Software auditing mechanism for a distributed computer enterprise environment

• US 5,754,763 A
• Filed: 10/01/1996
• Issued: 05/19/1998
• Est. Priority Date: 10/01/1996
• Status: Expired due to Term

• Current Assignee: Cloud Software Group Switzerland GmbH
• Original Assignee: International Business Machines Corporation
• Inventors: Bereiter, Thomas William
• Primary Examiner(s): DeCady, Albert
• Application Number:
  US08/724,659
• Time in Patent Office: 595 Days
• Field of Search: 395/186, 395/187.01, 395/712, 380/3, 380/4, 380/23, 380/25
• US Class Current: 726/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

A large distributed enterprise includes computing resources that are organized into one or more managed regions, each region being managed by a management server servicing one or more gateway machines, with each gateway machine servicing a plurality of endpoint machines. A method of auditing software usage in the environment begins by deriving a count of a number of simultaneous method invocations of one or more application programs that occur in response to a system management task. The count is then used to determine whether an authorized number of copies of each application program within the managed region has been exceeded. This protocol obviates a dedicated licensing server.

Claims

1. A method of auditing software usage in a managed network environment wherein computing resources are logically organized into one or more managed regions, each region being managed by a management server servicing one or more gateway machines, each gateway machine servicing a plurality of endpoint machines, comprising the steps of:

responsive to a system management task, collecting information about a number of nodes of the managed region affected by the system management task and the type of machine located at each affected node; and

using the information to audit software usage in the managed network.

2. The method as described in claim 1 wherein the step of using the information to audit software usage includes the steps of:

determining the number of nodes associated with each type of machine; and

calculating a number of software copies of a particular program that are running on the nodes associated with each type of machine.

3. The method as described in claim 2 further including the step of comparing the calculated number of software copies of the particular program with a given number of software copies of the particular program to determine whether software usage has exceeded a given authorization.

4. The method as described in claim 3 wherein the given number of software copies of the particular program is the number of licensed copies of the particular program operating within the managed region.

5. The method as described in claim 1 wherein the information is used by a system administrator of the managed region to audit software usage.

6. The method as described in claim 1 wherein the information is used by a third party that remotely accesses the managed region to audit software usage.

7. The method as described in claim 1 wherein the system management task is initiated by having an object running on a first machine invoke an operation on an object on a second machine.

8. The method as described in claim 7 wherein the invocation is secured by an authentication protocol.

9. The method as described in claim 8 wherein the information is collected by counting a number of invocations across the managed region as the system management task is carried out.

10. The method as described in claim 1 wherein the endpoint machines include at least some personal computers that are relocatable within the managed region.

11. A method of auditing software usage in a managed network environment wherein computing resources are logically organized into one or more managed regions, each region being managed by a management server servicing one or more gateway machines, each gateway machine servicing a plurality of endpoint machines, comprising the steps of:

deriving a count of a number of simultaneous method invocations of a given application program that occur in response to a system management task; and

using the count to determine whether an authorized number of copies of the application program within the managed region has been exceeded.

12. The method as described in claim 11 wherein the step of using the count includes the steps of:

comparing the count with the authorized number of copies; and

issuing a notification when the count exceeds the authorized number of copies.

13. The method as described in claim 11 wherein the method invocations occur across machine boundaries in the managed region.

14. The method as described in claim 13 wherein an invocation is secured by an authentication protocol.

15. In a large distributed enterprise wherein computing resources are organized into one or more managed regions, each region being managed by a management server servicing one or more gateway machines, each gateway machine servicing a plurality of endpoint machines, a method of auditing software usage without a dedicated licensing server, comprising the steps of:

deriving a count of a number of simultaneous method invocations of one or more application programs that occur in response to a system management task; and

using the count to determine whether an authorized number of copies of each application program within the managed region has been exceeded.

16. In the method of claim 15, wherein the step of using the count includes the steps of:

comparing the count with the authorized number of copies; and

issuing a notification when the count exceeds the authorized number of copies.

17. In the method of claim 16, wherein the method invocations occur across machine boundaries in the managed region.

18. A computer connectable into a large distributed enterprise wherein computing resources are organized into one or more managed regions, each region being managed by a management server servicing one or more gateway machines, each gateway machine servicing a plurality of endpoint machines, the computer comprising:

a processor;

an operating system; and

an audit mechanism, comprising;

means for deriving a count of a number of simultaneous method invocations of a given application program that occur in response to a system management task; and

means for using the count to determine whether an authorized number of copies of the application program within the managed region has been exceeded.

19. The computer as described in claim 18 wherein the computer also includes an object-oriented system management framework for managing the method invocations.

20. A computer program product for use in a computer having a processor, an interface, a memory, the computer connectable into a large distributed enterprise wherein computing resources are organized into one or more managed regions, each region being managed by a management server servicing one or more gateway machines, each gateway machine servicing a plurality of endpoint machines, the computer program product comprising:

a computer-readable storage medium having a substrate; and

program data encoded in the substrate of the computer-readable storage medium, wherein the program data comprises;

means for deriving a count of a number of simultaneous method invocations of a given application program that occur in response to a system management task; and

means for using the count to determine whether an authorized number of copies of the application program within the managed region has been exceeded.