# US 7,610,477 B2 · Deploying and receiving software over a network susceptible to malicious communication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,610,477 B2 - Document ID: US7610477B2 - Status: Granted - Kind: B2 - Application number: 10/941,594 - Filed: 2004-09-15 - Published: 2006-03-16 - Granted: 2009-10-27 - Earliest claimed: 2004-09-15 - Assignees: Microsoft Corporation - Inventors: Martin L. Holladay; Mukesh Karki; Parthasarathy Narayanan - Web page: https://patentgrep.com/patent/US7610477B2 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems and/or methods that enable secure deployment and/or receipt of an operating system and updates for the operating system to a bare computer across a network susceptible to malicious communication are described. These systems and/or methods can, in one embodiment, securely deploy an image having an operating system and enable secure receipt of an update for the operating system, both via a network susceptible to malicious communication. They can also, in another embodiment, enable a bare computer added to a network to have an operating system deployed to it and updated via the network before the bare computer is subjected to malicious code communicated over the network. ## Claims ### Claim 1 A method comprising: receiving, by a deployment server, a locked image having an operating system and security settings, the security settings being configured to prohibit unsolicited communication via a network that is susceptible to malicious communication from other than a secure source or via a secure port, the security settings including a setting prohibiting communication with any port other than a port used by the deployment server; editing, by the deployment server, the security settings of the locked image to further configure the security settings; and securely deploying, by the deployment server, the locked image to a bare computer via the network. ### Claim 2 (depends on 1) The method of claim 1, further comprising: instructing the bare computer to securely receive a software update. ### Claim 3 (depends on 2) The method of claim 2, wherein the software update is capable of improving the operating system's resistance to malicious code. ### Claim 4 (depends on 2) The method of claim 2, further comprising receiving an indication that the software update has been applied and instructing the bare computer to commence communication via the network. ### Claim 5 (depends on 1) The method of claim 1, further comprising instructing a reference server having the operating system to prohibit unsolicited communication via the network other than from the secure source or via the secure port. ### Claim 6 (depends on 5) The method of claim 5, wherein the act of instructing the reference server comprises instructing the reference server to enable a firewall. ### Claim 7 (depends on 1) The method of claim 1, wherein the bare computer comprises a bare server. ### Claim 8 (depends on 1) A system comprising at least one processor, and one or more computer-readable medium including processor-executable instructions that are capable of being executed by the at least one processor, the processor-executable instructions adapted to direct the at least one processor to configure a computer to receive the locked image and to deploy the locked image, by performing the method recited in claim 1. ### Claim 9 A method comprising: receiving, by a bare computer, a locked image having an operating system and security settings via a network susceptible to malicious communication, the security settings being configured to effectively prohibit unsolicited and potentially malicious communication from other than a secure source, the security settings including a setting prohibiting communication with any port other than a port used by the secure source, the security settings of the locked image further having been edited by a deployment server after creation of the locked image to further configure the security settings; booting, by the bare computer, the locked image, effective to run the operating system at the security settings; receiving, by the bare computer, an update to the operating system from the secure source; and applying, by the bare computer, the update to the operating system. ### Claim 10 (depends on 9) The method of claim 9, wherein the security settings are effective to permit unsolicited and secure communication from a secure source or via a secure port. ### Claim 11 (depends on 10) The method of claim 10, wherein the act of receiving the update is via the network. ### Claim 12 (depends on 9) The method of claim 9, wherein the act of receiving the update comprises receiving an instruction to solicit communication from an update source and soliciting the update source for the update. ### Claim 13 (depends on 9) The method of claim 9, further comprising: permitting unsolicited and potentially malicious communication via the network. ### Claim 14 (depends on 13) The method of claim 13, wherein the act of permitting comprises altering the security settings to permit unsolicited and potentially malicious communication. ### Claim 15 (depends on 9) The method of claim 9, wherein the acts of receiving the locked image, booting the locked image, receiving the update, and applying the update are performed without user interaction. ### Claim 16 (depends on 9) A system comprising at least one processor, and one or more computer-readable media including processor-executable instructions that are capable of being executed by the at least one processor, the processor-executable