# Patent

## Title
Systems and methods for digital fulfillment of streaming applications

## Abstract

In accordance with embodiments of the present disclosure, an information handling system for deployment of a streaming application to a streaming application environment comprising the information handling system and one or more target systems may include computer-readable media for storing a library of one or more sequenced applications and entitlement data associated with the one or more sequenced applications and a processor communicatively coupled to the computer-readable media. The processor may be configured to communicate a query for an entitlement to the sequenced application to a digital assets entitlement system server, responsive to a determination that an entitlement exists for the streaming application environment to the sequenced application, receive the sequenced application from the digital assets entitlement system server, and deploy and provision the sequenced application to the one or more target systems via application streaming.

## Background
TECHNICAL FIELD
The present disclosure relates to the management of information handling systems. More specifically, embodiments of the disclosure provide a system, method, and article of manufacture for deploying streaming applications for use on target systems.
BACKGROUND
As the value and use of information continues to increase, individuals and businesses seek additional ways to process and store information. One option available to users is information handling systems. An information handling system generally processes, compiles, stores, and/or communicates information or data for business, personal, or other purposes thereby allowing users to take advantage of the value of the information. Because technology and information handling needs and requirements vary between different users or applications, information handling systems may also vary regarding what information is handled, how the information is handled, how much information is processed, stored, or communicated, and how quickly and efficiently the information may be processed, stored, or communicated. The variations in information handling systems allow for information handling systems to be general or configured for a specific user or specific use such as financial transaction processing, airline reservations, enterprise data storage, or global communications. In addition, information handling systems may include a variety of hardware and software components that may be configured to process, store, and communicate information and may include one or more computer systems, data storage systems, and networking systems.
In many instances, an administrator of one or more target systems may desire to deploy and provision streaming applications for use on the various target systems. Screaming applications execute on target systems using application streaming. Application streaming is a form of on-demand software distribution in which only essential portions of an application's code need to be installed on the target system. While the end user performs actions in the application, the necessary code and files are delivered over a network from a streaming application library as and when they are required. Application streaming is a related concept to application virtualization, where applications are ran directly from a virtual machine on a central server that is completely separate from the local system. By contrast, application streaming runs the program locally, but still involves the centralized storage of application code.
Packaging or sequencing applications for use in application streaming or application virtualization environments is a complex process which information technology departments often outsource to service teams experienced in the process. Once packing is complete, a further manual process may be needed to transfer packages into an environment, activating the applications, and provisioning them for target systems or users.
SUMMARY
In accordance with the teachings of the present disclosure, the disadvantages and problems associated with deploying and provisioning streaming applications for use on target systems may be substantially reduced or eliminated.
In accordance with embodiments of the present disclosure, an information handling system for deployment of a streaming application to a streaming application environment comprising the information handling system and one or more target systems may include computer-readable media for storing a library of one or more sequenced applications and entitlement data associated with the one or more sequenced applications and a processor communicatively coupled to the computer-readable media. The processor may be configured to communicate a query for an entitlement to the sequenced application to a digital assets entitlement system server, responsive to a determination that an entitlement exists for the streaming application environment to the sequenced application, receive the sequenced application from the digital assets entitlement system server, and deploy and provision the sequenced application to the one or more target systems via application streaming.
In accordance with these and other embodiments of the present disclosure, a computer-implemented method for deployment of a streaming application to a streaming application environment comprising the information handling system and one or more target systems may include communicating a query for an entitlement to the sequenced application to a digital assets entitlement system server. The method may also include, responsive to a determination that an entitlement exists for the streaming application environment to the sequenced application, receiving the sequenced application from the digital assets entitlement system server. The method may further include deploying and provisioning the sequenced application to the one or more target systems via application streaming.
In accordance with these and other embodiments of the present disclosure, an article of manufacture may include a computer readable medium and computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to (i) communicate a query for an entitlement to the sequenced application to a digital assets entitlement system server; (ii) responsive to a determination that an entitlement exists for the streaming application environment to the sequenced application, receive the sequenced application from the digital assets entitlement system server; and (iii) deploy and provision the sequenced application to the one or more target systems via application streaming.
Technical advantages of the present disclosure may be apparent to those of ordinary skill in the art in view of the following specification, claims, and drawings.



