Security patch update processor

• US 8,473,938 B1
• Filed: 06/21/2007
• Issued: 06/25/2013
• Est. Priority Date: 06/21/2007
• Status: Active Grant

• Current Assignee: Open Invention Network LLC
• Original Assignee: Open Invention Network LLC
• Inventors: Feeser, Colin Lee
• Primary Examiner(s): Nahar, Qamrun
• Application Number:
  US11/766,503
• Time in Patent Office: 2,196 Days
• Field of Search: 717/168, 717/169, 717/171, 717/173
• US Class Current: 717/168
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: G06F 9/4843 by program, e.g. task dispatcher, supervisor, operating system
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration

Abstract

A method, system, and program product are provided for updating software deployed on computers in an enterprise computer network wherein each computer has a software update agent installed to enable the computer to receive software patch updates. The method includes determining a required software component and updates based upon a location in a configuration file; determining a version of the agent and updating the agent if required; selecting a server from which required updates are to be downloaded; scanning a plurality of software components on a selected computer and comparing the components with updates available on the server to determine required updates; downloading the required patches from the server; and installing the patches on the selected computer. The system includes components that perform the method steps when operated on a computer in the network. A computer readable medium implements the method for updating software deployed on computers in a network.

Claims

1. A processor-implemented method for updating software deployed on a plurality of computers in an enterprise computer network wherein each computer has a software update agent installed to enable the computer to receive software patch updates, comprising the steps of:

a selected computer determining a required software component and software patch updates based upon a location set in a configuration file;

the computer determining a version of the software update agent and updating the software update agent if required;

the computer selecting a server from which required software patch updates are to be downloaded;

the computer scanning a plurality of software components on the computer and comparing the software components with software patch updates available on the selected server to determine required software patch updates;

the computer downloading the required software patches from the selected server;

the computer installing the required software patches on the computer; and

the computer executing at least one command-line switch which identifies the location of the configuration file and wherein all subsequent software component and software patch update settings are provided from the configuration file, wherein the configuration file is located in a same folder as a patch update processor executable file in which case the command-line switches override settings in the configuration file.

2. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 wherein the step of updating the software update agent is based on a minimum version of the software update agent, an update location, and a command-line set in the configuration file.

3. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 further comprising adding or removing a server update service setting based on a command line switch or the configuration file.

4. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 wherein the step of selecting a server comprises determining a server update service setting in the configuration file.

5. The processor-implemented method for updating software deployed on a plurality of computers of claim 4 further comprising selecting a server update service server if the server update service setting is set.

6. The processor-implemented method for updating software deployed on a plurality of computers of claim 4 further comprising selecting a software update server if the server update service setting is not set.

7. The processor-implemented method for updating software deployed on a plurality of computers of claim 5 wherein the server update service server is located within an enterprise firewall.

8. The processor-implemented method for updating software deployed on a plurality of computers of claim 6 wherein the software update server is located on a software provider'"'"'s website.

9. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 further comprising downloading the required software patch updates from a software provider'"'"'s website to a server update service server on a periodic basis.

10. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 further comprising logging all operations performed during the software patch update process in a log file.

11. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 further comprising versioning of the software update patches using the configuration file.

12. The processor-implemented method for updating software deployed on a plurality of computers of claim 3 wherein adding or removing a server update service setting is performed using a configuration file registry.

13. The processor-implemented method for updating software deployed on a plurality of computers of claim 1 further comprising rebooting of the selected computer if required for the software patches to become operational.

14. A system for updating software deployed on a plurality of computers in an enterprise computer network wherein each computer has a software update agent installed to enable the computer to receive software patch updates, comprising:

a processor;

a memory; and

an patch update processor application that, when executed on the processor,

determines a required software component and software patch updates based upon a location set in a configuration file;

determines a version of the software update agent and updates the software update agent if required;

selects a server from which required software patch updates are to be downloaded;

scans a plurality of software components on a selected computer and compares the software components with software patch updates available on the selected server to determine required software patch updates;

downloads the required software patches from the selected server;

installs the required software patches on the selected computer; and

executes at least one command-line switch which identifies the location of the configuration file and wherein all subsequent software component and software patch update settings are provided from the configuration file, wherein the configuration file is located in a same folder as a patch update processor executable file in which case the command-line switches override settings in the configuration file.

15. The system for updating software deployed on a plurality of computers of claim 14 wherein the system determines a minimum version of the software update agent and an update location from which an updated version of the software agent can be downloaded.

16. The system for updating software deployed on a plurality of computers of claim 14 further comprising the system enabling adding or removing a server update service setting based on a command line switch or the configuration file.

17. The system for updating software deployed on a plurality of computers of claim 14 wherein the system determines a server update service setting in the configuration file.

18. The system for updating software deployed on a plurality of computers of claim 17 wherein the system selects a service update service server if the server update service setting is set.

19. The system for updating software deployed on a plurality of computers of claim 17 wherein the system selects a software update server if the server update service setting is not set.

20. The system for updating software deployed on a plurality of computers of claim 18 wherein the server update service server is located within an enterprise firewall.

21. The system for updating software deployed on a plurality of computers of claim 19 wherein the software update server is located on a software provider'"'"'s website.

22. The system for updating software deployed on a plurality of computers of claim 14 further comprising the system downloading the required software patch updates from a software provider'"'"'s website to a server update service server on a periodic basis.

23. The system for updating software deployed on a plurality of computers of claim 14 further comprising the system logging all operations performed during the software patch update process in a log file.

24. The system for updating software deployed on a plurality of computers of claim 14 further comprising the system versioning of the software update patches using the configuration file.

25. The system for updating software deployed on a plurality of computers of claim 16 wherein the system uses a configuration file registry to add or remove a server update service setting.

26. The system for updating software deployed on a plurality of computers of claim 14 further comprising the system rebooting the selected computer if required for the software patches to become operational.

27. A non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers in an enterprise computer network when operated on a processor, by performing:

determining a required software component and software patch updates based upon a location set in a configuration file;

determining a version of a software update agent installed on the computer and updating the software update agent if required;

selecting a server from which required software patch updates are to be downloaded;

scanning a plurality of software components on a selected computer and comparing the software components with software patch updates available on the selected server to determine required software patch updates;

downloading the required software patches from the selected server;

installing the required software patches on the selected computer; and

executing at least one command-line switch which identifies the location of the configuration file and wherein all subsequent software component and software patch update settings are provided from the configuration file, wherein the configuration file is located in a same folder as a patch update processor executable file in which case the command-line switches override settings in the configuration file.

28. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein updating the software agent comprises determining a minimum version of the software update agent and an update location from which an updated version of the software agent can be downloaded.

29. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein the method further comprises adding or removing a server update service setting based on a command line switch or the configuration file.

30. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein selecting a server comprises determining a server update service setting in the configuration file.

31. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 30 wherein the method further comprises selecting a server update services server if the service update service setting is set.

32. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 30 wherein the method further comprises selecting a software update server if the server update service setting is not set.

33. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein the method further comprises downloading the required software patch updates from a software provider'"'"'s website to a server update service server on a periodic basis.

34. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein the method further comprises logging all operations performed during the software patch update process in a log file.

35. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein the method further comprises versioning the software update patches using the configuration file.

36. The non-transitory computer readable storage medium containing instructions for updating software deployed on a plurality of computers of claim 27 wherein adding or removing a server update service setting is performed using a configuration file registry.