Mcafee, Inc.

Networks Associates Technology, Inc.

Network Associates, Inc.

Networks Associates, Inc.

Dan Melchione

Victor Kouznetsov

Martin Fallenstedt

Satish K Shetty

A system for providing application services in a computing environment having both user-mode processes and privileged-mode processes. A user-mode component is provided with an interface configured to access an exposed privileged-mode interface. A configuration component specifies a list of installable code components that are authorized for installation, wherein privileged-mode functions will only be executed in response to accesses by the user-mode code component when the installable code component is represented on the list.

System and method for providing application services with controlled access into privileged processes

A system for providing application services in a computing environment having both user-mode processes and privileged-mode processes. An agent executes in privileged mode and exposes an interface to user-mode processes. A user-mode component is provided with an interface configured to access the agent's exposed interface. A configuration component specifies a list of installable code components that are authorized for installation, wherein the agent will only execute privilege mode functions in response to accesses by the user-mode code component when the installable code component is represented on the list.

A secure method and system for administering to software on a plurality of client computers is disclosed. One or more pre-set policies for one or more client computers may be stored on and transmitted in a secure manner from a central server that is under the control of a system administrator to the client computers over a public network or e-mail systems. The central server is preferably an HTTP server containing software for creating packages of information and for protecting the integrity of the packages during transmission over a virtual secured pipe. The packages may contain policy for the various clients that are to be maintained. The policy may comprise software configurations for software that resides on the clients, software to be installed on one or more clients, or any other information and data that is needed to maintain and manage the clients. Preferably each client also contains software for creating packages and for verifying that incoming packages were created and sent by an authorized and trusted server. Packages that are created by the clients may contain the current configurations for software residing on the client. The client software is preferably capable of transmitting and getting packages to and from the server over the secure pipe. The secure pipe may be established over a public network or e-mail system using HTTP, SMTP, MAPI, and WAP protocols. Thus, as long as the clients have e-mail, Internet access, or access to other public networks, they may be managed and maintained by a central server.

Secure method and system for using a public network or email to administer to software on a plurality of client computers

A method of providing a set of desired application functions to a plurality of network-coupled computing appliances. A set of code resident on a network-connected application management server is identified that when executed in a network appliance provide the desired application functions. A first application management agent in a first of the network-coupled computing appliances and a second application management agent in a second of the network-coupled computing appliances are executed. The first application management agent repetitively checks for updates of the identified code. Updates of the identified code are downloaded from the application management server into the first network-coupled computing appliance as the updates become available. Updates of the identified code are downloaded from the first network-coupled computing device into the second network-coupled computing appliance.

Growing community of inventors

Beaverton, OR, United States of America

Dan Melchione