BRIEF DESCRIPTION OF THE DRAWINGS
A more complete understanding of the present embodiments and advantages thereof may be acquired by referring to the following description taken in conjunction with the accompanying drawings, in which like reference numbers indicate like features, and wherein:
FIG. 1 illustrates a block diagram of an example information handling system, in accordance with embodiments of the present disclosure;
FIG. 2 illustrates a block diagram of an example digital assets entitlement system in accordance with components of the present disclosure;
FIGS. 3A-B illustrate block diagrams of an example unique system identifier that remains the same when one of its associated system component identifiers has been changed, in accordance with embodiments of the present disclosure;
FIGS. 4A-B illustrate block diagrams of an example unique system identifier that is changed when one of its associated system component identifiers has been changed, in accordance with embodiments of the present disclosure;
FIG. 5 illustrates a block diagram of an example encrypted unique system identifier generated from a set of system component identifiers, in accordance with embodiments of the present disclosure;
FIG. 6 illustrates a block diagram of an example unique system identifier decrypted from an encrypted unique system identifier, in accordance with embodiments of the present disclosure;
FIGS. 7A-B illustrate a flow chart of an example method for performance of digital asset entitlement operations, in accordance with embodiments of the present disclosure;
FIG. 8 illustrates a block diagram of an example system for digital fulfillment of streaming applications, in accordance with embodiments of the present disclosure; and
FIG. 9 illustrates a flow chart of an example method for digital fulfillment of streaming applications, in accordance with embodiments of the present disclosure.



DETAILED DESCRIPTION
Preferred embodiments and their advantages are best understood by reference to FIGS. 1-9, wherein like numbers are used to indicate like and corresponding parts.
For the purposes of this disclosure, an information handling system may include any instrumentality or aggregate of instrumentalities operable to compute, classify, process, transmit, receive, retrieve, originate, switch, store, display, manifest, detect, record, reproduce, handle, or utilize any form of information, intelligence, or data for business, scientific, control, entertainment, or other purposes. For example, an information handling system may be a personal computer, a personal digital assistant (PDA), a consumer electronic device, a network storage device, or any other suitable device and may vary in size, shape, performance, functionality, and price. The information handling system may include memory, one or more processing resources such as a central processing unit (CPU) or hardware or software control logic. Additional components of the information handling system may include one or more storage devices, one or more communications ports for communicating with external devices as well as various input and output (I/O) devices, such as a keyboard, a mouse, and a video display. The information handling system may also include one or more buses operable to transmit communication between the various hardware components.
FIG. 1 illustrates a block diagram of an example information handling system 100, in accordance with embodiments of the present disclosure. Information handling system 100 may include a processor 102, I/O devices 104, a hard drive or disk storage 106, a network port 110, a memory 112, and various other information handling resources 108, all communicatively coupled to each other via one or more buses 114. In some embodiments an information handling system identification similar to that depicted in FIG. 1 may be used to implement one or more methods and/or systems disclosed herein.
A processor 102 may include any system, device, or apparatus configured to interpret and/or execute program instructions and/or process data, and may include, without limitation, a microprocessor, microcontroller, digital signal processor (DSP), application specific integrated circuit (ASIC), or any other digital or analog circuitry configured to interpret and/or execute program instructions and/or process data. In some embodiments, processor 102 may interpret and/or execute program instructions and/or process data stored in memory 112, hard drive 106, and/or another component of system 100.
An I/O device 104 may include any system, device, or apparatus from which processor 102 may receive input or to which processor 102 may deliver output. An I/O device may include a display, a keyboard, a mouse, other I/O devices, and/or associated controllers.
Hard drive 106 may include computer-readable media (e.g., magnetic storage media, optical storage media, opto-magnetic storage media, and/or other type of rotating storage media, flash memory, and/or other type of solid state storage media) and may be generally operable to store data and/or programs (e.g., one or more operating systems and/or one or more application programs). Although FIG. 1 depicts information handling system 100 as including one hard drive 106, information handling system 100 may include any suitable number of hard drives 106.
Network port 110 may include any suitable system, apparatus, or device operable to serve as an interface between information handling system 100 and a network. Network port 110 may enable information handling system 100 to communicate over such network using any suitable transmission protocol and/or standard, including without limitation, Fibre Channel, Frame Relay, Asynchronous Transfer Mode (ATM), Internet Protocol (IP), other packet-based protocol, small computer system interface (SCSI), Internet SCSI (iSCSI), Serial Attached SCSI (SAS) or any other transport that operates with the SCSI protocol, advanced technology attachment (ATA), serial ATA (SATA), advanced technology attachment packet interface (ATAPI), serial storage architecture (SSA), integrated drive electronics (IDE), and/or any combination thereof.
Memory 112 may be communicatively coupled to processor 102 and may include any system, device, or apparatus configured to retain program instructions and/or data for a period of time (e.g., computer-readable media). Memory 112 may include random access memory (RAM), electrically erasable programmable read-only memory (EEPROM), a Personal Computer Memory Card International Association (PCMCIA) card, flash memory, magnetic storage, opto-magnetic storage, or any suitable selection and/or array of volatile or non-volatile memory that retains data after power to information handling system 100 is turned off. Although FIG. 1 depicts information handling system 100 as including one memory 112, information handling system 100 may include any suitable number of memories 112.
Other information handling resources 108 may include any component systems, devices, or apparatuses of an information handling system 100, including without limitation, processors, buses, memories, I/O devices and/or interfaces, storage resources, network interfaces, motherboards, electro-mechanical devices (e.g., fans), displays, and power supplies.
