Granted Patent B1

US 6,966,059 · App. 10/096,012 · Granted Nov 15, 2005

Abstract

Claims (86)

1. A system for efficiently disseminating computer anti-virus system components, comprising:

a server maintaining a repository of computer anti-virus system components cataloged in an on-line directory;

a replicator periodically accessing the on-line directory to identify those computer anti-virus system components in deployed clients requiring updating and pulling and forwarding the identified computer anti-virus system components to select superagents within a defined network domain; and

superagents multicasting the identified computer anti-virus system components to each deployed client;

wherein the multicasting enables a single copy of the identified computer anti-virus system components to be efficiently sent to a selected set of agents within the defined network domain by using a pre-designated network address to efficiently reference the selected set of agents;

wherein the superagents are dynamically selected within the defined network domain.

2. A system according to claim 1 , further comprising:

at least one of the superagents and the agents installing and configuring the computer anti-virus system components.

3. A system according to claim 1 , wherein the identified computer anti-virus system components are pulled via at least one of HTTP, FTP, and UDP.

4. A system according to claim 1 , further comprising:

a lookup module obtaining the on-line directory through query messages.

5. A system according to claim 4 , wherein the ICMP messages are exchanged as the query messages.

6. A system according to claim 1 , wherein a lookup submodule obtains a current online directory maintained in the repository of the server by utilizing an ICMP ping message.

7. A system according to claim 6 , wherein the ICMP ping message obtains a nearest repository for optimal bandwidth utilization.

8. A system according to claim 7 , wherein an average ping response time is determined.

9. A system according to claim 1 , wherein the clients each include the functionality of at least one of the superagents.

10. A system according to claim 1 , wherein each superagent multicasts the identified computer anti-virus system components to each deployed client in a hierarchical manner.

11. A method for efficiently disseminating computer anti-virus system components, comprising:

maintaining a repository of computer anti-virus system components cataloged in an on-line directory;

periodically accessing the on-line directory to identify those computer anti-virus system components in deployed clients requiring updating;

pulling and forwarding the identified computer anti-virus system components to select superagents within a defined network domain; and

multicasting the identified computer anti-virus system components to each deployed client utilizing superagents;

wherein the multicasting enables a single copy of the identified computer anti-virus system components to be efficiently sent to a selected set of agents within the defined network domain by using a pre-designated network address to efficiently reference the selected set of agents;

wherein the superagents are dynamically selected within the defined network domain.

12. A method according to claim 11 , further comprising:

installing and configuring the computer anti-virus system components on at least one of the superagents and the agents.

13. A method according to claim 11 , further comprising:

pulling the identified computer anti-virus system components via at least one of HTTP, FTP, and UDP.

14. A method according to claim 11 , further comprising:

obtaining the on-line directory through query messages.

15. A method according to claim 14 , further comprising:

exchanging ICMP messages as the query messages.

16. A computer-readable storage medium holding code for performing the method according to claim 11 , 12 , 13 , or 14 .

17. A system for providing automated low bandwidth updates of computer anti-virus application components, comprising:

a replicator periodically identifying components of one or more deployed computer anti-virus applications requiring updating and pulling each updated computer anti-virus application component from a component repository on a centralized component server; and

a superagent updating each out-of-date computer anti-virus application component, comprising:

a receive module receiving the one or more updated computer anti-virus application components for the computer anti-virus applications as pushed data; and

a multicast module multicasting the updated computer anti-virus application components to the deployed computer anti-virus applications;

wherein the multicasting enables a single copy of the identified computer anti-virus application components to be efficiently sent to a selected set of agents within a defined network domain by using a pre-designated network address to efficiently reference the selected set of agents;

wherein a plurality of the superagents are dynamically selected within the defined network domain.

18. A system according to claim 17 , further comprising:

an updater module inquiring of current computer anti-virus application component status at the centralized component server.

19. A system according to claim 18 , further comprising:

a lookup submodule obtaining the current computer anti-virus application component status through messages implemented in the Internet Control Message Protocol and exchanged with the centralized component server.

20. A system according to claim 18 , further comprising:

a lookup submodule accessing at least one of directory implemented in the File Transfer Protocol and the Hypertext Transport Protocol and listing the computer anti-virus application components.

21. A system according to claim 17 , further comprising:

a catalog file identifying the deployed computer anti-virus application components.

22. A system according to claim 21 , further comprising:

a set of records in the catalog file storing a file name and date for each deployed computer anti-virus application component.

23. A system according to claim 17 , further comprising:

a scheduler executed periodically to initiate the updating of out-of-date computer anti-virus application components.

24. A system according to claim 23 , further comprising:

a schedule designating a time period for each update by the scheduler.

25. A system according to claim 17 , wherein the updated computer anti-virus application components are pulled as packets implemented in one of the Hypertext Transport Protocol and the File Transport Protocol.

26. A system according to claim 17 , wherein the updated computer anti-virus application components are multicast as packets implemented in one of the Hypertext Transport Protocol, File Transport Protocol and User Datagram Protocol.

27. A system according to claim 17 , wherein the updated computer anti-virus application components are encoded in the Reed Solomon encoding scheme.

28. A method for providing automated low bandwidth updates of computer anti-virus application components, comprising:

periodically identifying components of one or more deployed computer anti-virus applications requiring updating;

pulling each updated computer anti-virus application component from a component repository on a centralized component server; and

updating each out-of-date computer anti-virus application component, comprising:

pushing the one or more updated computer anti-virus application components for the computer anti-virus applications; and

multicasting the updated computer anti-virus application components to the deployed computer anti-virus applications utilizing superagents;

wherein the multicasting enables a single copy of the identified computer anti-virus application components to be efficiently sent to a selected set of agents within a defined network domain by using a pre-designated network address to efficiently reference the selected set of agents;

wherein the superagents are dynamically selected within the defined network domain.

29. A method according to claim 28 , further comprising:

inquiring of current computer anti-virus application component status at the centralized component server.

30. A method according to claim 29 , further comprising:

obtaining the current computer anti-virus application component status through messages implemented in the Internet Control Message Protocol and exchanged with the centralized component server.

31. A method according to claim 29 , further comprising:

accessing at least one of directory implemented in the File Transfer Protocol and the Hypertext Transport Protocol and listing the computer anti-virus application components.

32. A method according to claim 28 , further comprising:

maintaining a catalog file identifying the deployed computer anti-virus application components.

33. A method according to claim 32 , further comprising:

storing a file name and date for each deployed computer anti-virus application component.

34. A method according to claim 28 , further comprising:

executing a scheduler to periodically initiate the updating of out-of-date computer anti-virus application components.

35. A method according to claim 28 , further comprising:

maintaining a schedule designating a time period for each update.

36. A method according to claim 28 , further comprising:

pulling the updated computer anti-virus application components as packets implemented in one of the Hypertext Transport Protocol and the File Transport Protocol.

37. A method according to claim 28 , further comprising:

multicasting the updated computer anti-virus application components as packets implemented in one of the Hypertext Transport Protocol, File Transport Protocol and User Datagram Protocol.

38. A method according to claim 28 , further comprising:

encoding the updated computer anti-virus application components in the Reed Solomon encoding scheme.

39. A computer-readable storage medium holding code for performing the method according to claim 28 , 31 , 32 , 34 , 35 , 36 , 37 , or 38 .

Assignments (8)