PEER-TO-PEER REMEDIATION

• US 20130007295A1
• Filed: 09/13/2012
• Published: 01/03/2013
• Est. Priority Date: 12/08/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Choe, Calvin Choon-Hwan
• Granted Patent: US 8,924,577 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A network in which peer-to-peer remediation is provided to keep clients in the network up-to-date. As network clients establish peer-to-peer connections, they exchange status information. The status information allows the clients to mutually identify whether one client is more out-of-date than another. The more up-to-date client provides update information to the more out-of-date client. To preserve the integrity of the update process, updates are provided as signed binary files and are only applied by the client receiving the update if the binary file may be authenticated by the recipient.

Claims

1. A system comprising:

a server computing device configured for recognizing an attempt by a client to access the server computing device;

the server computing device further configured for determining whether or not a status of the client complies with a quarantine enforcement policy;

the server computing device further configured for indicating to the client in response to the status not complying with the quarantine enforcement policy at least one particular patch that, when successfully installed on the client, will cause the status to comply with the quarantine enforcement policy; and

the server computing device further configured for allowing the attempt in response to the status complying with the quarantine enforcement policy, the allowing the attempt resulting in the client accessing the server computing device; and

the server computing device further configured for denying the attempt in response to the status not complying with the quarantine enforcement policy, the denying the attempt resulting in the client failing to access the server computing device.

2. The system of claim 1 where the status comprises an update status of software installed on the client.

3. The system of claim 2 where the software comprises an operating system.

4. The system of claim 2 where the software comprises patches installed on the client.

5. The system of claim 1 where the status comprises a plurality of portions, and where each portion indicates a particular status that corresponds to a different software or patch installed on the client.

6. The system of claim 5 where the status complying with the quarantine enforcement policy is based on each particular status complying with the quarantine enforcement policy.

7. The system of claim 1, the server computing device further configured for identifying patches that, when installed on the client, are sufficient to bring the client into compliance with the quarantine enforcement policy.

8. A method comprising:

recognizing, by a server computing device, an attempt by a client to access the server computing device;

determining, by the server computing device, whether or not a status of the client complies with a quarantine enforcement policy;

indicating to the client in response to the status not complying with the quarantine enforcement policy at least one particular patch that, when successfully installed on the client, will cause the status to comply with the quarantine enforcement policy; and

allowing the attempt in response to the status complying with the quarantine enforcement policy, the allowing the attempt resulting in the client accessing the server computing device; and

denying the attempt in response to the status not complying with the quarantine enforcement policy, the denying the attempt resulting in the client failing to access the server computing device.

9. The method of claim 8 where the status comprises an update status of software installed on the client.

10. The method of claim 9 where the software comprises an operating system.

11. The method of claim 9 where the software comprises patches installed on the client.

12. The method of claim 8 where the status comprises a plurality of portions, and where each portion indicates a particular status that corresponds to a different software or patch installed on the client.

13. The method of claim 12 where the status complying with the quarantine enforcement policy is based on each particular status complying with the quarantine enforcement policy.

14. The method of claim 8 further comprising identifying patches that, when installed on the client, are sufficient to bring the client into compliance with the quarantine enforcement policy.

15. At least one storage device storing computer-executable instructions that, when executed by a client computing device, cause the client computing device to perform a method comprising:

recognizing an attempt by a client to access the server computing device;

determining whether or not a status of the client complies with a quarantine enforcement policy;

indicating to the client in response to the status not complying with the quarantine enforcement policy at least one particular patch that, when successfully installed on the client, will cause the status to comply with the quarantine enforcement policy; and

allowing the attempt in response to the status complying with the quarantine enforcement policy, the allowing the attempt resulting in the client accessing the server computing device; and

denying the attempt in response to the status not complying with the quarantine enforcement policy, the denying the attempt resulting in the client failing to access the server computing device.

16. The at least one storage device of claim 15 where the status comprises an update status of software installed on the client.

17. The at least one storage device of claim 16 where the software comprises an operating system.

18. The at least one storage device of claim 16 where the software comprises patches installed on the client.

19. The at least one storage device of claim 15 where the status comprises a plurality of portions, and where each portion indicates a particular status that corresponds to a different software or patch installed on the client.

20. The at least one storage device of claim 15, the method further comprising identifying patches that, when installed on the client, are sufficient to bring the client into compliance with the quarantine enforcement policy.