The one or more buses 114 may comprise any suitable collection of systems, devices, or apparatuses configured to transfer data between various components of information handling system 100. For example, one or more buses 114 may include a serial advanced technology attachment (SATA) bus, a Peripheral Component Interconnect (PCI)/PCMCIA bus, Universal Serial Bus (USB), an SCSI bus, FireWire (IEEE 1394) bus, InfiniBand bus, any other suitable bus, or any combination of the foregoing.
FIG. 2 illustrates a block diagram of an example digital assets entitlement system 218, in accordance with embodiments of the present disclosure. In some embodiments, digital assets entitlement system 218 may be implemented for managing the entitlement of a system 204 to process a digital asset 246. In these and other embodiments, digital assets entitlement system 218 may be implemented on one or more servers 210, which may be commercially coupled to a network 252. In various embodiments, network 252 may comprise a public network, for example the Internet, a physical private network, a virtual private network (VPN), or any combination thereof. As shown in FIG. 2, digital assets entitlement system 218 may include a user service and support module 220, a digital fulfillment module 222, and a system identification and security module 224. Digital assets entitlement system 218 may likewise comprise a personalization module 226, an entitlement module 228, a sales integration module 230, and a manufacturing integration module 232. In addition, digital assets entitlement system 218 may be configured to access a digital assets data repository 212, an entitlement data repository 214, and a system identifier (ID) data repository 216, each of which may be implemented on one or more servers 210 communicatively coupled to a network 252.
As used herein, a digital asset 246 refers to any digital asset, for example, a software application, a deliverable or performable service, music, video, software activation key, personalization instructions, files, etc. that are digitally deliverable either wholly or partially. As likewise used herein, a digital assets entitlement may refer to the association of a predetermined digital asset 246 with a target system 204. In various embodiments, an entitlement record may include the digital assets entitlement data (e.g., license information, etc.) that allows digital asset 246 to be processed by a target system 204 identified by a corresponding unique system identifier 206. In these and other embodiments, the entitlement record may be processed by entitlement module 228 and stored in entitlement data repository 214. Likewise, as used herein, a system 204 may comprise an information handling system (e.g., a personal computer, a laptop computer, a tablet computer, a PDA, a mobile telephone, or any other suitable device) operable to store a unique system ID 206, perform digital asset entitlement operations with a personalization agent, and operable to establish an online session with digital assets entitlement system 218 via network 252.
In some embodiments, digital assets entitlement and system personalization operations may be performed by a user 202, in either a physical environment or an online environment. A user 202 may comprise a system purchaser enterprise administrator, information technologist, or another suitable person. As an example, a physical environment may comprise a retailer 240 operating a physical point-of-sale (POS) system 242. As another example, an online environment may comprise a system manufacturer 234, after-point-of-sale (APOS) vendor 236, or digital assets vendor 238, that respectively accepts online orders for systems or digital assets via network 252.
If the digital assets entitlement and system personalization operations are performed in an online environment, then user 202 may decide whether to purchase a custom-configured or pre-configured system 204. If the system 204 is to be pre-configured, then it may be selected for online purchase by the user 202 and its unique identifier 206 may be determined. In some embodiments, the unique system identifier 206 may be stored in the basic input/output system (BIOS) of the pre-configured system 204. However, if the system 204 is to be custom-configured, then it may be custom-configured for online purchase by user 202. Once manufactured by system manufacturer 234, a unique system identifier may be generated as described in greater detail herein.
In various embodiments, manufacturing integration module 232 may coordinate the custom configuration of the system 204 with digital assets entitlement system 218. Likewise, system identification and security module 224 may coordinate the generation of unique system identifier 204 and its storage in the repository of system identifier data 216. User 202 may then select a digital asset 246 for online purchase, followed by selecting personalization options for the pre-configured or custom-configured system 204. In various embodiments, the personalization module 226 coordinates the selection of personalization options with digital assets entitlement system 218. As used herein, a system personalization option refers to any feature, capability, or function that may be applied to a target system 204. As an example, a personal computer desktop wallpaper or user interface options (e.g., a “classic” interface) are personalization options.
However, if the digital assets entitlement and system personalization operations are performed in a physical environment, then user 202 may select a pre-configured system 204 and physical representations of digital assets 246 to be purchased. In various embodiments, the digital assets 246 may be physically represented as images and/or text on a card or a package, yet the digital assets themselves may not be included within the card or package. User 202 may then select system personalization options for the pre-configured system 204. In various embodiments, the system personalization options may likewise be physically represented as images and/or text on a card or a package.
