Authorizing or preventing deployment of update information based on deployment parameters

• US 9,032,388 B1
• Filed: 07/18/2012
• Issued: 05/12/2015
• Est. Priority Date: 07/18/2012
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Watson, David Emory, Shamis, Mark
• Primary Examiner(s): Wong, Don
• Assistant Examiner(s): Luna, Roberto E
• Application Number:
  US13/552,329
• Time in Patent Office: 1,028 Days
• Field of Search: None
• US Class Current: 717/173
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

One or more bookkeeping nodes may receive a request to deploy update information from a requesting node. The bookkeeping node(s) may determine whether to authorize the requesting node to deploy the update information based at least in part on one or more deployment parameters. If authorized, the requesting node may download the update information from one or more download nodes.

Claims

1. One or more non-transitory computer-readable media storing computer-executable instructions responsive to execution by at least one processor configure the at least one processor to perform operations comprising:

storing data relating to one or more deployment parameters associated with deployment of update information stored in a group of download nodes, wherein the one or more deployment parameters comprise a parameter indicative of a maximum allowable failure rate;

receiving a request for the update information from a requesting node;

determining that the maximum allowable deployment failure rate would not be exceeding if the requesting node attempted and failed to deploy the update information; and

authorizing the requesting node to deploy the update information responsive to determining that the maximum allowable deployment failure rate would not be exceeded if the requesting node attempted and failed to deploy the update information, wherein authorizing comprises directing the requesting node to obtain the update information from at least one download node of the group of download nodes.

2. The one or more non-transitory computer-readable media of claim 1, wherein the requesting node is a first requesting node, wherein the at least one download node is a first at least one download node, and wherein the one or more deployment parameters further comprise a parameter indicative of a maximum allowable deployment time, the operations further comprising:

receiving a request for the update information from a second requesting node;

determining a deployment completion time for the second requesting node to complete deployment of the update information;

determining that the deployment completion time does not exceed the maximum allowable deployment time; and

authorizing the second requesting node to deploy the update information responsive to determining that the deployment completion time does not exceed the maximum allowable deployment time, wherein authorizing comprises directing the second requesting node to obtain the update information from a second at least one download node of the group of download nodes.

3. The one or more non-transitory computer-readable media of claim 1, wherein authorizing the requesting node to deploy the update information further comprises updating the data relating to the one or more deployment parameters.

4. The one or more non-transitory computer-readable media of claim 3, wherein updating the data relating to the one or more deployment parameters comprises incrementing a counter indicating a number of nodes that are actively deploying the update information.

5. The one or more non-transitory computer-readable media of claim 4, the operations further comprising:

determining that the requesting node has successfully deployed the update information; and

decrementing the counter indicating the number of nodes that are actively deploying the update information.

6. The one or more non-transitory computer-readable media of claim 1, wherein the requesting node is a first requesting node, the operations further comprising:

receiving a request for the update information from a second requesting node;

determining that the maximum allowable deployment failure rate would be exceeded if the second requesting node attempted and failed to deploy the update information; and

preventing the second requesting node from obtaining the update information responsive to determining that the maximum allowable deployment failure rate would be exceeded if the second requesting node attempted and failed to deploy the update information.

7. A method comprising:

receiving, by a bookkeeping node from a requesting node, a request to deploy update information;

determining, by the bookkeeping node, whether to authorize the requesting node to deploy the update information based at least in part on one or more deployment parameters, wherein the one or more deployment parameters comprise a maximum allowable deployment failure rate, and wherein determining whether to authorize the requesting node to deploy the update information comprises determining, by the bookkeeping node, that the maximum allowable deployment failure rate would not be exceeded if the requesting node attempted and failed to deploy the update information and

authorizing, by the bookkeeping node, the requesting node to deploy the update information, wherein authorizing comprises directing, by the bookkeeping node, the requesting node to obtain the update information from at least one download node of a group of one or more download nodes storing the update information.

