Software update syndication

• US 8,645,942 B2
• Filed: 05/26/2006
• Issued: 02/04/2014
• Est. Priority Date: 05/26/2006
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Maj, Artur
• Primary Examiner(s): DENG, ANNA CHEN
• Application Number:
  US11/577,483
• Publication Number:
  US 20090055817A1
• Time in Patent Office: 2,811 Days
• Field of Search: 717171-173, 717176-178
• US Class Current: 717/172
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

Methods, systems, and machine-readable media are disclosed for distributing software packages to one or more clients. Providing software to one or more clients can comprise generating a software package and publishing the package to a media accessible by the one or more clients. A description of the software package can also be generated and published. The description can identify the software package, contents of the software package, and uses of the software package. A client can obtain software packages from one or more servers by reading the description of software packages available on the one or more servers. A determination can be made as to whether the description indicates at least one of the software packages is available for the client. In response to determining at least one of the software packages is available for the client, the software package can be downloaded and installed on the client.

Claims

1. A method of providing software to one or more clients, the method comprising

generating by a first server a plurality of software packages for distribution to the one or more clients, wherein the first server comprises a server of a provider of the plurality of software packages;

publishing the plurality of software packages by the first server to a media accessible by the one or more clients;

generating by the first server a description of each of the plurality of software packages, each description identifying one of the plurality of software packages, contents of the identified software package, and uses of the identified software package;

appending a signature to each of the descriptions of the software packages, each signature identifying a source of each of the description;

publishing the descriptions of the plurality of software packages by the first server to the media accessible by the one or more clients of a user group, wherein the user group comprises a corporation or a university;

reading by a second server the descriptions of the plurality of software packages from the first server, wherein the second server is a server of the user group and is not a server of the software provider;

verifying by a second server an origin of each of the descriptions of the plurality of software packages from the first server based on the signature of each of the descriptions;

in response to verifying the origin of each of the descriptions is valid, determining by the second server whether the descriptions indicate that each of the plurality of software packages is available for a plurality of clients communicatively coupled with the second server based on at least in part on one or more specification files maintained by the second server for each of the plurality of clients;

in response to determining each of the plurality of software packages is available for the plurality of clients, downloading the plurality of software packages by the second server from the first server, wherein downloading the plurality of software packages by the second server comprises obtaining by the second server from the first server the plurality of software packages and the descriptions, publishing the plurality of software packages by the second server to a media accessible by the plurality of clients, and publishing the descriptions of the plurality of software packages by the second server to the media accessible by the plurality of clients, wherein publishing the plurality of software packages and the descriptions by the second server comprises making the downloaded plurality of software packages available from the second server to the clients.

2. The method of claim 1, wherein generating the plurality of software packages further comprises compressing each of the plurality of software packages.

3. The method of claim 2, further comprising appending by the first server a signature to each of the compressed plurality of software packages the signature identifying a source of the plurality of software packages.

4. The method of claim 3, wherein the source of the plurality of software packages and the source of the descriptions are different.

5. The method of claim 1, wherein publishing the plurality of software packages comprises making the plurality of software packages available via a first web server.

6. The method of claim 5, wherein publishing the descriptions comprises making the descriptions available on the first web server.

7. The method of claim 5, wherein publishing the descriptions comprises making the descriptions available on a second web server.

8. The method of claim 1, wherein publishing the plurality of software packages comprises writing the plurality of software packages to a removable media.

9. The method of claim 8, wherein publishing the descriptions of the software packages comprises writing the descriptions to the removable media.

10. The method of claim 1, wherein each of the descriptions comprises an identifier of an operating system for which the identified software package is written.

11. The method of claim 10, wherein each of the descriptions comprises an identifier of a language for which the identified software package is written.

12. The method of claim 11, wherein each of the descriptions comprises an Uniform Resource Identifier (URI) for the identified software package.

13. The method of claim 1, wherein at least one of the plurality of software packages comprises an update of an application.

14. The method of claim 13, wherein the description of the at least one software package comprises an identifier of an application the at least one software package updates.

15. The method of claim 14, wherein the description of the at least one software package further comprises an identifier of one or more prerequisite updates.