The digital assets product identifier (ID) may then be scanned with a scanner 244 from its corresponding physical representation, followed by scanning its corresponding digital assets activation key or other entitlement data. In various embodiments, it is not necessary to scan the digital assets activation key or other entitlement data as it is provided by digital assets entitlement system 218 during digital asset entitlement operations described in greater detail herein. Data related to the previously selected personalization options may then likewise be scanned, followed by determining unique system identifier 206 of pre-configured system 204. In various embodiments, the digital assets product ID, its associated activation key or entitlement data, the personalization option data, and the unique system identifier may be represented by a bar code 248 or other indicia on a card or physical package. In various other embodiments, the digital assets product ID, its associated activation key or entitlement data, the personalization option data, and the unique system identifier may be stored in a radio frequency identifier (RFID) 250 tag affixed to the physical representation of the digital asset. Those of skill in the art may appreciate that many such embodiments are possible and that the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
A purchase transaction for the custom-configured or pre-configured system 204 and any associated digital assets 246 and personalization options may then be completed. In various embodiments, the processing of the purchase transaction may be performed by the sales integration module 230. In these and other embodiments, the financial proceeds of the purchase transaction may be settled between multiple parties. For example, a system manufacturer 234 may receive a portion of the purchase transaction corresponding to the cost of the system 204. One or more digital assets vendors 238 may likewise receive a proportionate share of the purchase transaction corresponding to the digital asset 246 they respectively provide.
Digital asset entitlement operations, as described in greater detail herein, may then be performed by digital assets entitlement system 218 to bind the digital assets 246, the personalization options, and their respective digital assets entitlement data to unique system identifier 206 of target system 204. The resulting bound data, including data associated with the digital assets (e.g., installation files, etc.) may then be stored in the repository of entitlement data 214 and purchased system 204 may then be delivered to user 202 or another person designated by user 202. In various embodiments, entitlement module 228 may generate, and then process, the digital assets entitlement data and user service and support module 220 may coordinate the delivery of system 204 to user 202 or another person designated by user 202.
Standard operating system (OS) out-of-the-box-experience (OOBE) or hypervisor boot operations may be performed on the system 204, followed by loading a personalization agent 208. In various embodiments, the personalization agent 208 has a unique identifier that may be associated with one or more unique system component identifiers. In some embodiments, the unique identifier of the personalization agent may be uniquely associated with the current unique system identifier 206 associated with the system 204. In other embodiments, a portion of the personalization agent 208 may be delivered to the system 204 in an encrypted form and may then be decrypted prior to being loaded on the system 204. In these embodiments, the primary system identifier (e.g., service tag number, serial number, etc.), may be used as a decryption key to decrypt the personalization agent 208.
In these and other embodiments, secondary system identifiers may be stored on system 204 (e.g., in the BIOS, in flash memory, on a hard disk, etc.) as well as in digital assets entitlement system 218. In these and other embodiments, digital assets entitlement system 218 may use the secondary system identifiers to encrypt a portion of personalization agent 208 before it is downloaded to system 204. Once downloaded, the unencrypted portion of personalization agent 208 may use the secondary system identifiers stored on system 204 to decrypt the encrypted portion of personalization agent 208. In some embodiments, the secondary system identifiers may likewise be encrypted and may first be decrypted before they are used to decrypt the encrypted portion of personalization agent 208. In other embodiments, the secondary system identifiers may be stored in a Trusted Platform Module (TPM). Skilled practitioners of the art may appreciate that many such embodiments are possible and the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
Personalization agent 208 may query target system 204 for its unique system identifier 206. In various embodiments, unique system identifier 206 associated with system 204 may be stored in the target system's BIOS, flash memory, a hard disk, and/or other memory device. Personalization agent 208 may then automatically establish a communication session with digital assets entitlement system 218 and use unique system identifier 206 to authenticate system 204. Unique system identifier 206 may then be used by the personalization agent 208 to determine entitled digital assets and personalization options corresponding to the unique system identifier 206.
Once determined, the corresponding personalization options and digital assets 246, along with their associated digital assets entitlement data, may be respectively downloaded to target system 204 from the repository of digital assets 212 and the repository of entitlement data 214. In some embodiments, the personalization options and digital assets 246, along with their associated digital assets entitlement data 214, may be downloaded from a single server 210 on network 252. In other embodiments, the personalization options and digital assets 246 may be downloaded from one or more servers 210 on network 252. In yet other embodiments, the personalization options, digital assets 246, and associated digital assets entitlement data 214 may be respectively downloaded from a plurality of servers 210 on network 252. As an example, a first digital asset 246 may be provided by system manufacturer 234 and a second digital asset 246 may be provided by a digital assets vendor 238. Likewise, a plurality of digital assets 246 may be provided by a corresponding plurality of digital assets vendors 238. Skilled practitioners of the art may appreciate that many such embodiments and examples are possible and the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
In various embodiments, digital assets entitlement system 218 may manage the respective location of the personalization options, digital assets 246, and associated digital assets entitlement data 214 to initiate its provision. Once downloaded, personalization agent 208 may use digital assets entitlement data 214 to install digital assets 246 and personalization options on system 204. Thereafter, user 202 or another person may decide to perform an APOS purchase of digital asset 246. As used herein, an APOS purchase of digital assets may refer to any purchase of digital asset 246 made after the initial online or physical purchase of system 204. In various embodiments, the APOS purchase of a digital asset 246 may be performed in a physical, online, or enterprise point-of-sale environment. If the APOS purchase is performed in an online environment, for example from APOS vendor 236, then user 202 or another person may select a digital asset 246 for online purchase. Personalization agent 208 may then determine unique system identifier 206 of system 204. An APOS purchase transaction may then be performed for purchase of the selected digital asset 246. However, if the APOS purchase is performed in a physical environment, then the user 202 or another person may select a physical representation of a digital asset 246 to be purchased. The digital assets product ID may then be scanned from its corresponding physical representation, followed by scanning its corresponding digital assets activation key or other entitlement data.
