claim 11 further comprising a graphic user interface having a display for depiction of installed software associated with a particular installed executable on a particular client computer and a date each installed software was last used by the client computer.

20. The system as defined in claim 11 further comprising a graphic user interface having a display for depiction of an install directory for a particular software program associated with a particular installed executable on a particular computer and at least one of a path name for each software item associated with the particular software program, the name of each software item, a version number, a filename and size, a date of last use and a identity of a last user.

21. The system as defined in claim 11 further comprising a graphic user interface having a display for depiction of a list of software programs associated with one or more installed executables and a version of each and an indication of a recency of use of each software program of the list.

22. The method as defined in claim 21 wherein said graphic user interface includes an information box providing further details about a software program selected by a user.

23. The method as defined in claim 11 further comprising a computer workstation for administration of the client computers which monitors usage of one or more executables, one or more software programs or both on one or more selected client computers in the network of computers, and wherein one or more particular produced reports can be visually displayed in a graphic user interface for inspection by a user.

24. A method, comprising:

collecting information, at a computer, about one or more software executable files installed on the computer;

generating one or more software items for each respective software executable file utilizing the collected information, where each software item includes an indication as to when the executable was last used and each software item includes a method of last use indicating a technique utilized to determine when the executable was last used, and wherein each software item includes one or more of the following;

1. file name;

2. directory;

3. date and time the executable was last started;

4. security identifier of the last user;

5. whether the executable was found to be running at the time it was found; and

6. whether the executable is registered and run as a service;

recording the one or more software items in a list containing usage data for the one or more software executable files on the computer;

if only one software item is generated for a given software executable file, including the one software item as part of data associated with the given software executable file;

if multiple software items are generated for the given software executable file, merging the multiple software items associated with the given software executable file to generate a single item for the given software executable file and including the single item as part of the data associated with the given software executable file; and

producing a report detailing information about the one or more software executable files.

25. A system for managing a computer, comprising:

a computer memory embodying computer program instructions for monitoring usage of installed executables on the computer, including at least one of;

collecting information, at the computer, about one or more executables installed on the computer;

generating for a given executable, one or more software items, from the collected information, wherein each software item include an indication as to when the executable was last used and each software item includes a method of last use indicating a technique utilized to determine when the executable was last used and wherein each software item includes one or more of the following;

file name;

directory;

date and time the given executable was last started;

security identifier of the last user;

whether the given executable was found to be running at the time it was found; and

whether the given executable is registered and run as a service; and

a computer workstation for administration of the system which monitors the one or more installed executables, to determine usage of the one or more installed executables, software programs comprised of the one or more installed executables, or both, and producing reports relating to the generated software items associated with usage of the one or more installed executables.

26. The system for managing a computer as defined in claim 25 wherein the reports are visually displayed in a graphic user interface for inspection by a user.

27. A database management system, comprising:

a network of client computers and a server;

one or more client computers embodying program instructions for determining usage of executables on the one or more of the client computers, creating unique software items for each executable wherein each software item includes an indication as to when the executable was last used and each software item includes a method of last use indicating a technique utilized to determine when the executable was last used, and including the software items in computer profile data associated with each client computer; and

a server in communicating relationship with the one or more client computers, the server embodying program instructions for collecting the computer profile data associated with each respective client computer in a computer information database and producing records relating to information contained in the software items, and producing reports regarding usage of the one or more executables installed on the one or more of the client computers based on the computer profile data associated with each respective client computer.

28. A method, comprising:

collecting data about usage of executables from a number of sources within a memory of one or more computers;

generating a software item for each executable, wherein each software item includes an indication as to when the executable was last used and each software item includes a method of last use indicating a technique utilized to determine when the executable was last used;

sorting the software items into a list;

merging the list including,

applying multiple queries to the software items on the list that refer to the same file path to determine whether a duplicate software item is found for a given executable, and

when a duplication is found, transferring desired data from the duplicate software item to a retained item and discarding the duplicate software item;

combining the data to produce a list of retained software items that include usage information about each respective executable that is installed on that computer; and

storing the usage information contained in the retained software items as one or more records in an associated database.

29. The method as defined in claim 28 further comprising

at an associated server, generating one or more reports from the one or more records relating to the one or more of the computers as requested by an administrator.