KR100894813B1 - The P2P-based Network Segmentation Method and system for Specific Software Distribution and Installation automatically - Google Patents

Abstract

The present invention efficiently distributes the network distribution area of a specific program in order to efficiently distribute and install a specific program automatically to a user PC. This is because an administrator installs an administrator PC after installing an installation management program by accessing a specific website. The management program automatically detects user PCs connected to the local network and generates a list of all user PCs connected to the local network to peer-to-peer the local network distribution area where the specific program will be deployed. Distribution method, its production method, and software asset and patch management system.

To this end, a peer-to-peer distribution method, a software asset, and a patch management system of a network distribution area for efficient automatic distribution and installation of a specific program according to the present invention, and a method of manufacturing the same are provided by an administrator. Downloading and installing an installation management program from a website in which the installation management program is stored; The installation management program automatically detecting a user PC connected to a local network and generating a list of all user PCs connected to a local network; Classifying and distributing a local network distribution area based on a list of user PCs by the installation management program; Automatically distributing and installing a local installation management program to one user PC by an installation management program of an administrator PC for each distribution area of the distributed local network; Automatically distributing and installing a specific program for a user PC existing in a distribution area by a local installation management program for each distribution area of the distributed local network; And when the automatic distribution and installation of a specific program, characterized in that it comprises a step of ensuring the encrypted communication and integrity of the transmission contents. Through the above invention, it is possible to distribute the problem of concentrating network traffic on the existing mirroring server and to maximize the stability of the automatic installation service provided by the mirroring server.

Network, Asset Management, Patch Management, Automatic Installation, P2P

Description

Peer-to-peer distribution method and system for network distribution area for efficient automatic distribution and installation of specific programs {The P2P-based Network Segmentation Method and system for Specific Software Distribution and Installation automatically}

1 is a block diagram showing a request and response flow of a web (WEB) using an existing typical hypertext transfer protocol (HTTP)

2 is a configuration diagram including a mirroring server and a switch capable of port mirroring for automatic installation of a program in the existing configuration of FIG.

3 is a configuration diagram illustrating a concept of monitoring a network of a local area network (LAN) in an existing legacy hub network environment.

4 is a block diagram showing a modified transmission control protocol (TCP) connection flow for deceiving the Internet connection of the host PC and the termination of communication of the web server according to the present invention.

5 is a block diagram illustrating a method of classifying a distribution area of a local network for automatic distribution and installation of a specific program according to the present invention;

The present invention relates to a method and system for peer-to-peer distribution in a network distribution area for efficiently deploying and installing a specific program to user PCs in a local network environment of an enterprise or organization. Rather than traditional software asset and patch management methods that access and download a specific system server for automatic installation of a specific program, the local network is divided into a distribution area of a specific program to efficiently and quickly distribute a specific program in a local distribution area. It relates to a peer-to-peer based distribution method and system for network distribution of a specific program.

1 illustrates a flow of a connection request and response process between a web client and a web server using a conventional hypertext transfer protocol (HTTP). The use of the web (WEB) using the existing hypertext transfer protocol (HTTP) is made between the first user PC 10 or the n-th user PC and the web server 20 connected to the Internet 34, and the hypertext transfer The switch 32 and the hub 30 are provided in the communication path using the protocol (HTTP). Normal web client's web (WEB) use is made The web client of the first user PC or the n-th user PC transmits a Hypertext Transfer Protocol (HTTP) connection request packet (a) to the web server The web server should send a response packet (b) of the hypertext transfer protocol (HTTP) to the web client of the first user PC or the n-th user PC.

In order to automatically distribute and install a specific program in the network environment, an enterprise or organization has recently introduced an automatic agent installation methodology using the hypertext transfer protocol (HTTP). In this methodology, the mirroring server 40 is added to the mirroring port of the switch 32 in the configuration of FIG. 1 so that the mirroring server can be used by the first user in the process of using the Web using the existing hypertext transfer protocol (HTTP). A response packet of a hypertext transfer protocol (HTTP) of a web server to a connection request packet of a hypertext transfer protocol (HTTP) of a web client of a PC 10 or a web client of a control user PC. ) To limit the use of the Internet 34 to the web client of the first user PC or the n-th user PC and to install a software asset and a patch management agent.

However, in the new computerized system environment having the configuration of FIG. 2, the computer administrator or employee or member of the organization can obtain the convenience of automatically installing the software asset and the patch management agent in the enterprise or the organization, but is connected to the local network. The problem is that all user PCs are concentrating on accessing and downloading requests to the mirroring server, which is a system server where a specific program is stored, and the stability of software asset and patch management services. In addition, when the automatic distribution and installation of a specific program, there is a problem that the transmission contents may be changed and damaged by the privacy protection problem of the transmission contents and the antivirus (Virus Vaccine) and the Internet worm (Internet Worm).

