Method and apparatus for controlling access to debugging software

• US 7,281,138 B1
• Filed: 04/03/2003
• Issued: 10/09/2007
• Est. Priority Date: 04/03/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Di Benedetto, Marco
• Primary Examiner(s): HOMAYOUNMEHR, FARID
• Application Number:
  US10/407,344
• Time in Patent Office: 1,650 Days
• Field of Search: 713/189
• US Class Current: 713/189
• CPC Class Codes: G06F 11/362 Software debugging

Abstract

A software module includes a functional portion for day-to-day management and configuration of one or more network devices. During the development of the functional portion, the software module also includes a debugging portion, used primarily for debugging and troubleshooting the functional portion. Customer access to the debugging portion is limited in various ways. The functional portion may be shipped to customers without the debugging portion, or at least without most of the debugging portion. The debugging portion (or part of the debugging portion) may be provided only on an “as-needed” basis. If part of the debugging portion is shipped with the functional portion, special permission may be required to “unlock” that part. Part of the debugging portion may be provided separately from the functional portion, for example in the form of a downloadable plug-in. Moreover, access to commands for controlling the debugging portion is limited.

Claims

1. A method of controlling access to debugging software for debugging a software code that controls one or more network devices, the method comprising:

developing, by a vendor, a first software module that comprises;

a functional portion for day-to-day management and configuration of one or more network devices; and

a debugging portion for debugging and troubleshooting the functional portion;

forming a second software module by removing at least a first part of the debugging portion from the first software module;

shipping the second software module to a customer; and

providing, after the second software module has been shipped to the customer, at least a second part of the debugging portion for debugging the second software module.

2. The method of claim 1, wherein the forming step comprises leaving a third part of the debugging portion as part of the second software module, and wherein the shipping step comprises shipping the functional portion and the third part of the debugging portion to the customer.

3. The method of claim 1, wherein the forming step comprises leaving no part of the debugging portion as part of the second software module.

4. The method of claim 1, wherein the providing step comprises forming the second part of the debugging portion as a plug-in and making the plug-in available to an operator for debugging and troubleshooting the functional portion.

5. The method of claim 1, further comprising the step of testing the second software module prior to the shipping step.

6. The method of claim 1, wherein the providing step comprises providing the second part of the debugging portion to an operator acting under the authority of the vendor.

7. The method of claim 2, wherein the providing step comprises granting permission to unlock the third part of the debugging portion.

8. The method of claim 4, wherein the plug-in is only accessible for a limited period of time.

9. The method of claim 5, further comprising the step of making available a command group for controlling the second part of the debugging portion, wherein the testing step is performed with the command group.

10. The method of claim 5, wherein the testing step is performed with software included in the second part of the debugging portion.

11. A debug plug-in for controlling a computing device to perform troubleshooting and debugging operations, the debug plug-in formed according to the following process:

developing a first software module that comprises;

a functional portion for day-to-day management and configuration of one or more network devices; and

a debugging portion for debugging and troubleshooting the functional portion;

removing files from at least a part of the debugging portion; and

storing the removed files in a computer-readable storage medium,

wherein the computer-readable storage medium is provided to the customer after the first software module has been shipped to the customer.

12. The debug plug-in of claim 11, wherein the debug plug-in is formed by the additional step of compressing the selected files before the selected files are stored in the computer-readable storage medium.

13. The debug plug-in of claim 11, wherein the debug plug-in is formed by the additional step of adding authentication information to the selected files before the selected files are stored in the computer-readable storage medium.

14. A network device having a first software module comprising a functional portion that includes software for day-to-day management and configuration of the network device, the network device configured to download a plug-in comprising a second software module for debugging the first software module, the second software module comprising first software module development software, said second software module subsequently removed after development of the first software module and provided to a customer after the first software module has been shipped to the customer.

15. The network device of claim 14, further configured to revise a password file according to information in the second software module.

16. The network device of claim 14, further configured to select software from the second software module to debug the functional portion.

17. The network device of claim 15, further configured to select software from the first software module to debug the functional portion.