16. The method of claim 1, wherein at least one of the plurality of software packages comprises a new application.

17. The method of claim 1, wherein generating the plurality of software packages further comprises encrypting each of the plurality of software packages with a client certificate.

18. The method of claim 1, further comprising logging a client access of the plurality of software packages by the second server.

19. The method of claim 18, wherein logging comprises recording an identifier of each of the plurality of software packages and an identifier of the client.

20. The method of claim 1, further comprising:

reading, by a client of the plurality of clients, the descriptions of the plurality of software packages from the second server;

determining, by the client, whether the descriptions from the second server indicate one of the plurality of software packages is available for the client; and

in response to determining one of the plurality of software packages is available for the client, downloading, by the client, the determines one of the plurality of software packages from the second server.

21. A system comprising:

a first server comprising a software source for a software provider, the first server adapted to

generate a plurality of software packages,

publish the plurality of software packages,

generate a description of each of the plurality of software packages, each of the descriptions identifying one of the plurality of software packages, contents of the identified software package, and uses of the identified software package,

append a signature to each of the descriptions of the software packages, each signature identifying a source of the each of the description, and

publish the descriptions of the software packages;

a second server communicatively coupled with the first server and adapted to

read the descriptions of the plurality of software packages from the first server,

verify an origin of each of the descriptions based on the signature of each of the descriptions;

in response to verify origin of each of the descriptions is valid, determine whether the descriptions indicate that each of the plurality of software packages is available for a plurality of clients of a user group communicatively coupled with the second server based on at least in part on one or more specification files maintained by the second server for each of the plurality of clients,

in response to determining each of the plurality of software packages is available to the plurality of clients, download the plurality of software packages, wherein downloading the plurality of software packages by the second server comprises obtaining by the second server from the first server the plurality of software packages and the descriptions,

publish the plurality of software packages to a media accessible by the plurality of clients, and publish the descriptions of the software packages to the media accessible by the plurality of clients, wherein the second server is a server of the user group and is not a server of the software provider wherein the user group comprises a corporation or a university, and wherein publishing the plurality of software packages and the descriptions by the second server comprises making the downloaded software packages available from the second server to the clients.

22. The system of claim 21, wherein the first server is further adapted to compress each of the plurality of software packages.

23. The system of claim 22, wherein the first server is further adapted to append a signature to each of the compressed software packages.

24. The system of claim 21, wherein each of the descriptions comprises an identifier of an operating system for which the identified software package is written, and the second server determines whether the description indicates the identified software package is available for a client of the plurality of clients by comparing the identifier of an operating system for which the software package is written in the description with an indication of an operating system of the client m a specification file for the client maintained by the second server.

25. The system of claim 21, wherein each of the descriptions comprises an identifier of a language for which the identified software package is written, and the second server determines whether the description indicates the software package is available for a client of the plurality of clients by comparing the identifier of a language for which the software package is written from the description with an indication of one or more languages used on the client from a specification file for the client maintained by the second server.

26. The system of claim 21, wherein at least one of the descriptions comprises an Uniform Resource Identifier (URI) for the identified software package.

27. The system of claim 21, wherein at least one of the plurality of software packages comprises an update of an application and at least one other of the plurality of software packages comprises a new application.

28. The system of claim 27, wherein the description of each of the software packages comprises an identifier of an application the identified software package updates, and the second server determines whether the description indicates the software package is available for a client of the plurality of clients by comparing the identifier of the application the software package updates from the description and an indication of applications installed on the client from a specification file for the client maintained by the second server.

29. The system of claim 28, wherein the description of each of the software packages further comprises an identifier of one or more prerequisite updates for installing the identified software package, the specification comprises indications of updates installed on the client and the second server determines whether the description indicates the software package is available for the client by comparing the identifier of one or more prerequisite updates from the description with the indications of updates installed on the client from the specification.

30. The system of claim 21, further comprising a client of the plurality of clients adapted to read the descriptions of the plurality of software packages from the second server, determine whether the descriptions from the second server indicate one of the plurality of software packages is available for the client, and in response to determining one of the plurality of software packages is available for the client, download the determines one of the plurality of software packages from the second server.