Accordingly, the present invention has been made to solve the above problems, and an object of the present invention is to secure the stability of the software asset and patch management service when the enterprise or organization automatically distributes and installs a specific program for software asset and patch management. And to provide a method and apparatus for distributing a specific program on a peer-to-peer basis by effectively dividing the distribution area of a specific program into several areas on the local network for efficient and rapid distribution of a specific program. have.

In addition, another object of the present invention is to secure the security state of the entire PC of the enterprise or organization by achieving a 100% security patch of a specific operating system and software through the function of the software asset and patch management agent according to the above method in the enterprise or organization The present invention provides a method and system for peer-to-peer distribution in a network distribution area for efficient automatic distribution and installation of a specific program to maintain the system.

In order to achieve the above object, a peer-to-peer distribution method of a network distribution area for efficient automatic distribution and installation of a specific program according to the present invention may include: An administrator PC installed with an installation management program is connected to a local network. Automatically detecting the user PC and generating a list of all the user PCs connected to the local network; Classifying and distributing a local network distribution area based on the user PC list; Distributing and installing a local installation management program to one specific user PC by an administrator PC for each distribution area of the distributed local network; And automatically distributing and installing a specific program for another user PC existing in the distribution area by the specific user PC in which a local installation management program is installed for each distribution area of the distributed local network. .
The installation management program of the manager PC automatically detects the user PC connected to the internal network and generates a list of all the user PCs connected to the local network in FIG. 3. In the promiscuous mode, a packet of a transmission control protocol (TCP) layer of an internal network is monitored in real time or in the mirroring server 40 using a mirroring port (mirroring) of the switch 32 in FIG. 2. All packets of the internal network are mirrored to monitor the packets of the Transmission Control Protocol (TCP) layer of the internal network in real time to provide a medium access control address (MAC Address) and Internet protocol for all user PCs 10 connected to the internal network. IP Address, Windows Host Name, Windows Operation It generates a list of host information such as system and version (Windows OS & Version).
Hereinafter, with reference to the accompanying drawings will be described a preferred embodiment of a peer-to-peer distribution method and system of the network distribution area for efficient automatic distribution and installation of a specific program according to the present invention.
5 is a diagram illustrating a peer-to-peer distributed system of a network distribution area for efficient automatic distribution and installation of a specific program according to the present invention.
As shown in FIG. 5, instead of distributing a file in a one-to-many manner to each user PC through the network, the transmission control protocol of the internal network is changed through a promiscuous mode. Real-time monitoring of packets in the TCP) layer creates a list of user PCs connected to the local network, classifies and distributes the local network distribution area based on the generated list of the user PCs, and distributes the distributed area of the local network. Administrator PC to install a local installation management program on a specific user PC among the user PCs,
A user PC that transmits a connection request packet of Hyper Text Transfer Protocol (HTTP) through a web client, and a Response Packet of a Hyper Text Transfer Protocol (HTTP) to a web client of the user PC. The specific user PC including the web server and the local administrative installation program is installed is a system which distributes and installs the specific program to other user PCs in the distribution area. The manager PC classifies and distributes the local network distribution area 50 based on the user PC list, and automatically distributes and installs the local installation management program to one specific user PC 10 for each distribution area of the internal network. In FIG. 5, the number of p user PCs 11 connected to the internal network is grouped into one distribution area by the quantity of n PCs to peer-to-peer a specific program for each group of distribution areas. It automatically installs a local installation manager that automatically distributes and installs in a peer-to-peer fashion.

delete

delete

delete

delete

delete

delete

The manager PC automatically distributes and installs a local installation management program to a specific PC for each distribution area by using a hypertext transfer protocol (HTTP) type or a file transfer protocol (FTP) type in which a specific program to be installed by the manager PC is stored. Generates a false connection request packet including the uniform resource locator (URL) of the server and sends it to the web client of the user's PC to install the specific software through the web client.

The specific user PC automatically distributes and installs a specific program to all PCs in its own distribution area. It generates a false connection request packet including a uniform resource locator (URL) of FTP type and transmits it to the web client of the user's PC, where the user forcibly installs specific software through the web client.

The administrator PC automatically distributes and installs a local installation management program to a specific PC for each distribution area, and the specific program is automatically distributed to a user PC in which a specific user PC exists in the distribution area for each distribution area of the distributed internal network. And a method of installing the hypertext transfer protocol (HTTP) type or the file transfer protocol (FTP) in which the installation management program of the administrator PC and the local installation management program of a specific user PC are stored in a specific installation program that is to be installed on a web client of the user PC. Forces Uniform Resource Locator (URL) of type).

