Methods and apparatus for patching software in accordance with instituted patching policies

A signal-bearing medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus of an electronic device to perform operations for controlling software patching activities, the operations comprising:

• implementing a software patch control shell for controlling patching activities associated with software incorporated in the electronic device;
• instituting a software patching policy to be used by the software patch control shell for controlling software patching activities;
• and
• applying the software patching policy as potential software patching opportunities occur.

A signal-bearing medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus of an electronic device to perform operations for instituting and controlling a software patching policy, the operations comprising:

• instituting a software patching policy to be used by electronic devices accessible over a network;
• making the software patching policy available to the electronic devices over the network;
• monitoring a source of software patches;
• examining a particular patch issued by the source of software patches to determine whether the patch is permitted under the software patching policy;
• and
• issuing an advisory message to the electronic devices over the network indicating circumstances in which the particular patch issued by the source of software patches should be implemented.

A system for managing software patching activity, the system comprising a software patching activity manager, the software patching activity manager comprising:

• at least one memory to store at least one program of machine-readable instructions, where the at least one program performs operations for instituting and controlling a software patching policy;
• a network interface for use in communicating over a network with a source of software patches and with electronic devices subject to the software patching policy;
• at least one processor coupled to the at least one memory and network interface, where the at least one processor performs at least the following operations when the at least one program is executed:
• creating a software patching policy to be used by the electronic devices;
• and
• issuing the software patching policy to the electronic devices through the network interface.