Granted Patent B1

US 8,200,794 · App. 10/883,643 · Granted Jun 12, 2012

Abstract

Claims (28)

1. A non-transitory computer readable storage memory encoded with one or more computer programs and/or data structures for facilitating remote management of a managed computer, the one or more computer programs being executed to cause a processor to perform:

transmitting periodic messages from the managed computer to a remote computer management server to determine whether there is an outstanding management action that needs to be performed by the managed computer;

receiving at least one command that effects performance of the management action, the management action comprising execution of one or more primitive functions from a set of primitive functions including one or more of the following primitive functions:

Get value for script variable;

Added printers to audit;

Get File in multiple blocks;

Enumerate registry subkeys;

Enumerate registry values;

Enumerate directory listing;

Incremental audit;

Execute application and return output; and

Extend audit to include file types in addition to .exe;

performing one of the above-described primitive functions via agent software installed on the managed computer;

transmitting from the remote computer management server to the managed computer, after installation of agent software on the managed computer, a dynamically loaded library (DLL) including one or more sets of instructions and/or data that when implemented by the agent software, produce functionality not enabled by the agent software at the time the DLL is transmitted to the managed computer, the functionality enabled by the DLL comprising

enabling the agent software to provide an interface function call definition configured to pass commands to the DLL for execution, the commands comprising at least one command that identifies the DLL,

identifying at least one device connected to the managed computer,

scanning a local area network (LAN) associated with the managed computer to identify the at least one device by issuing an address resolution protocol (ARP) command to each IP address assigned to the LAN,

receiving responses at the managed computer indicating the presence of the at least one device,

transmitting device identification information to the remote computer management server indicating existence of the at least one device,

receiving at the managed computer another DLL comprising additional commands instructing the agent software to perform management actions responsive to the identification information transmitted, the additional commands identifying a communication protocol to be used by the agent software when communicating with the at least one device; and

transmitting from the managed computer to the remote computer management server via a network a result of the performance of the management action.

2. A non-transitory computer readable storage memory as in claim 1 , further comprising instructions and/or data for receiving at the managed computer a request via the network from the remote computer management server to perform a management action.

3. A non-transitory computer readable storage memory as in claim 1 , wherein the network is the Internet.

4. A non-transitory computer readable storage memory as in claim 1 , further comprising instructions and/or data for routing all communication between the managed computer and the remote computer management server through a single network communications port that is allowed for other network communication by a firewall and/or gateway that mediates communication with the managed computer.

5. A non-transitory computer readable storage memory as in claim 1 , further comprising instructions and/or data for authenticating the managed computer to the remote computer management server.

6. A non-transitory computer readable storage memory as in claim 1 , further comprising instructions and/or data for encrypting communication between the managed computer and the remote computer management server.

7. A non-transitory computer readable storage memory as in claim 6 , wherein the instructions and/or data for encrypting communication between the managed computer and the remote computer management server further comprise instructions and/or data for generating a new encryption key each time that the managed computer initiates communication with the remote computer management server.

8. A non-transitory computer readable storage memory as in claim 7 , wherein the instructions and/or data for encrypting communication between the managed computer and the remote computer management server further comprise instructions and/or data for successively comparing different combinations of a specified number of the most recent encryption keys stored by the managed computer and a specified number of the most recent encryption keys stored by the remote computer management server.

Assignments (13)