Software distribution service federation

• US 8,613,101 B2
• Filed: 09/12/2011
• Issued: 12/17/2013
• Est. Priority Date: 09/12/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Raje, Hrishikesh S., Gouge, Christopher S., Rangarajan, Rajasekaran, Lie, Leo Edwin, Li, Jimin
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US13/230,536
• Publication Number:
  US 20130067599A1
• Time in Patent Office: 827 Days
• Field of Search: 726 1- 6, 726 26- 31, 713168-170, 713/191
• US Class Current: 726/26
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

Software update distribution techniques are disclosed. Authentication information is received, from a content source authenticator, by an update agent included in a client device. The authentication information comprises a list of a plurality of content sources, wherein the plurality of content sources have been verified by the content source authenticator as being authentic content sources for legitimate software applications. The update agent selects a first content source of the plurality of content sources, where the first content source is configured to provide updates for a first software application. The update agent checks the first content source for updates for the first software application.

Claims

1. A method comprising:

under control of one or more processors configured with executable instructions;

receiving, by an update agent from a content source authenticator, authentication information associated with a plurality of content sources that comprises a list of the plurality of content sources;

selecting a first content source from the list of the plurality of content sources included in the authentication information, wherein the first content source is configured to provide updates for a first software application; and

checking the first content source for updates for the first software application.

2. The method of claim 1, wherein said selecting the first content source further comprises:

determining that;

the authentication information includes an un-expired authorization token that indicates an authenticity of the first content source, and

a client device is configured to enable automatic checking of the first content source; and

selecting the first content source in response to said determining.

3. The method of claim 1, wherein the update agent is configured to check the first content source for updates, the method further comprising:

selecting, by the update agent, a second content source of the plurality of content sources, wherein the second content source is configured to provide updates for a second software application; and

checking, by the update agent, the second content source for updates for the second software application.

4. The method of claim 3, further comprising:

displaying a notification that notifies a user of updates available for the first software application and the second software application;

receiving input from the user to download and install updates for at least one of first software application and the second software application; and

downloading and installing updates for at least one of the first software application and the second software application.

5. The method of claim 1, wherein the first content source is configured to provide updates for a second software application, the method further comprising:

checking the first content source for updates for the second software application.

6. The method of claim 1, wherein the authentication information further comprises, for each of the plurality of content sources, an authorization token that indicates an authenticity of the corresponding content source and an expiration time of the corresponding authorization token.

7. The method of claim 1, wherein the authentication information further comprises Uniform Resource Locators (URLs) of each of the plurality of content sources.

8. The method of claim 1, wherein the authentication information further comprises, for each of the plurality of content sources, a schedule and a frequency for checking and downloading updates.

9. The method of claim 1, wherein the authentication information specifies, for each of the plurality of content sources:

whether updates from the corresponding content source is to be automatically downloaded and installed;

or

whether an input from a user is required to download and install updates from the corresponding content source.

10. One or more computer-readable devices configured with computer-executable instructions that, when executed by one or more processors, configure the one or more processors to perform acts comprising:

determining that a plurality of content sources are authentic content sources for providing updates for a corresponding plurality of software applications; and

generating authentication information that comprises;

a list of the plurality of content sources, and

for each of the plurality of content sources, an authorization token that indicates an authenticity of the corresponding content source and an expiration time of the authorization token.

11. The one or more computer-readable devices of claim 10, wherein the authentication information further comprises an address of each of the plurality of content sources.

12. The one or more computer-readable devices of claim 10, wherein the authentication information further comprises:

for each of the plurality of content sources, one or more rules associated with checking for updates for the corresponding software application from the corresponding content source.

13. The one or more computer-readable devices of claim 12, wherein:

for a first content source providing updates, a first rule specifies that if a first registry key or a first file is stored in a client device, the client device is to check for updates from the first content source; and

for the first content source, a second rule specifies that if a software component is not stored in the client device, the client device is to refrain from checking for updates from the first content source.

14. The one or more computer-readable devices of claim 10, wherein the authentication information further comprises:

for each of the plurality of content sources, a frequency and a schedule for checking for updates from the corresponding content source.

15. The one or more computer-readable devices of claim 10, wherein the authentication information further comprises:

or a first content source providing updates, a first condition specifying that;

if a client device is included in a corporate network, the client device is to check for updates from the first content source based upon an authorization from an administrator of the client device; and

if the client device is not a part of the corporate network, the client device is to automatically check for updates for from the first content source.

16. The one or more computer-readable devices of claim 10, further comprising:

transmitting the authentication information to a client device, to enable the client device to check for updates from one or more of the plurality of content sources for a corresponding one or more of the plurality of software applications.

17. The one or more computer-readable devices of claim 10, further comprising:

determining that a first software application of the plurality of software applications is no longer a legitimate software application, wherein a first content source of plurality of content sources provides updates for the first software application;

based on determining that the first software application is no longer a legitimate software application, removing the first content source from the list included in the authentication information.

18. The one or more computer-readable devices of claim 10, further comprising :

determining that a second content source is no longer an authentic content source for providing updates; and

based on determining that the second content source is no longer an authentic content source, removing the second content source from the list included in the authentication information.

19. The one or more computer-readable devices of claim 10, further comprising:

transmitting the authentication information in a form of an xml file contained within a cabinet file.

20. A system comprising:

one or more processors; and

memory, communicatively coupled to the one or more processors, storing instructions that, when executed by the one or more processors, configure the one or more processors to perform acts comprising;

receiving, at a client device, authentication information associated with a plurality of content sources that comprises a list of the plurality of content sources and a plurality of rules;

determining that a rule of the plurality of rules, associated with a first content source of the plurality of content sources, is satisfied on the client device;

in response to the determining that the rule associated with the first content source is satisfied, checking the first content source for updates;

determining that another rule of the plurality of rules, associated with a second content source of plurality of content sources, is not satisfied on the client device; and

in response to determining that the another rule associated with the second content source is not satisfied, refraining from checking the second content source for updates.