US 2014/0007229 A1 · SYSTEM AND METHOD FOR IDENTIFYING INSTALLED SOFTWARE PRODUCTS

Abstract

One embodiment includes a software identification system. The system includes an enterprise trust server configured to initiate a scan of at least one file of a file system of a computer system to generate a respective at least one file signature. The at least one file signature includes cryptographic hash data associated with file content of the at least one file. The system also includes a trust repository configured to receive the at least one file signature and to compare the at least one file signature, including the cryptographic hash data associated with the file content thereof, with predetermined file signature data that is stored in a software product reference storage. The predetermined file signature data can include cryptographic hash values associated with respective files in predetermined corresponding software products to enable identification of at least one software product with which the at least one given file is associated.

Claims20

Dependent claims

A software identification system comprising:

an enterprise trust server configured to initiate a scan of at least one file of a file system of a computer system to generate a respective at least one file signature, the at least one file signature comprising cryptographic hash data associated with file content of the at least one file;
and
a trust repository configured to receive the at least one file signature and to compare the at least one file signature, including the cryptographic hash data associated with the file content thereof, with predetermined file signature data that is stored in a software product reference storage, the predetermined file signature data including cryptographic hash values associated with respective files in predetermined corresponding software products to enable identification of at least one software product with which the at least one file is associated.

A non-transitory computer-readable medium programmed for performing a method for identifying software on a computer system, the method comprising:

generating at least one file signature corresponding to a respective at least one file stored in a computer system, the at least one file signature including cryptographic hash data encoding file content of the at least one file;
sending the at least one file signature to a trust repository as part of a product-identification request;
receiving a response corresponding to results from a comparison of the cryptographic hash data with predetermined cryptographic hash data that is associated with predetermined software products at the trust repository;
and
generating a software-identification report associated with identification of at least one software product with which the at least one file is associated based on the comparison of the cryptographic hash data with the predetermined cryptographic hash data.

2 more elements

A network system comprising:

a plurality of enterprise trust servers that are each configured to initiate a scan of a plurality of files from at least one file system associated with at least one computer system and to generate a plurality of file signatures corresponding to the respective plurality of files, each of the plurality of file signatures comprising cryptographic hash data associated with file content of the respective one of the plurality of files;
and
a trust repository communicatively coupled to the plurality of enterprise trust servers via a network and configured to receive a product identification request that includes the plurality of file signatures from each of the plurality of enterprise trust servers, the trust repository being further configured to compare the plurality of file signatures including the cryptographic hash data associated with the file content thereof with predetermined file signatures stored in a software product reference storage, the predetermined file signatures stored in the software product reference storage being associated with predetermined known software products to enable identification of at least one software product with which each of the plurality of files is associated.

Dependencies are inferred from the claim text.

System and method for identifying installed software products

Life of this patent

System and method for identifying installed software products

Life of this patent

Abstract

Claims20