8. The method of claim 7, wherein the requesting node is a first requesting node, the request is a first request, and the at least one download node is a first at least one download node, and wherein the one or more deployment parameters further comprise a maximum allowable deployment time, the method further comprising:

receiving, by the bookkeeping node from a second requesting node, a second request to deploy the update information;

determining, by the bookkeeping node, that a deployment time for the second requesting node to deploy the update information does not exceed the maximum allowable deployment time; and

authorizing, by the bookkeeping node, the second requesting node to deploy the update information, wherein authorizing comprises directing, by the bookkeeping node, the second requesting node to obtain the update information from a second at least one download node of the group of one or more download nodes storing the update information.

9. The method of claim 8, wherein the one or more deployment parameters further comprise at least one of:

a number of active deployments or a number of download nodes in the group of download nodes from which the update information is obtainable, and wherein the deployment time comprises a time for the second requesting node to complete deployment of the update information, and wherein the deployment time is based at least in part on at least one of;

the number of active deployments or the number of download nodes.

10. The method of claim 7, wherein the requesting node is a first requesting node and the request is a first request, the method further comprising:

receiving, by the bookkeeping node from a second requesting node, a second request to deploy the update information; and

determining, by the bookkeeping node, that the maximum allowable deployment failure rate would be exceeded if the second requesting node attempted and failed to deploy the update information; and

preventing, by the bookkeeping node, the second requesting node from deploying the update information.

11. The method of claim 10, wherein preventing the second requesting node from deploying the update information comprises transmitting, by the bookkeeping node to the second requesting node, data relating to the one or more deployment parameters.

12. The method of claim 10, wherein preventing the second requesting node from deploying the update information comprises transmitting, by the bookkeeping node to the second requesting node, an estimated wait time, wherein the wait time comprises a minimum time between receipt of the second request and receipt of a third request from the second requesting node to deploy the update information.

13. The method of claim 7, wherein the one or more deployment parameters further comprise at least one of:

a current deployment rate or a current deployment failure rate.

14. The method of claim 13, further comprising:

adjusting, by the bookkeeping node, the maximum allowable deployment rate based at least in part on the current deployment rate or the current deployment failure rate to generate an adjusted maximum allowable deployment failure rate.

15. The method of claim 14, wherein the requesting node is a first requesting node, the request is a first request, and the at least one download node is a first at least one download node, the method further comprising:

receiving, by the bookkeeping node from a second requesting node, a second request to deploy the update information;

determining that the adjusted maximum allowable deployment failure rate would not be exceeded if the second requesting node attempted and failed to deploy the update information; and

authorizing, by the bookkeeping node, the second requesting node to deploy the update information, wherein the authorizing comprises directing, by the bookkeeping node, the second requesting node to obtain the update information from a second at least one download node of the group of download nodes storing the update information.

16. The method of claim 13, wherein the requesting node is a first requesting node, the request is a first request, the at least one download node is a first at least one download node, and wherein the one or more deployment parameters further comprise a maximum allowable deployment failure rate, the method further comprising:

receiving, by the bookkeeping node from a second requesting node, a second request to deploy the update information;

determining, by the bookkeeping node, that a deployment time for the second requesting node to deploy the update information exceeds the maximum allowable deployment time; and

preventing the second requesting node from obtaining the update information from the set of download nodes.

17. The method of claim 7, wherein the group of one or more download nodes includes the bookkeeping node, and wherein directing the requesting node to receive the update information comprises:

transmitting at least a portion of the update information from the bookkeeping node to the requesting node.

18. The method of claim 17, wherein the group of one or more download nodes includes only the bookkeeping node.

19. The method of claim 7, wherein the bookkeeping node is one of a plurality of bookkeeping nodes storing data relating to the one or more deployment parameters.

20. The method of claim 19, wherein the plurality of bookkeeping nodes and the group of one or more download nodes include at least one common node.

21. The method of claim 7, wherein the one or more deployment parameters further comprise a download parameter indicative of a number of nodes in the group of one or more download nodes or the number of nodes in the group of download nodes in relation to a total number of nodes, and wherein the requesting node is a first requesting node, and the request is a first request, the method further comprising:

receiving, by the bookkeeping node, a second request for the update information from a second requesting node;

determining, by the bookkeeping node, that the download parameter exceeds a threshold value; and

authorizing, by the bookkeeping node, the second requesting node to deploy the update information.