Digital asset entitlement operations, as described in greater detail herein, may then be performed by digital assets entitlement system 218 to bind digital assets 246 and their respective digital assets entitlement data 214 associated with the APOS purchase to unique system identifier 206 of target system 204. The resulting bound data, including data associated with the digital assets (e.g., installation files, etc.) may then be stored, as described in greater detail herein, in digital assets entitlement system 218. Personalization agent 208, as likewise described in greater detail herein, then automatically establishes a communicative session with digital assets entitlement system 218, and may download the purchased digital assets 246 and their associated digital assets entitlement data 214. Once downloaded, personalization agent 208 may then use the associated digital assets entitlement data 214 to install the downloaded digital asset 246 on system 204.
FIGS. 3A-B illustrate a block diagram of an example unique system identifier 320 that remains the same when one of its associated system component identifiers has been changed, in accordance with embodiments of the present disclosure. As shown in FIG. 3A, an original unique system identifier 320 may be generated from a plurality of unique system component identifiers 302, which correspond to a plurality of system components included in a target system 204. As likewise shown in FIG. 3A, unique system component identifiers 302 may comprise a Model Number 304 ‘SA310J43’, a Serial Number 306, sometimes referred to as a service tag number or a primary system identifier, ‘SEM5239923875’, a Factory ID 308 ‘AUS’, and a Manufacture Date 310 ‘111909’. Unique system component identifiers 302 may likewise comprise an Original Motherboard ID 314 ‘19374WS238017BH’, a Processor ID 316 ‘92348430-432919237’, a Hard Drive ID 318 ‘L83747HJ3672’, etc.
As described in greater detail herein, once generated, original unique system identifier 320 may be associated, such as, for example, through a binding operation, with predetermined digital assets 332 to generate a digital assets entitlement 330. As likewise described in greater detail herein, digital assets entitlement 330 entitle a target system 204, which may be associated with the original unique system identifier 320, to process the digital assets 332. However, it is not uncommon for system components to be replaced due to failure, erratic performance, becoming outmoded, or for other reasons. It will be appreciated that the entitlement 330 between original unique system identifier 320 and digital assets 332 may be compromised as a result of such a replacement. For example, as illustrated in FIG. 3B, the Original Motherboard ID 314 ‘19374WS238017BH’ may be replaced with a New Motherboard ID 334 ‘56812FR853945PL’. However, in such case the original unique system identifier 320 may remain unchanged.
In various embodiments, extract, transform, and load (ETL) and other database operations may be performed to manage the integrity of the relationship between original unique system identifier 320 and the plurality of unique system component identifiers 302. As an example, Original Motherboard ID 314 ‘19374WS238017BH’ may remain as a subset of original unique system identifier 320, even though it may have been deactivated or invalidated as a unique system component identifier 302. However, in these and other embodiments, relational database operations known to those of skill in the art may be applied to maintain the relationship between original unique system identifier 320, New Original Motherboard ID 334 ‘56812FR853945PL’, and unchanged unique system component identifiers 302. Accordingly, the integrity of entitlement 330 between original unique system identifier 320 and digital assets 332 may be perpetuated. It may be appreciated by skilled practitioners of the art that many such embodiments are possible and the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
FIGS. 4A-B illustrate a block diagram of an example unique system identifier 320 that is changed when one of its associated system component identifiers has been changed, in accordance with embodiments of the present disclosure. As shown in FIG. 4A, an original unique system identifier 320 may be generated from a plurality of unique system component identifiers 302, which correspond to a plurality of system components included in a target system 204. As likewise shown in FIG. 3A, unique system component identifiers 302 may comprise Model Number 304 ‘SA310J43’, Serial Number 306, sometimes referred to as a service tag number or a primary system identifier, ‘SEM5239923875’, Factory ID 308 ‘AUS’, and Manufacture Date 310 ‘111909’. Unique system component identifiers 302 may likewise comprise Original Motherboard ID 314 ‘19374WS238017BH’, Processor ID 316 ‘92348430-432919237’, Hard Drive ID 318 183747HJ3672’, etc.
