IP Library Granted Patent US 11,733,996
Granted Patent B2
US 11,733,996 · App. 17/981,566 · Granted Aug 22, 2023

Intelligent software patch management

Inventors: Kannan Parthasarathy (Palo Alto, CA); Srinivas Rao Doddi (Palo Alto, CA); Hayden Davis (Atlanta, GA)
Assignee: VMware, Inc.
G06F8/658G06F11/3051G06F11/3409
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,733,996
App. No.
17/981,566
Granted
Aug 22, 2023
Kind
B2
Abstract

Systems and methods are described for intelligent software patch management. In an example, a system can receive a selection of device attributes. The system can associate a group of computing devices with attribute values that correspond to each device. The system can also create value pairs of unique pairs of values for each computing device. The system can select a set of computing devices for a deployment ring that maximizes diversity of the values or value pairs. The system can deploy the software patch to the selected devices and monitor device performance for a predetermined period of time before continuing to the next deployment ring or rolling back the update.

Claims (43)

1. A method for intelligent software patch management, comprising:

displaying a graphical user interface (GUI) configured to display information received from a database;

displaying, on the GUI, a first deployment element associated with a first software patch deployment, wherein the first deployment element includes:

a software patch identifier for the first software patch deployment;

a strategy type for the first software patch deployment; and

a first deployment group for the first software patch deployment, wherein the first deployment group is selected to maximize diversity of at least one value for each computing device of the first deployment group based on a data table in the database that associates each computing device of the first deployment group with at least one value corresponding to a first device attribute;

based on selections received at the GUI, deploying the first software patch to the first deployment group; and

displaying, on the GUI, an indication of computing devices of the first deployment group that have installed the first software patch.

2. The method of claim 1 , wherein the indication of the computing devices of the first deployment group that have installed the first software patch is a progress bar that visually indicates a percentage of the computing devices of the first deployment group that have installed the first software patch.

3. The method of claim 1 , wherein the selections received at the GUI include a selection to exclude from the first deployment group computing devices associated with at least one group of users.

4. The method of claim 1 , wherein the selections received at the GUI include a selection to apply a threshold from a plurality of thresholds, and wherein the selected threshold corresponds to a percentage of computing devices of the first deployment group that must install the first software patch.

5. The method of claim 4 , wherein the GUI displays an indication of a successful deployment of the first software patch based on the selected threshold being reached.

6. The method of claim 1 , further comprising displaying, on the GUI, a deployment template that includes a field for an administrator user to define criteria for moving to a new deployment ring.

7. The method of claim 1 , further comprising, after deploying the first software patch to a threshold percentage of the first deployment group, deploying the first software patch to a second deployment group.

8. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, perform stages for intelligent software patch management, the stages comprising:

displaying a graphical user interface (GUI) configured to display information received from a database;

displaying, on the GUI, a first deployment element associated with a first software patch deployment, wherein the first deployment element includes:

a software patch identifier for the first software patch deployment;

a strategy type for the first software patch deployment; and

a first deployment group for the first software patch deployment, wherein the first deployment group is selected to maximize diversity of at least one value for each computing device of the first deployment group based on a data table in the database that associates each computing device of the first deployment group with at least one value corresponding to a first device attribute;

based on selections received at the GUI, deploying the first software patch to the first deployment group; and

displaying, on the GUI, an indication of computing devices of the first deployment group that have installed the first software patch.

9. The non-transitory, computer-readable medium of claim 8 , wherein the indication of the computing devices of the first deployment group that have installed the first software patch is a progress bar that visually indicates a percentage of the computing devices of the first deployment group that have installed the first software patch.

10. The non-transitory, computer-readable medium of claim 8 , wherein the selections received at the GUI include a selection to exclude from the first deployment group computing devices associated with at least one group of users.

11. The non-transitory, computer-readable medium of claim 8 , wherein the selections received at the GUI include a selection to apply a threshold from a plurality of thresholds, and wherein the selected threshold corresponds to a percentage of computing devices of the first deployment group that must install the first software patch.

12. The non-transitory, computer-readable medium of claim 11 , wherein the GUI displays an indication of a successful deployment of the first software patch based on the selected threshold being reached.

13. The non-transitory, computer-readable medium of claim 8 , the stages further comprising displaying, on the GUI, a deployment template that includes a field for an administrator user to define criteria for moving to a new deployment ring.

14. The non-transitory, computer-readable medium of claim 8 , the stages further comprising, after deploying the first software patch to a threshold percentage of the first deployment group, deploying the first software patch to a second deployment group.

15. A system for intelligent software patch management, comprising:

a hardware-based processor; and

a memory storage including a non-transitory, computer-readable medium storing instructions that, when executed by the hardware-based processor, cause stages to be performed, the stages comprising:

displaying a graphical user interface (GUI) configured to display information received from a database;

displaying, on the GUI, a first deployment element associated with a first software patch deployment, wherein the first deployment element includes:

a software patch identifier for the first software patch deployment;

a strategy type for the first software patch deployment; and

a first deployment group for the first software patch deployment, wherein the first deployment group is selected to maximize diversity of at least one value for each computing device of the first deployment group based on a data table in the database that associates each computing device of the first deployment group with at least one value corresponding to a first device attribute;

based on selections received at the GUI, deploying the first software patch to the first deployment group; and

displaying, on the GUI, an indication of computing devices of the first deployment group that have installed the first software patch.

16. The system of claim 15 , wherein the indication of the computing devices of the first deployment group that have installed the first software patch is a progress bar that visually indicates a percentage of the computing devices of the first deployment group that have installed the first software patch.

17. The system of claim 15 , wherein the selections received at the GUI include a selection to exclude from the first deployment group computing devices associated with at least one group of users.

18. The system of claim 15 , wherein the selections received at the GUI include a selection to apply a threshold from a plurality of thresholds, and wherein the selected threshold corresponds to a percentage of computing devices of the first deployment group that must install the first software patch.

19. The system of claim 18 , wherein the GUI displays an indication of a successful deployment of the first software patch based on the selected threshold being reached.

20. The system of claim 15 , the stages further comprising displaying, on the GUI, a deployment template that includes a field for an administrator user to define criteria for moving to a new deployment ring.

Assignments (3)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: VMWARE LLC
To: OMNISSA, LLC
Reel/Frame 068327/0365 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
CHANGE OF NAME Recorded Apr 15, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067102/0395 →
Continuity (2)
Continuation 17231516 · Apr 15, 2021
Related Publication 20230078359A1 · Mar 16, 2023
Cited By (2)
US 12,294,509 US 12,556,465