Primitive functions for use in remote computer management
View Patent ↗The invention facilitates remote management of a computer via a network. Remote computer management capability can be expanded beyond that previously available through the addition of one or more new primitive functions that can be performed on a managed computer.
1. A non-transitory computer readable storage memory encoded with one or more computer programs being executed to cause a processor to perform:
transmitting periodic messages from a managed computer to a remote computer management server;
receiving at least one command that effects performance of a management action, the management action comprising execution of one or more primitive functions;
performing the one or more primitive functions via agent software installed on the managed computer;
transmitting, from the remote computer management server to the managed computer, a dynamically loaded library (DLL) including one or more sets of instructions that, when implemented by the agent software, produce functionality not enabled by the agent software at the time the DLL is transmitted to the managed computer, the functionality performed by the DLL comprising:
enabling the agent software to provide an interface function call definition configured to pass commands to the DLL for execution, the commands comprising at least one command that identifies the DLL;
identifying at least one device connected to the managed computer by issuing an address resolution protocol command to each IP address assigned to a LAN;
transmitting device identification information to the remote computer management server indicating existence of the at least one device;
receiving at the managed computer another DLL comprising additional commands instructing the agent software to perform management actions responsive to the identification information transmitted, the additional commands identifying a communication protocol to be used by the agent software when communicating with the at least one device; and
transmitting from the managed computer to the remote computer management server a result of the performance of the management action.
2. The non-transitory computer readable storage memory as in claim 1 , that causes the processor to perform receiving at the managed computer a request from the remote computer management server to perform a management action.
3. The non-transitory computer readable storage memory as in claim 1 , that further causes the processor to perform routing all communication between the managed computer and the remote computer management server.
4. The non-transitory computer readable storage memory as in claim 1 , that causes the processor to perform authenticating the managed computer to the remote computer management server.
5. The non-transitory computer readable storage memory as in claim 1 , that causes the processor to perform encrypting communication between the managed computer and the remote computer management server.
6. The non-transitory computer readable storage memory as in claim 5 , wherein the encrypting communication between the managed computer and the remote computer management server causes the processor to perform generating a new encryption key each time that the managed computer initiates communication with the remote computer management server.
7. The non-transitory computer readable storage memory as in claim 6 , wherein the encrypting communication between the managed computer and the remote computer management server causes the processor to perform successively comparing different combinations of a specified number of the most recent encryption keys stored by the managed computer and a specified number of the most recent encryption keys stored by the remote computer management server.
8. The non-transitory computer readable storage memory as in claim 1 , wherein the primitive functions are at least one of:
get value for script variable;
added printers to audit;
get File in multiple blocks;
enumerate registry subkeys;
enumerate registry values;
enumerate directory listing;
incremental audit;
execute application and return output; and
extend audit to include file types in addition to .exe.
9. The non-transitory computer readable storage memory as in claim 1 , that causes the processor to perform scanning the LAN associated with the managed computer to perform the identifying of the at least one device.
10. The non-transitory computer readable storage memory as in claim 1 , that causes the processor to perform receiving responses at the managed computer indicating the presence of the at least one device.
11. The non-transitory computer readable storage memory as in claim 1 , wherein the transmitting periodic messages from the managed computer to the remote computer management server determines whether there is an outstanding management action that needs to be performed by the managed computer.
12. A method, comprising:
transmitting periodic messages from a managed computer to a remote computer management server;
receiving at least one command that effects performance of a management action, the management action comprising execution of one or more primitive functions;
performing the one or more primitive functions via agent software installed on the managed computer;
transmitting, from the remote computer management server to the managed computer, a dynamically loaded library (DLL) including one or more sets of instructions that, when implemented by the agent software, produce functionality not enabled by the agent software at the time the DLL is transmitted to the managed computer, the functionality performed by the DLL comprising:
enabling the agent software to provide an interface function call definition configured to pass commands to the DLL for execution, the commands comprising at least one command that identifies the DLL;
identifying at least one device connected to the managed computer by issuing an address resolution protocol command to each IP address assigned to a LAN;
transmitting device identification information to the remote computer management server indicating existence of the at least one device;
receiving at the managed computer another DLL comprising additional commands instructing the agent software to perform management actions responsive to the identification information transmitted, the additional commands identifying a communication protocol to be used by the agent software when communicating with the at least one device; and
transmitting from the managed computer to the remote computer management server a result of the performance of the management action.
13. The method of claim comprising receiving at the managed computer a request from the remote computer management server to perform a management action.
14. The method of claim 12 , comprising routing all communication between the managed computer and the remote computer management server through a single network communications port that is allowed for other network communication by a firewall and/or gateway that mediates communication with the managed computer.
15. The method of claim 12 , comprising authenticating the managed computer to the remote computer management server.
16. The method of claim 12 , comprising encrypting communication between the managed computer and the remote computer management server, wherein the encrypting comprises at least one of:
generating a new encryption key each time that the managed computer initiates communication with the remote computer management server; and
successively comparing different combinations of a specified number of the most recent encryption keys stored by the managed computer and a specified number of the most recent encryption keys stored by the remote computer management server.
17. The method of claim 12 , comprising scanning the LAN associated with the managed computer to perform the identifying of the at least one device.
18. The method of claim 12 , comprising receiving responses at the managed computer indicating the presence of the at least one device.
19. The method of claim 12 , wherein the transmitting periodic messages from the managed computer to the remote computer management server determines whether there is an outstanding management action that needs to be performed by the managed computer.
20. The non-transitory computer readable storage memory as in claim 3 , that further causes the processor to perform the routing through a single network communications port that is allowed for other network communication by a firewall and/or gateway that mediates communication with the managed computer.