As described in greater detail herein, once generated, original unique system identifier 320 may be associated, such as, for example, through a binding operation, with predetermined digital assets 332 to generate a digital assets entitlement 330. As likewise described in greater detail herein, digital assets entitlement 330 entitles a target system 204, which may be associated with original unique system identifier 320, to process digital assets 332. However, it is not uncommon for system components to be replaced due to failure, erratic performance, becoming outmoded, or for other reasons. It will be appreciated that entitlement 330 between the original unique system identifier 320 and digital assets 332 may be compromised as a result of such a replacement. For example, as illustrated in FIG. 4B, Original Motherboard ID 314 ‘19374WS238017BH’ may be replaced with New Motherboard ID 334 ‘56812FR853945PL’. As result, a new unique system identifier 420 may be generated, which may be a concatenation of the plurality of unique system component identifiers 402, including New Original Motherboard ID 334 ‘56812FR853945PL’ as a subset.
In various embodiments, a first set of operations may be performed to remove entitlement 330 between original unique system identifier 320 and digital assets 332. A second set of operations may then be performed to associate new unique system identifier 420 with digital assets 332 to generate a new entitlement 430. In these and other embodiments, original unique system identifier 320 may then be invalidated. Accordingly, the integrity of original entitlement 330 between original unique system identifier 320 and digital assets 332 may be perpetuated by new entitlement 430 between new unique system identifier 420 and digital assets 332. Skilled practitioners of the art may appreciate that many such embodiments are possible and the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
FIG. 5 illustrates a block diagram of an example encrypted unique system identifier 528 generated from a set of system component identifiers, in accordance with embodiments of the present disclosure. In these embodiments, a source unique system identifier 520 may be generated from a plurality of original unique system component identifiers 502, which may correspond to a plurality of system components included in a target system 204. As shown in FIG. 5, original unique system component identifiers 502 may comprise Model Number 304 ‘SA310J43’, Serial Number 306, sometimes referred to as a service tag number or a primary system identifier, ‘SEM5239923875’, Factory ID 308 ‘AUS’, Timestamp Date 510 ‘111909’, and Timestamp Time 512 ‘14:27:26:34’. Original unique system component identifiers 502 may likewise comprise Original Motherboard ID 314 ‘19374WS238017BH’, Processor ID 316 ‘92348430-432919237’, Hard Drive ID 318 183747HJ3672’, etc.
An encryption operation 524 may then be performed on source unique system identifier 520 to generate original encrypted unique system identifier 528. In various embodiments, the encryption operation may comprise the use of a private key, a public key, key pairs, or any combination of keys and cryptographic operations such as implemented in a public key infrastructure (PKI), for example. As an example, the original encrypted unique system identifier 528 may be generated using a private key associated with the manufacturer of the system and a public key associated with the system itself. In some embodiments, the Timestamp Date 510 ‘111909’ and the Timestamp Time 512 ‘14:27:26:34’ may likewise be used to generate the encrypted unique system identifier 528. Skilled practitioners of the art may be familiar with such cryptographic operations and may appreciate that many such embodiments are possible and that the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
As described in greater detail herein, once generated, original encrypted unique system identifier 528 may be associated, such as, for example, through a binding operation, with predetermined digital assets 332 to generate a digital assets entitlement 530. As likewise described in greater detail herein, digital assets entitlement 530 may entitle a target system 204, which may be associated with original encrypted unique system identifier 528, to process digital assets 332.
FIG. 6 illustrates a block diagram of an example unique system identifier decrypted from an encrypted unique system identifier 622, in accordance with embodiments of the present disclosure. It is not uncommon for system components to be replaced due to failure, erratic performance, becoming outmoded, or for other reasons. However, the replaced system component will typically have a different unique system component identifier. As a result, the entitlement association between a unique system identifier and predetermined digital assets may be compromised as a result of such a replacement, which in turn may prevent target system 204 from processing the digital assets 246.
In various embodiments, the unique system component identifier of the replacement system component may be unknown until it is replaced in the target system 204. In these and other embodiments, the system component may be replaced in the target system 204, the target system may then be initiated (e.g., booted), and an inventory of unique system component identifiers may be performed. In some embodiments, one or more unique system component identifiers, for example a serial number or service tag, may be visible and may be visually inventoried. In other embodiments, one or more unique system component identifiers, for example a motherboard, processor, or hard drive serial number, may not be visible and may be automatically inventoried.
As shown in FIG. 6, a new source unique system identifier 650 may be generated from the inventoried unique system component identifiers. In some embodiments, a timestamp date and a timestamp time may be components of new source unique system identifier 650. In these embodiments, the timestamp date and a timestamp time may be used to validate the authenticity of new source unique system identifier 650. As an example, the provider of the replacement part may have stipulated that the replacement part be replaced on Nov. 20, 2009, between 8:00 AM and 6:00 PM. Accordingly, a timestamp date of Nov. 20, 2009 and a timestamp time of 16:33:42:05 may provide validation that the replacement part was replaced within the specified date and time interval.
An encryption operation 652 may then be performed on new source unique system identifier 650 to generate a new encrypted unique system identifier 628. As an example, the encryption operation may be performed using a private key associated with the target system and a public key associated with the provider of the replacement system component. The new encrypted unique system identifier 628 may then be communicated to digital assets entitlement system 218, which may in turn perform a decryption operation 626 to generate a decrypted unique system identifier 622.