instructions adapted to direct the at least one processor to configure a computer to receive the locked image, boot the locked image, receive the update and apply the update, by performing the method recited in claim 9. ### Claim 17 A method comprising: securely deploying, by a deployment server, a locked image to a computer over a network susceptible to malicious communication, the locked image having one or more security settings being configured to prohibit unsolicited communication via the network from other than a secure source or via a secure port, the security settings including a setting prohibiting communication with any port other than a port used by the deployment server, the security settings of the locked image further having been edited by the deployment server after creation of the locked image to further configure the security settings; instructing, by the deployment server, the computer to boot the locked image; instructing, by the deployment server, the computer to solicit communication to receive a software update; receiving, by the deployment server, from the computer an indication that the software update has been received; and instructing, by the deployment server, the computer to permit potentially malicious communication over the network wherein potentially malicious communication comprises unsolicited communication. ### Claim 18 (depends on 17) The method of claim 17, further comprising instructing a reference server to prohibit unsolicited communication via the network other than from a secure source or via a secure port and receiving the locked image from the reference server. ### Claim 19 (depends on 18) The method of claim 18, wherein the act of instructing the reference server comprises instructing the reference server to enable a firewall. ### Claim 20 (depends on 18) The method of claim 18, wherein the act of instructing the reference server comprises instructing the reference server to add IPSec protocols. ### Claim 21 (depends on 17) The method of claim 17, wherein the locked image is capable of prohibiting communication sent across the network that is unsolicited and potentially malicious. ### Claim 22 (depends on 17) The method of claim 17, wherein the locked image is capable of prohibiting unsolicited communication other than from a source from which the locked image was deployed. ### Claim 23 (depends on 17) The method of claim 17, wherein the software update is effective to improve an operating system's resistance to malicious code. ### Claim 24 (depends on 17) The method of claim 17, wherein the computer comprises a bare server. ### Claim 25 (depends on 17) The method of claim 17, wherein the act of instructing the computer to solicit communication comprises instructing the computer to solicit communication from an update server over the network. ### Claim 26 (depends on 17) The method of claim 17, wherein the indication indicates that the software update has been successfully applied. ### Claim 27 (depends on 17) The method of claim 17, wherein the act of receiving and the acts of instructing are communicated via the network. ### Claim 28 (depends on 17) The method of claim 17, wherein the network comprises an intranet capable of communicating with the internet. ### Claim 29 (depends on 17) A system comprising at least one processor, and one or more computer-readable media including processor-executable instructions that are capable of being executed by the at least one processor, the processor-executable instructions adapted to direct the at least one processor to configure a computer to deploy the locked image and to instruct the computer of the method recited in claim 17. ### Claim 30 A method comprising: securely receiving a locked image having an operating system via a network susceptible to malicious communication, the locked image having one or more security settings being configured to effectively prohibit unsolicited communication via the network from other than a secure source or via a secure port, the security settings including a setting prohibiting communication with any port other than a port used by the secure source, the security settings of the locked image further having been edited by a deployment server after creation of the locked image to further configure the security settings; booting the locked image; receiving instruction from the secure source(s) or via the secure port(s); following the instruction to securely receive a software update via the network; applying the software update effective to improve the security of the operating system; and permitting potentially malicious communication via the network wherein potentially malicious communication comprises unsolicited communication. ### Claim 31 (depends on 30) The method of claim 30, wherein the locked image and the instruction are received from a deployment server via the network. ### Claim 32 (depends on 30) The method of claim 30, wherein at least four of the acts of securely receiving, booting, receiving instruction, following the instruction, applying, and permitting are performed without human interaction. ### Claim 33 (depends on 30) A system comprising at least one processor, and one or more computer-readable media including processor-executable instructions that are capable of being executed by the at least one processor, the processor-executable instructions adapted to direct the at least one processor to configure a computer to receive the locked image, boot the locked image, receive instruction, and follow the instruction, by performing the method recited in claim 30.