22. The method of claim 7, wherein the one or more deployment parameters further comprise a parameter indicative of a number of active deployments, a parameter indicative of a current number of failed deployments, and a maximum allowable number of failed deployments, and wherein determining that the maximum allowable deployment failure rate would not be exceeded if the requesting node attempted and failed to deploy the update information comprises:

determining that the number of active deployments incremented by one would not exceed a difference between the maximum allowable number of failed deployments and the current number of failed deployments.

23. A system comprising:

a plurality of nodes comprising;

at least one bookkeeping node storing data relating to one or more deployment parameters, wherein the one or more deployment parameters comprise a maximum allowable deployment failure rate,

one or more download nodes storing the update information, and

a requesting node,

wherein the at least one bookkeeping node comprises;

at least one processor; and

at least one memory storing computer-executable instructions that upon execution by the at least one processor configure the at least one processer to;

receive a request from the requesting node to deploy the update information,

determine whether the maximum allowable deployment failure rate would be exceeded if the requesting node attempted and failed to deploy the update information, and

authorize the requesting node to deploy the update information if it is determined that maximum allowable deployment failure rate would not be exceeded, wherein authorizing comprises directing, by the bookkeeping node, the requesting node to obtain the update information from at least one download node of the one or more download nodes storing the update information, or prevent the requesting node from deploying the update information if it is determined that the maximum allowable deployment failure rate would be exceeded.

24. The system of claim 23, wherein the requesting node is a first requesting node, the request is a first request, the at least one download node is a first at least one download node, and the one or more deployment parameters further comprise a maximum allowable deployment time, and wherein the at least one processor is further configured to execute the computer-executable instructions to:

receive a second request from a second requesting node to deploy the update information,

determine whether a deployment time associated with deployment of the update information by the second requesting node exceeds the maximum allowable deployment time, and

authorize the second requesting node to deploy the update information if it is determined that the deployment time does not exceed the maximum allowable deployment time, wherein authorizing comprises directing, by the bookkeeping node, the second requesting node to obtain the update information from a second at least one download node of the one or more download nodes storing the update information, or prevent the second requesting node from deploying the update information if it is determined that the deployment time exceeds the maximum allowable deployment time.

25. The system of claim 24, wherein the plurality of nodes further comprises at least one deploying node currently deploying the update information, wherein the one or more deployment parameters comprise a parameter indicating a number of the at least one deploying node, and wherein the at least one processor is further configured to execute the computer-executable instructions to determine the deployment time based at least in part on the number of the at least one deploying node.

26. The system of claim 23, wherein:

the update information comprises a plurality of portions of update information,

the at least one bookkeeping node comprises a plurality of bookkeeping nodes, each of the plurality of bookkeeping nodes storing a respective at least a portion of the data relating to the one or more deployment parameters,

the at least one download node comprises a plurality of download nodes, each of the plurality of download nodes storing a respective one or more of the portions of the plurality of portions of the update information, and

the requesting node, each of the at least one deploying node, and each of the plurality of download nodes is a same node as a respective one of the plurality of bookkeeping nodes.

27. A system comprising:

a plurality of nodes, wherein each node stores a respective portion of update information and respective data relating to one or more deployment parameters associated with deployment of at least the respective portion of the update information, wherein the one or more deployment parameters comprise a maximum allowable deployment failure rate, and wherein each node comprises;

at least one processor, and

at least one memory comprising computer-executable instructions,

wherein execution of the computer-executable instructions stored in the at least one memory of a first node of the plurality of nodes by the at least one processor of the first node configures the at least one processor of the first node to perform operations comprising;

determining, based at least in part on the one or more deployment parameters, that deployment of the update information by the first node is authorized by determining that the maximum allowable deployment failure rate would not be exceeded if the first node attempted and failed to deploy the update information, and

obtaining a respective portion of the update information from a second node of the plurality of nodes.

28. The system of claim 27, the operations further comprising:

determining a number of nodes currently deploying one or more portions of the update information by executing an aggregation algorithm, and determining the maximum allowable deployment failure rate based at least in part on the number of nodes currently deploying the one or more portions of the update information.

29. The system of claim 27, wherein the update information comprises at least one of:

a software update or a firmware update.