On-Demand active role-based software provisioning

Abstract

Automated software provisioning based upon a set of role definitions for a user of a configurable device such as a computer or personal digital assistant. The present invention may be realized as an enhancement or extension to currently available software distribution tools which are used to distribute software to remote and local machines, and to permit unattended software installation and maintenance. The invention provides role-based software provisioning which automatically distributes the appropriate software programs and updates to computers that are owned by users based on the role of each user, thereby avoiding the need for intensive manual efforts to determine which computers need what software. The invention may also be interfaced to a License Management system in order to accomplish automatic recovery of unused software licenses, and to obtain permission for installing new licenses, based on user role changes.

1 . A method for automatically provisioning a networked device with one or more software programs comprising the steps of:
 associating with said user and a networked device at least one computer-readable role definition, said role definition containing at least one software package identifier according to an organizational role to be performed by said user;   storing said role definition in a medium using a directory service protocol;   retrieving a software package as identified by said software package identifier; and   configuring said device with said retrieved software package using said directory service protocol.   
   
   
       2 . The method as set forth in  claim 1  further comprising the steps of:
 configuring said device to send an event notification to a configuration management system upon modification of said stored role definition;   reevaluating the software package requirements of said device with respect to said modified stored role definition; and   reconfiguring said device's software packages according to said modified role definition including uninstalling any software packages no longer needed for said modified role.   
   
   
       3 . The method as set forth in  claim 1  further comprising providing a Configuration Management tool to perform said steps of storing, retrieving and configuring. 
   
   
       4 . The method as set forth in  claim 1  further comprising providing a directory service protocol selected from the list of X.500, Lightweight Directory Access Protocol, Active Directory, and Network Directory Service. 
   
   
       5 . The method as set forth in  claim 2  wherein said step of configuring said device to send an event notification comprises configuring said device to send a Lightweight Directory Access Protocol event notification. 
   
   
       6 . The method as set forth in  claim 2  wherein said step of configuring said device to send an event notification comprises configuring said device to send a Java Naming and Directory Interface event notification. 
   
   
       7 . The method as set forth in  claim 1  wherein said steps of retrieving a software package and configuring said device with said retrieved software package comprises consulting a license management server to obtain permission to install said software package, and if permission is denied, suppressing configuration of said device with said retrieve software package. 
   
   
       8 . The method as set forth in  claim 2  wherein said steps of reevaluating the software package requirements of said device with respect to said modified stored role definition and reconfiguring said device's software packages according to said modified role definition including uninstalling any software packages no longer needed for said modified role further comprise notifying a license manager server of said uninstalled software package such that related licenses may be recovered. 
   
   
       9 . A computer readable medium encoded with software for automatically provisioning a networked device with one or more software programs, said software performing the steps of:
 associating with said user and a networked device at least one computer-readable role definition, said role definition containing at least one software package identifier according to an organizational role to be performed by said user;   storing said role definition in a medium using a directory service protocol;   retrieving a software package as identified by said software package identifier; and   configuring said device with said retrieved software package using said directory service protocol.   
   
   
       10 . The computer readable medium as set forth in  claim 9  further software for performing the steps of:
 configuring said device to send an event notification to a configuration management system upon modification of said stored role definition;   reevaluating the software package requirements of said device with respect to said modified stored role definition; and   reconfiguring said device's software packages according to said modified role definition including uninstalling any software packages no longer needed for said modified role.   
   
   
       11 . The computer readable medium as set forth in  claim 9  further comprising software including a Configuration Management tool configured to perform said steps of storing, retrieving and configuring software packages. 
   
   
       12 . The computer readable medium as set forth in  claim 9  further comprising software for providing a directory service protocol selected from the list of X.500, Lightweight Directory Access Protocol, Active Directory, and Network Directory Service. 
   
   
       13 . The computer readable medium as set forth in  claim 10  wherein said software for configuring said device to send an event notification comprises software for configuring said device to send a Lightweight Directory Access Protocol event notification. 
   
   
       14 . The computer readable medium as set forth in  claim 9  wherein said software for configuring said device to send an event notification comprises software for configuring said device to send a Java Naming and Directory Interface event notification. 
   
   
       15 . The computer readable medium as set forth in  claim 9  wherein said software for retrieving a software package and configuring said device with said retrieved software package comprises software for consulting a license management server to obtain permission to install said software package, and if permission is denied, and for suppressing configuration of said device with said retrieve software package. 
   
   
       16 . The computer readable medium as set forth in  claim 10  wherein said software for reevaluating the software package requirements of said device with respect to said modified stored role definition and reconfiguring said device's software packages according to said modified role definition including uninstalling any software packages no longer needed for said modified role further comprises software for a notifying license manager server of said uninstalled software package such that related licenses may be recovered. 
   
   
       17 . A system for automatically provisioning a networked computing device with one or more software programs, said system comprising:
 at least one computer-readable role definition associated with said user and a networked device, said role definition containing at least one software package identifier according to an organizational role to be performed by said user, said role definition being stored in a medium using a directory service protocol;   a software package retriever for retrieving a software package as identified by said software package identifier in said role definition; and   a system configurator for configuring said networked computing device with said retrieved software package using a directory service protocol.   
   
   
       18 . The system as set forth in  claim 17  wherein said system configurator is further adapted to configure said networked computing device to send an event notification to a configuration management system upon modification of said stored role definition; reevaluate the software package requirements of said networked computing device with respect to said modified stored role definition; and reconfigure said device's software packages according to said modified role definition including uninstalling any software packages no longer needed for said modified role. 
   
   
       19 . The system as set forth in  claim 17  further comprising a Configuration Management tool adapted perform said steps of storing, retrieving and configuring. 
   
   
       20 . The system as set forth in  claim 17  further comprising a directory service protocol selected from the list of X.500, Lightweight Directory Access Protocol, Active Directory, and Network Directory Service. 
   
   
       21 . The system as set forth in  claim 18  wherein said configurator is adapted to configure said networked computing device to send a Lightweight Directory Access Protocol event notification. 
   
   
       22 . The system as set forth in  claim 18  wherein said configurator is adapted to configure said networked computing device to send a Java Naming and Directory Interface event notification. 
   
   
       23 . The system as set forth in  claim 17  further comprising a License Management tool adapted to manage an inventory of software package licenses.