As likewise shown in FIG. 6, ETL and other database operations 634 may be performed on the decrypted unique system identifier 622 to generate new unique system component identifiers 602. As shown in FIG. 6, the new unique system component identifiers may now comprise Model Number 304 ‘SA310J43, Serial Number 306, ‘SEM5239923875’, Factory ID 308 ‘AUS’, Timestamp Date 610 ‘112009’, and Timestamp Time 612 ‘16:33:42:05’. New unique system component identifiers 602 may likewise comprise New Motherboard ID 314 ‘56812FR853945PL’, Processor ID 316 ‘92348430-432919237’, Hard Drive ID 318 ‘L83747HJ3672’, etc. In some embodiments, Timestamp Date 610 and Timestamp Time 612 may be compared to previously authorized timestamp date and timestamp times to validate the authenticity of new unique system component identifiers 602 and their corresponding decrypted unique system identifier 622. In these and other embodiments, if the decrypted unique system identifier 622 is validated, then a first set of operations may be performed to remove entitlement 330 between the original encrypted unique system identifier and digital assets 332. A second set of operations may then be performed to associate new encrypted unique system identifier 628 with digital assets 332 to generate new entitlement 630. Accordingly, the integrity of the original entitlement between the original encrypted unique system identifier and digital assets 332 may be perpetuated by new entitlement 630 between new encrypted unique system identifier 628 and digital assets 332.
In various other embodiments, the provider of the replacement system component may be able to determine its associated unique system component identifier. In some embodiments, the unique system component identifier may be known in advance. In other embodiments, the unique system component identifier may be one of a pool of, or a range of, possible unique system component identifiers set aside for replacement purposes. As described in greater detail herein, a new source unique identifier may be generated, using the unique system component identifier of the component to be replaced. Once the new source unique identifier is generated, the unique system component identifier of the replaced system component may be invalidated. In these and other embodiments, the system component may be replaced in the target system, the target system may then be initiated (e.g., booted), and an inventory of unique system component identifiers may be performed. In some embodiments, one or more unique system component identifiers, for example a serial number or service tag, may be visible and may be visually inventoried. In other embodiments, one or more unique system component identifiers, for example a motherboard, processor, or hard drive serial number, may not be visible and may be automatically inventoried.
As shown in FIG. 6, a new source unique system identifier 650 may be generated from the inventoried unique system component identifiers. In some embodiments, a timestamp date and a timestamp time may be components of new source unique system identifier 650. In these embodiments, the timestamp date and a timestamp time may be used to validate the authenticity of new source unique system identifier 650. An encryption operation 652 may then be performed on new source unique system identifier 650 to generate new encrypted unique system identifier 628. As an example, the encryption operation may be performed using a private key associated with the target system and a public key associated with the provider of the replacement system component. The new encrypted unique system identifier 628 may then be communicated to a digital assets entitlement system, which in turn may perform a decryption operation 626 to generate a decrypted unique system identifier 622.
Comparison operations 654 may then be performed between the new source unique system identifier and decrypted unique system identifier 622. If comparison operations 654 are successful, then a first set of operations may be performed to remove the entitlement 330 between the original encrypted unique system identifier and digital assets 332. A second set of operations may then be performed to associate new encrypted unique system identifier 628 with digital assets 332 to generate a new entitlement 630. Accordingly, the integrity of the original entitlement between the original encrypted unique system identifier and digital assets 332 may be perpetuated by the new entitlement 630 between the new encrypted unique system identifier 628 and the digital assets 332. Skilled practitioners of the art may appreciate that many such embodiments are possible and the foregoing is not intended to limit the spirit, scope, or intent of the disclosure.
FIGS. 7A-B illustrate a flow chart of an example method 700 for performance of digital asset entitlement operations, in accordance with embodiments of the present disclosure. According to certain embodiments, method 700 may begin at step 702. As noted above, teachings of the present disclosure may be implemented in a variety of configurations of system 200. As such, the preferred initialization point for method 700 and the order of the steps 702-734 comprising method 700 may depend on the implementation chosen.
In method 700, digital asset entitlement operations may be started in step 702, followed by the selection of a target system in step 704 for digital assets entitlement. The unique system identifier of the target system, as described in greater detail herein, may be determined in step 706, followed by a determination being made in step 708 whether a device record has been established for the target system. If not, then the device record may be generated in step 710. As used herein, a device record may refer to a data record comprising data related to a system which will receive an entitlement to process associated digital assets. In various embodiments, the unique system identifier of the target system may be stored in the device record. In various embodiments, other records may be associated with the device record to further describe the system, such as, for example, its model, type, make, internal identifiers, etc.
