System and method for updating network computer systems

Abstract

An update system configured to provide software updates, software patches and/or other data packets to one or more computer systems via a network is disclosed. The update system may interact with a network management system, such as an enterprise management system, to distribute data packets and gather configuration information. The update system may generate and send commands to the network management system. The network management system may carry out the commands to distribute data packets and/or gather configuration information.

1 . An update system comprising:
 a network interface configured to:
 receive, from a server, client configuration information associated with a plurality of client computer systems, wherein the client configuration information is determined based on scanning, by one or more scanning agents, at least some of the plurality of client computer systems; and 
 communicate a message to the server; 
   a memory configured to store:
 a list of data packet entries, each data packet entry comprising:
 first information identifying a data packet; 
 second information indicating which client computer systems of the plurality of client computer systems should have the data packet installed; 
 one or more conditions for installation of the data packet; and 
 the client configuration information; and 
 
   a processor configured to:
 select the data packet to install on a client computer system of the plurality of client computer systems based on a comparison of the client configuration information to the second information, wherein the comparison provides an indication that the data packet is transmissible to the client computer system; 
 determine that the client computer system of the plurality of client computer systems meets the one or more conditions associated with the data packet based on the client configuration information; 
 generate the message in response to the determination that the client computer system meets the one or more conditions, the message comprising a command requesting the server to communicate the data packet to an agent application installed on the client computer system; 
 verify that the data packet was successfully installed on the client computer system; 
 identify one or more prohibited data packets present on the client computer system based on comparing the client configuration information to the list; and 
 generate a view for display to a user, the view describing the one or more prohibited data packets. 
   
     
     
         2 . The update system of  claim 1 , wherein the processor is further configured to:
 determine an installation status of the data packet on two or more client computer systems of the plurality of client computer systems; and   generate a view for display to a user, the view providing a graphical representation of the installation status.   
     
     
         3 . The update system of  claim 1 , wherein:
 the data packet comprises a software patch associated with a client software program; and   the client configuration information comprises information indicating whether the software patch is installed on one or more client computer systems of the plurality of client computer systems.   
     
     
         4 . The update system of  claim 1 , wherein the one or more conditions comprise one or more of the following:
 a condition that a client software program is installed on the client computer system;   a condition that the client software program is not installed on the client computer system;   a condition that a version of an operating system is installed on the client computer system; and   a condition associated with content of a system registry of the client computer system.   
     
     
         5 . The update system of  claim 1 , wherein:
 the memory is further configured to store group data associating one or more client computer systems of the plurality of client computer systems with a group; and   the processor is further configured to:
 assign the one or more client computer systems to the group based on one or more portions of the client configuration information; and 
 generate a view for display to a user, the view providing a graphical depiction of the one or more client computer systems assigned to the group. 
   
     
     
         6 . The update system of  claim 5 , wherein:
 the network interface is further configured to receive user input selecting a subset of the plurality of client computer systems; and   the processor is further configured to assign the one or more client computer systems to the group based on the user input.   
     
     
         7 . The update system of  claim 1 , wherein the server comprises a computer program executed by the processor of the update system. 
     
     
         8 . The update system of  claim 1 , wherein the server comprises a computer program executed by another processor of a computer system remote from the update system. 
     
     
         9 . The update system of  claim 1 , wherein:
 the memory is further configured to store the data packet; and   the message further comprises the data packet.   
     
     
         10 . The update system of  claim 1 , wherein the client configuration information comprises:
 hardware information identifying one or more hardware components of the client computer system;   data packet information indicating whether the data packet is installed on the client computer system; and   operating system information indicating a version of an operating system installed on the client computer system.   
     
     
         11 . A non-transitory computer-readable medium comprising logic that, when executed by a processor, is operable to:
 access client configuration information comprising:
 hardware information identifying one or more hardware components of a client computer system; 
 data packet information indicating whether the data packet is installed on the client computer system; and 
 operating system information indicating a version of an operating system installed on the client computer system; 
   access a control list comprising a plurality of data packet entries, each data packet entry comprising:
 a data packet identifier; and 
 one or more conditions associated with a data packet; 
   determine that the client computer system meets the one or more conditions associated with the data packet based on the client configuration information, wherein the client configuration information is determined based on scanning, by one or more scanning agents, at least the client computer system;   install the data packet on the client computer system in response to an indication that the data packet is transmissible to the client computer system and in response to the determination that the client computer system meets the one or more conditions associated with the data packet;   verify that the data packet was successfully installed on the client computer system;   identify one or more prohibited data packets present on the client computer system based on comparing the client configuration information to the list; and   generate a view for display to a user, the view describing the one or more prohibited data packets.   
     
     
         12 . The medium of  claim 11 , wherein the data packet comprises a software patch associated with a client software program installed on the client computer system. 
     
     
         13 . The medium of  claim 11 , wherein installation of the data packet on the client computer system is triggered by a command from a server remote from the client computer system. 
     
     
         14 . The medium of  claim 11 , wherein the one or more conditions comprise one or more of the following:
 a condition that a client software program is installed on the client computer system;   a condition that the client software program is not installed on the client computer system;   a condition that a version of an operating system is installed on the client computer system; and   a condition associated with content of a system registry of the client computer system.   
     
     
         15 . The medium of  claim 11 , wherein the client computer system is assigned to a group based on the client configuration information. 
     
     
         16 . The medium of  claim 11 , wherein the client computer system is assigned to a group based on input from a user. 
     
     
         17 . The medium of  claim 11 , wherein the logic, when executed by the processor, is further operable to determine the client configuration information at a plurality of scheduled times. 
     
     
         18 . The medium of  claim 11 , wherein the logic, when executed by the processor, is further operable to determine audit information associated with the client computer system, the audit information comprising information identifying one or more unknown data packets on the client computer system. 
     
     
         19 . The medium of  claim 11 , wherein the logic, when executed by the processor, is further operable to determine audit information associated with the client computer system, the audit information comprising information identifying one or more prohibited data packets on the client computer system. 
     
     
         20 . An update system comprising:
 a network interface configured to:
 receive, from a server, client configuration information associated with a plurality of client computer systems, wherein the client configuration information is determined based on_scanning, by one or more scanning agents, at least some of the plurality of client computer systems; 
 receive input from a user; and 
 communicate a message to the server; 
   a memory configured to store:
 the client configuration information; and 
 a list of software patch entries, each software patch entry associated with a software patch and comprising:
 first information identifying the software patch; and 
 second information identifying which client computer systems of the plurality of client computer systems should have the software patch installed; and 
 
   a processor configured to:
 identify one or more software patches to be installed on one or more client computer systems of the plurality of client computer systems based on the client configuration information and the list of software patch entries and based on an indication that the one or more software patches are transmissible to the one or more client computer systems; 
 generate a first view for display to the user, the first view identifying the one or more software patches; 
 process the input from the user, the input requesting installation of the one or more software patches; 
 generate the message in response to the input, the message comprising a command requesting the server to communicate the one or more software patches to an agent application installed on each of the one or more client computer systems; 
 determine an installation status of the one or more software patches on the one or more client computer systems; 
 generate a second view for display to the user, the second view providing a graphical representation of the installation status; 
 identify one or more prohibited data packets present on the client computer system based on comparing the client configuration information to the list; and 
 generate a third view for display to a user, the view describing the one or more prohibited data packets.