System and Method for Updating Network Computer Systems

Abstract

An update system configured to provide software updates, software patches and/or other data packets to one or more computer systems via a network is disclosed. The update system may interact with a network management system, such as an enterprise management system, to distribute data packets and gather configuration information. The update system may generate and send commands to the network management system. The network management system may carry out the commands to distribute data packets and/or gather configuration information.

1 - 113 . (canceled) 
     
     
         114 . An update system comprising:
 a network interface configured to:
 receive, from the server, client configuration information associated with a plurality of client computer systems; and 
 communicate a message to the server; 
   a memory configured to store:
 a list of data packet entries, each data packet entry comprising:
 first information identifying a data packet; 
 second information indicating which client computer systems of the plurality of client computer systems should have the data packet installed; and 
 one or more conditions for the installation of the data packet. 
 
 the client configuration information; and 
   a processor configured to:
 select a data packet to install on a client computer system based on a comparison of the client configuration information to the second information; 
 determine that a client computer system of the plurality of client computer systems meets the one or more conditions associated with the data packet based on the client configuration information; 
 generate the message in response to the determination that the client computer system meets the one or more conditions, the message comprising a command requesting the server to communicate the data packet to an agent application installed on the client computer system; and 
 verify that the data packet was successfully installed on the client computer systems. 
   
     
     
         115 . The update system of  claim 114 , wherein the processor is further configured to:
 determine an installation status of the data packet on two or more client computer systems of the plurality of client computer systems; and   generate a view for display to a user, the view providing a graphical representation of the installation status.   
     
     
         116 . The update system of  claim 114 , wherein:
 the data packet comprises a software patch associated with a client software program; and   the client configuration information comprises information indicating whether the software patch is installed on a client computer system.   
     
     
         117 . The update system of  claim 114 , wherein the one or more conditions comprise one or more of the following:
 a condition that a client software program is installed on the client computer system;   a condition that a client software program is not installed on the client computer system;   a condition that a version of an operating system is installed on the client computer system; and   a condition associated with content of a system registry of a client computer system.   
     
     
         118 . The update system of  claim 114 , wherein:
 the memory is further configured to store group data associating one or more client computer systems with a group; and   the processor is further configured to:
 assign the one or more client computer systems to the group based on one or more portions of the client configuration information; and 
 generate a view for display to a user, the view providing a graphical depiction of the one or more client computer systems assigned to the group. 
   
     
     
         119 . The update system of  claim 118 , wherein:
 the interface is further configured to receive user input selecting a subset of the plurality of client computer systems; and   the processor is further configured to assign the one or more client computer systems to the group based on the user input.   
     
     
         120 . The update system of  claim 114 , wherein the server comprises a computer program executed by the processor of the update system. 
     
     
         121 . The update system of  claim 114 , wherein the server comprises a computer program executed by a processor of a computer system remote from the update system. 
     
     
         122 . The update system of  claim 114 , wherein:
 the memory is further configured to store the data packet; and   the message further comprises the data packet.   
     
     
         123 . The update system of  claim 114 , wherein the processor is further configured to:
 identify one or more prohibited data packets present on a client computer system based on a comparison of the configuration information to the list; and   generate a view for display to a user, the view depicting the one or more prohibited data packets.   
     
     
         124 . The update system of  claim 114 , wherein the client configuration information comprises:
 hardware information identifying one or more hardware components of a client computer system;   data packet information indicating whether the data packet is installed on the client computer system; and   operating system information indicating a version of an operating system installed on the client computer system   
     
     
         125 . A non-transitory computer-readable medium comprising logic that, when executed by a processor, is operable to:
 access client configuration information comprising:
 hardware information identifying one or more hardware components of a client computer system; 
 data packet information indicating whether the data packet is installed on the client computer system; and 
 operating system information indicating a version of an operating system installed on the client computer system; 
   access a control list comprising a plurality of data packet entries, each data packet entry comprising:
 a data packet identifier; and 
 one or more conditions associated with a data packet; 
   determine that the client computer system meets the one or more conditions associated with the data packet based on the client configuration information;   install the data packet on the client computer system in response to the determination that the client computer system meets the one or more conditions associated with the data packet; and   verify that the data packet was successfully installed on the client computer system.   
     
     
         126 . The medium of  claim 125 , wherein the data packet comprises a software patch associated with a client software program installed on the client computer system. 
     
     
         127 . The medium of  claim 125 , wherein the installation of the data packet on the client computer system is triggered by a command from a server remote from the client computer system. 
     
     
         128 . The medium of  claim 125 , wherein the one or more conditions comprise one or more of the following:
 a condition that a client software program is installed on the client computer system;   a condition that a client software program is not installed on the client computer system;   a condition that a version of an operating system is installed on the client computer system; and   a condition associated with content of a system registry of a client computer system.   
     
     
         129 . The medium of  claim 125 , wherein the client computer system is assigned to a group based on the client configuration information. 
     
     
         130 . The medium of  claim 125 , wherein the client computer system is assigned to a group based on input from a user. 
     
     
         131 . The medium of  claim 125 , wherein the logic, when executed by the processor, is further operable to determine the client configuration information at a plurality of scheduled times. 
     
     
         132 . The medium of  claim 125 , wherein the logic, when executed by the processor, is further operable to determine audit information associated with the computer system, the audit information comprising information identifying one or more unknown data packets on the client computer system. 
     
     
         133 . The medium of  claim 125 , wherein the logic, when executed by the processor, is further operable to determine audit information associated with the computer system, the audit information comprising information identifying one or more prohibited data packets on the client computer system. 
     
     
         134 . An update system comprising:
 a network interface configured to:
 receive, from the server, client configuration information associated with a plurality of client computer systems; 
 receive input from a user; and 
 communicate a message to the server; 
   a memory configured to store:
 the client configuration information; and 
 a list of software patch entries, each entry associated with a software patch and comprising:
 first information identifying the software patch; and 
 second information identifying which client computer systems of the plurality of client computer systems should have the software patch installed; and 
 
   a processor configured to:
 identify one or more software patches to be installed on one or more client computer systems of the plurality of client computer systems based on the client configuration information and the list of software patch entries; 
 generate a view for display to a user, the view identifying the one or more software patches; 
 process the input from the user, the input requesting installation of the one or more software patches; 
 generate the message in response to the input, the message comprising a command requesting the server to communicate the one or more software patches to an agent application installed on each of the one or more client computer systems; 
 determine an installation status of the one or more software patches on the one or more client computer systems; 
 generate a view for display to a user, the view providing a graphical representation of the installation status.