A method of designating a uniform resource locator (URL) of a hypertext transfer protocol (HTTP) type in which the specific program is stored may include:

<meta http-equiv = "refresh" content = "1; url = http: //192.168.1.1: 80 / Index.html">

As described above, the meta-data tag of the hypertext transfer protocol (HTTP) is specified.

A method of designating a uniform resource locator (URL) of a file transfer protocol (FTP) type, in which the specific program is stored,

<meta http-equiv = "refresh" content = "1; url = ftp: //192.168.1.1: 21 / pub / install.exe">

As described above, the meta-data tag of the hypertext transfer protocol (HTTP) is specified.

Uniform resource locator (URL) that stores a specific installation program forcibly assigned to the web client of the user's PC is ActiveX, Java Applet, Java Script, Active Server Page. , Prepare HyperText Processor, MP3, MPi, Real Audio, Flash, Windows Media Player, Real Player And all contents compatible with a uniform resource locator (URL) of a hypertext markup language (HTML) type such as a HyperText Markup Language page.

Uniform Resource Locator (URL), which stores a specific installation program forcibly assigned to the web client of the user's PC, includes Internet Explorer, ActiveX-based File Transfer Protocol application, and Java Applet-based file. It includes all contents compatible with File Transfer Protocol (FTP) type uniform resource locator URLs such as a Jave Applet based FTP Application.

In the case of automatic distribution and installation of the specific program, secure encryption algorithms such as SEED, 3-DES, IDEA, etc. are applied, and secure hash algorithms such as MD5, SHA-1, etc. It is characterized by ensuring the protection and integrity of the contents.

As described above, through the present invention, it is possible to secure the stability of the software asset and patch management service provided by the enterprise or the organization, and to efficiently and promptly distribute a specific program. Through the function of the agent, 100% of the removal of specific illegal software and the installation of specific recommended software can be achieved, and the sound software of the entire PC of the enterprise or organization can be utilized.

In addition, the method proposed in the present invention is based on the general characteristics of Ethernet, Local Area Network (LAN), and Transmission Control Protocol (TCP), and thus, Hypertext Transfer Protocol (HTTP) and File Transfer Protocol (FTP). In addition, it can be applied to all other application protocols based on Transmission Control Protocol (TCP) such as Simple Mail Transfer (SMTP) and Telnet.

Therefore, it will be apparent to those skilled in the art that various modifications, changes, additions, and the like may be made within the spirit and scope of the present invention, and such modifications, changes, and the like shall be regarded as belonging to the following claims.

As described above, according to a peer-to-peer distribution method and system of a network distribution area for efficient automatic distribution and installation of a specific program according to the present invention, a network environment capable of broadcasting or In a switch environment that includes a mirroring server, when an enterprise or organization automatically deploys and installs specific programs for software asset and patch management, the software asset and patch management services can be secured and the specific programs can be efficiently and quickly deployed. In addition, the automatic distribution and installation method of the specific software according to the present invention protects the privacy of the transmission contents through the encryption communication and the integrity guarantee method of the transmission contents, and protects the virus vaccine and the Internet worm. It has the advantage of preventing the alteration and the damage of transmission contents.

In addition, through the function of the software asset and patch management agent by the above method in the enterprise or organization, it is possible to achieve 100% security patch of a specific operating system and software to maintain a secure security state for the entire PC of the enterprise or organization. have.

Claims (13)

