Software distribution service federation

• US 8,990,953 B2
• Filed: 12/16/2013
• Issued: 03/24/2015
• Est. Priority Date: 09/12/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Raje, Hrishikesh S., Li, Jimin, Lie, Leo Edwin, Rangarajan, Rajasekaran, Gouge, Christopher S.
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US14/107,528
• Publication Number:
  US 20140101779A1
• Time in Patent Office: 463 Days
• Field of Search: 726 1- 6, 726 26- 31, 713168-170, 713/191, 705/51
• US Class Current: 726/26
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

Software update distribution techniques are disclosed. Authentication information is received, from a content source authenticator, by an update agent included in a client device. The authentication information comprises a list of a plurality of content sources, wherein the plurality of content sources have been verified by the content source authenticator as being authentic content sources for legitimate software applications. The update agent selects a first content source of the plurality of content sources, where the first content source is configured to provide updates for a first software application. The update agent checks the first content source for updates for the first software application.

Claims

1. One or more computer-readable devices configured with computer-executable instructions that, when executed by one or more processors, configure the one or more processors to perform acts comprising:

receiving, by an update agent from a content source authenticator, authentication information associated with a plurality of content sources that comprises a list of the plurality of content sources;

selecting a first content source from the list of the plurality of content sources included in the authentication information, wherein the first content source is configured to provide updates for a first software application; and

checking the first content source for updates for the first software application.

2. The one or more computer-readable devices of claim 1, wherein the selecting the first content source further comprises:

determining that;

the authentication information includes an un-expired authorization token that indicates an authenticity of the first content source, and

a client device is configured to enable automatic checking of the first content source; and

selecting the first content source in response to said determining.

3. The one or more computer-readable devices of claim 1, wherein the update agent is configured to check the first content source for updates, the acts further comprising:

selecting, by the update agent, a second content source of the plurality of content sources, wherein the second content source is configured to provide updates for a second software application; and

checking, by the update agent, the second content source for updates for the second software application.

4. The one or more computer-readable devices of claim 3, the acts further comprising:

displaying a notification that notifies a user of updates available for the first software application and the second software application;

receiving input from the user to download and install updates for at least one of first software application and the second software application; and

downloading and installing updates for at least one of the first software application and the second software application.

5. The one or more computer-readable devices of claim 1, wherein the authentication information further comprises Uniform Resource Locators (URLs) of each of the plurality of content sources.

6. A system comprising:

one or more processors; and

memory, communicatively coupled to the one or more processors, storing instructions that, when executed by the one or more processors, configure the one or more processors to perform acts comprising;

receiving, by an update agent from a content source authenticator, authentication information associated with a plurality of content sources that comprises a list of the plurality of content sources;

selecting a first content source from the list of the plurality of content sources included in the authentication information, wherein the first content source is configured to provide updates for a first software application; and

checking the first content source for updates for the first software application.

7. The system of claim 6, wherein the selecting the first content source further comprises:

determining that;

the authentication information includes an un-expired authorization token that indicates an authenticity of the first content source, and

a client device is configured to enable automatic checking of the first content source; and

selecting the first content source in response to said determining.

8. The system of claim 6, wherein the first content source is configured to provide updates for a second software application, the acts further comprising:

checking the first content source for updates for the second software application.

9. The system of claim 6, wherein the authentication information further comprises, for each of the plurality of content sources, an authorization token that indicates an authenticity of the corresponding content source and an expiration time of the corresponding authorization token.

10. The system of claim 6, wherein the authentication information further comprises, for each of the plurality of content sources, a schedule and a frequency for checking and downloading updates.

11. A method comprising:

determining, by a processor, that a plurality of content sources are authentic content sources for providing updates for a corresponding plurality of software applications; and

generating authentication information that comprises;

a list of the plurality of content sources, and

for each of the plurality of content sources, an authorization token that indicates an authenticity of the corresponding content source and an expiration time of the authorization token.

12. The method of claim 11, wherein the authentication information further comprises an address of each of the plurality of content sources.

13. The method of claim 11, wherein the authentication information further comprises:

for each of the plurality of content sources, one or more rules associated with checking for updates for the corresponding software application from the corresponding content source.

14. The method of claim 13, wherein:

for a first content source providing updates, a first rule specifies that if a first registry key or a first file is stored in a client device, the client device is to check for updates from the first content source; and

for the first content source, a second rule specifies that if a software component is not stored in the client device, the client device is to refrain from checking for updates from the first content source.

15. The method of claim 11, wherein the authentication information further comprises:

for each of the plurality of content sources, a frequency and a schedule for checking for updates from the corresponding content source.

16. A system comprising:

one or more processors; and

memory, communicatively coupled to the one or more processors, storing instructions that, when executed by the one or more processors, configure the one or more processors to perform acts comprising;

determining that a plurality of content sources are authentic content sources for providing updates for a corresponding plurality of software applications; and

generating authentication information that comprises;

a list of the plurality of content sources, and

for each of the plurality of content sources, an authorization token that indicates an authenticity of the corresponding content source and an expiration time of the authorization token.

17. The system of claim 16, wherein the authentication information further comprises:

for a first content source providing updates, a first condition specifying that;

if a client device is included in a corporate network, the client device is to check for updates from the first content source based upon an authorization from an administrator of the client device; and

if the client device is not a part of the corporate network, the client device is to automatically check for updates for from the first content source.

18. The system of claim 16, the acts further comprising:

transmitting the authentication information to a client device, to enable the client device to check for updates from one or more of the plurality of content sources for a corresponding one or more of the plurality of software applications.

19. The system of claim 16, the acts further comprising:

determining that a first software application of the plurality of software applications is no longer a legitimate software application, wherein a first content source of plurality of content sources provides updates for the first software application; and

based on determining that the first software application is no longer a legitimate software application, removing the first content source from the list included in the authentication information.

20. The system of claim 16, the acts further comprising:

determining that a second content source is no longer an authentic content source for providing updates; and

based on determining that the second content source is no longer an authentic content source, removing the second content source from the list included in the authentication information.