Security patch update processor

• US 8,713,555 B1
• Filed: 05/27/2013
• Issued: 04/29/2014
• Est. Priority Date: 06/21/2007
• Status: Active Grant

• Current Assignee: SUSE, LLC (EQT AB)
• Original Assignee: Open Invention Network LLC
• Inventors: Feeser, Colin Lee
• Primary Examiner(s): Nahar, Qamrun
• Application Number:
  US13/902,926
• Time in Patent Office: 337 Days
• Field of Search: None
• US Class Current: 717/168
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: G06F 9/4843 by program, e.g. task dispatcher, supervisor, operating system
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration

Abstract

A method, system, and program product are provided for updating software deployed on computers in an enterprise computer network wherein each computer has a software update agent installed to enable the computer to receive software patch updates. The method includes determining a required software component and updates based upon a location in a configuration file; determining a version of the agent and updating the agent if required; selecting a server from which required updates are to be downloaded; scanning a plurality of software components on a selected computer and comparing the components with updates available on the server to determine required updates; downloading the required patches from the server; and installing the patches on the selected computer. The system includes components that perform the method steps when operated on a computer in the network. A computer readable medium implements the method for updating software deployed on computers in a network.

Claims

1. A method, comprising:

determining, by a computer comprising a processor and memory, a required software component and software patch update based upon a location set in a configuration file;

executing, by the computer, at least one command-line switch which identifies a location of the configuration file and wherein all subsequent software component and software patch update settings are provided from the configuration file, wherein the configuration file is located in a same folder as a patch update processor executable file, wherein the command-line switch overrides settings in the configuration file.

2. The method of claim 1 comprising determining, by the computer, a version of a software update agent and updating the software update agent if required, wherein the step of updating the software update agent is based on a minimum version of the software update agent, an update location, and a command-line set in the configuration file.

3. The method of claim 1 further comprising adding or removing a server update service setting based on the command-line switch or the configuration file.

4. The method of claim 1 further comprising selecting a server from which required software patch updates are to be downloaded, wherein the step of selecting a server comprises determining a server update service setting in the configuration file.

5. The method of claim 4 further comprising selecting a server update service server if the server update service setting is set.

6. The method of claim 4 further comprising selecting a software update server if the server update service setting is not set.

7. The method of claim 5 wherein the server update service server is located within an enterprise firewall.

8. The method of claim 6 wherein the software update server is located on a software provider'"'"'s website.

9. The method of claim 1 further comprising downloading the required software patch update from a software provider'"'"'s website to a server update service server on a periodic basis.

10. The method of claim 1 further comprising logging all operations performed during the software patch update process in a log file.

11. The method of claim 1 further comprising versioning of the software patch update using the configuration file.

12. The method of claim 3 wherein adding or removing a server update service setting is performed using a configuration file registry.

13. The method of claim 1 further comprising rebooting of the computer if required for the software patches to become operational.

14. A system, comprising:

a processor;

a memory, wherein the processor and the memory are communicably coupled to each other; and

an application that, when executed by the processor, executes at least one command-line switch which identifies a location of a configuration file and wherein all subsequent software component and software patch update settings are provided from the configuration file, wherein the configuration file is located in a same folder as a patch update processor executable file, wherein the command-line switch overrides settings in the configuration file.

15. The system claim 14 wherein the system determines a minimum version of a software update agent and an update location from which an updated version of the software agent can be downloaded.

16. The system of claim 14 wherein the system adds or removes a server update service setting based on the command-line switch.

17. The system of claim 14 wherein the system determines a server update service setting in the configuration file.

18. The system of claim 17 wherein the system selects a service update service server if the server update service setting is set.

19. The system of claim 17 wherein the system selects a software update server if the server update service setting is not set.

20. The system of claim 18 wherein the server update service server is located within an enterprise firewall.

21. The system of claim 19 wherein the software update server is located on a software provider'"'"'s website.

22. The system of claim 14 wherein the system downloads required software patch updates from a software provider'"'"'s website to a server update service server on a periodic basis.

23. The system of claim 14 wherein the system logs all operations performed during the software patch update process in a log file.

24. The system of claim 14 wherein a system versioning of software update patches is based on the configuration file.

25. The system of claim 16 wherein the system uses a configuration file registry to add or remove a server update service setting.

26. The system of claim 14 wherein the system reboots the selected computer if required for software patches to become operational.

27. A non-transitory computer readable storage medium comprising instructions for:

determining a required software component and software patch update based upon

a location set in a configuration file;

executing, by the computer, at least one command-line switch which identifies a location of the configuration file and wherein all subsequent software component and software patch update settings are provided from the configuration file, wherein the configuration file is located in a same folder as a patch update processor executable file, wherein the command-line switch overrides settings in the configuration file.

28. The non-transitory computer readable storage medium of claim 27 comprising instructions for updating a software agent by determining a minimum version of the software update agent and an update location from which an updated version of the software agent can be downloaded.

29. The non-transitory computer readable storage medium of claim 27 comprising instructions for adding or removing a server update service setting based on the command-line switch or the configuration file.

30. The non-transitory computer readable storage medium of claim 27 comprising instructions for electing a server by determining a server update service setting in the configuration file.

31. The non-transitory computer readable storage medium of claim 30 comprising instructions for selecting a server update services server if the server update service setting is set.

32. The non-transitory computer readable storage medium of claim 30 comprising instructions for selecting a software update server if the server update service setting is not set.

33. The non-transitory computer readable storage medium of claim 27 comprising instructions for downloading a required software patch update from a software provider'"'"'s website to a server update service server on a periodic basis.

34. The non-transitory computer readable storage medium of claim 27 comprising instructions for logging all operations performed during the software patch update process in a log file.

35. The non-transitory computer readable storage medium of claim 27 comprising instructions for versioning the software patch update using the configuration file.

36. The non-transitory computer readable storage medium of claim 27 comprising instructions for adding or removing a server update service setting is performed using a configuration file registry.