Generating a list of all user PCs connected to the local network by automatically detecting a user PC connected to the local network by an administrator PC having the installation management program installed thereon; Classifying and distributing a local network distribution area based on the user PC list; Distributing and installing a local installation management program to one specific user PC by an administrator PC for each distribution area of the distributed local network; And And automatically distributing and installing a specific program for another user PC existing in the distribution area by the specific user PC in which a local installation management program is installed for each distribution area of the distributed local network. Method for the administrator PC to automatically distribute and install a local installation management program on the specific PC for each distribution area, Creates a false connection request packet including a uniform resource locator (URL) of a hypertext transfer protocol (HTTP) type or a file transfer protocol (FTP) type in which a local installation program to be installed by the administrator PC is stored. A peer-to-peer distribution method for network distribution zones for efficient automatic distribution and installation of a particular program, characterized in that the user is forced to install a local installer through a web client. The method of claim 1, Monitor the packets of the transmission control protocol (TCP) layer of the internal network in real time in the promiscuous mode on the manager PC or mirror all packets of the internal network from the mirroring server to receive the transmission control protocol (TCP) of the internal network. ) Real-time monitoring of packets of the layer, such as medium access control address (MAC Address), Internet Protocol address (IP Address), Windows Host Name, Windows Operating System version (Windows Version), etc. Peer-to-peer distribution method of network distribution area for efficient automatic distribution and installation of a specific program, characterized by generating a list of user PC information. The method of claim 1, The administrator PC groups the number of user PCs connected to the internal network into one distribution area for each quantity of n PCs, and automatically distributes and installs a specific program in a peer-to-peer manner for each distribution area. Peer-to-peer distribution method for network deployment zones for efficient automatic deployment and installation of specific programs, characterized by the installation of regional installation management programs. delete The method of claim 1, The specific user PC installed with the local installation management program generates a false connection request packet including a uniform resource locator (URL) of hypertext transfer protocol (HTTP) type or file transfer protocol (FTP) type in which the specific program to be installed is stored. Peer-to-Peer in the network distribution area for efficient automatic distribution and installation of a specific program, which is transmitted to a web client of a user's PC and the user forcibly installs specific software through the web client. Dispersion method. delete The method according to claim 1 or 5, To specify a uniform resource locator (URL) of the Hypertext Transfer Protocol (HTTP) type, <meta http-equiv = "refresh" content = "1; url = http: //192.168.1.1: 80 / Index.html"> As described above, peer-to-peer of a network distribution area for efficient automatic distribution and installation of a specific program, characterized by specifying a meta-data tag of a hypertext transfer protocol (HTTP). To Peer) Dispersion Method. The method according to claim 1 or 5, To specify a uniform resource locator (URL) of the File Transfer Protocol (FTP) type, <meta http-equiv = "refresh" content = "1; url = ftp: //192.168.1.1: 21 / pub / install.exe"> As described above, peer-to-peer of a network distribution area for efficient automatic distribution and installation of a specific program, characterized by specifying a meta-data tag of a hypertext transfer protocol (HTTP). To Peer) Dispersion Method. The method of claim 5, Uniform resource locator (URL) that stores a specific installation program forcibly assigned to the web client of the user's PC is ActiveX, Java Applet, Java Script, Active Server Page. , Prepare HyperText Processor, MP3, MPi, Real Audio, Flash, Windows Media Player, Real Player , Automatic distribution and installation of specific programs, including all content compatible with Uniform Resource Locators (URLs) of Hypertext Markup Language (HTML) type, such as HyperText Markup Language pages Of Peer-to-Peer Distribution of Network Deployment Zones for Windows. The method of claim 5, Uniform Resource Locator (URL), which stores a specific installation program forcibly assigned to the web client of the user's PC, includes Internet Explorer, ActiveX-based File Transfer Protocol application, and Java Applet-based file. Network deployment for efficient automatic distribution and installation of a specific program, including all content compatible with file transfer protocol (FTP) type uniform resource locator URLs, such as a Jave Applet based FTP Application. Peer-to-peer distribution of domains. The method according to claim 1 or 5, When the administrator PC and the specific user PC automatically distribute and install a specific program, a secure encryption algorithm such as SEED, 3-DES, or IDEA is applied, and a secure hash algorithm such as MD5 or SHA-1 is hashed. A peer-to-peer distribution method for network distribution area for efficient automatic distribution and installation of a specific program, by applying an algorithm to ensure the protection and integrity of communication contents on a network. A user PC transmitting a connection request packet of a hypertext transfer protocol (HTTP) through a web client; A web server for transmitting a response packet of Hyper Text Transfer Protocol (HTTP) to a web client of the user PC;  Promiscuous Mode monitors the packets of the Transmission Control Protocol (TCP) layer of the internal network in real time to generate a list of user PCs connected to the local network and based on the generated list of the user PCs. And classifying and distributing the local network distribution area, and including a manager PC to install a local installation management program to a specific user PC among the user PCs by distribution areas of the distributed local network. The manager PC, The local installation management program to be installed generates a false connection request packet including a uniform resource locator (URL) of a hypertext transfer protocol (HTTP) type or a file transfer protocol (FTP) type and transmits it to the web client of the user's PC. Peer-to-peer distributed system in a network deployment area for efficient automatic distribution and installation of a particular program, forcing a user to install a local installation management program through a web client. The network distribution area for efficient automatic distribution and installation of a specific program according to claim 12, wherein the specific user PC on which the local administrative installation program is installed is configured to distribute and install the specific program to other user PCs in the distribution area. Peer-to-Peer Distributed System.

Images