Once the device record has been generated, or if it is determined in step 708 that it has already been established, then a determination may be made in step 712 whether an account record has been established for a user. If not, then the account record may be generated for the user in step 714. As used herein, an account record may refer to a data record comprising data related to the association of multiple devices or systems to one or more entities. In various embodiments, the entity may be a single individual or a group of individuals. As an example, the entity may be a household with multiple PCs, a small business with several employees, a large corporation with many employees, etc. Other records may be attached to the account to further describe the account holder, payment information related to the account, etc. Accounts may further be broken down or organized into sub-accounts as needed (e.g., to describe departments within an enterprise). In various embodiments, a user may be associated with a single device or system or multiple devices or systems in the account record. Conversely, a group of users may be associated with a single device or system or multiple devices in the account record. Further, more groups of individual users may likewise be associated with groups of individual devices or systems. Those of skill in the art may appreciate that many such associations are possible and the foregoing is not intended to limit the spirit, scope, or intent of the disclosure. Once the account record has been generated, or if it is determined in step 712 that it has already been established, then a determination may be made in step 716 whether the account record may be associated with the target system. If not, then the account record may be associated with the target system in step 718.
Once the account record has been associated with the target system, or if it is determined in step 716 that it has already been associated, then a target list of digital assets may be presented in step 720 for entitlement. A determination may then be made in step 722 whether to generate an entitlement for a digital asset. If not, then a determination may be made in step 732 whether to continue digital asset entitlement operations. If so, then the process may be continued, proceeding with step 704. Otherwise, digital asset entitlement operations may be ended in step 734. However, if it is determined in step 722 to generate an entitlement for a digital asset, then a target digital asset may be selected in step 724. A digital assets entitlement may then be generated in step 726 by performing operations to associate the selected digital asset's corresponding license record with the aforementioned device record, account record, and/or other predetermined records. The resulting digital assets entitlement association may then be added to the entitlement record in step 728. A determination may then be made in step 730 whether to generate another digital assets entitlement. If so, the process may be continued, proceeding with step 724. Otherwise, a determination may be made in step 732 whether to continue digital asset entitlement operations. If so, then the process may be continued, proceeding with step 704. Otherwise digital asset entitlement operations may be ended in step 734.
Although FIGS. 7A and 7B disclose a particular number of steps to be taken with respect to method 700, method 700 may be executed with greater or lesser steps than those depicted in FIGS. 7A and 7B. In addition, although FIGS. 7A and 7B disclose a certain order of steps to be taken with respect to method 700, the steps comprising method 700 may be completed in any suitable order.
Method 700 may be implemented using information handling system 100, system 200, components thereof, and/or any other system operable to implement method 700. In certain embodiments, method 700 may be implemented partially or fully in software and/or firmware embodied in computer-readable media.
FIG. 8 illustrates a block diagram of an example system 800 for digital fulfillment of streaming applications, in accordance with embodiments of the present disclosure. As shown in FIG. 8, system 800 may include a digital assets entitlement system server 210, such as that described with respect to FIG. 2 above. As shown in FIG. 8, digital assets repository 212 of digital assets entitlement system server 210 may comprise sequenced applications 802. A sequenced application 802 may comprise a collection of one or more files constituting an intelligently sequenced installation package for a streaming application. For example, a sequenced application may be created using sequencing tools known in the art whereby an application is installed to an information handling system having a “bare” operating system and the sequencing tools record the changes to the information handling system associated with the installation. The sequence of such changes and the changes themselves may be stored to a database or other structure, and packaged as a sequenced application 802.
Digital assets entitlement system server 210 may be communicatively coupled to one or more digital assets streaming servers 810 (e.g., via a network, such as network 252). As depicted in FIG. 8, each digital assets streaming server 810 may comprise a streaming application library 812, entitlement data 814, system ID data 816, digital assets streaming system 818, policy management system 806, and a fulfillment agent 808.
Fulfillment agent 808 may interact with digital assets entitlement system 218 in order to query for entitlements for streaming applications and manage deployment and provisioning of such streaming applications. Policy management system 806 may manage and enforce various policies for target systems 204 and streaming applications, as such policies may be set by a user 202. Digital assets streaming system 818 may communicate streaming applications stored in streaming application library 812 to individual target systems 204 in accordance with policies and entitlement data 814, and otherwise control or manage execution of such applications on the various target systems 204.
Entitlement data 814 may be similar or identical to entitlement data 214, and may include information regarding the number and types of software licenses available for one or more applications stored in streaming application library 812. Similarly, system ID data 816 may be similar or identical to system ID data 214, and may include information regarding unique identifiers of the various target systems 204.
As depicted in FIG. 8, a digital assets streaming server 810 may be communicatively coupled (e.g., via a network such as network 252) to digital assets entitlement system server 210. In addition, a digital assets streaming server 810 may be communicatively coupled (e.g., via a network such as network 252) to one or more target systems 204. Target systems 204 may be similar or identical to structure and functionality as systems 204 described with respect to FIG. 2 above. Together, a digital assets streaming server 810 and the target systems 204 to which it is coupled may comprise a “streaming application environment.”
In operation, digital assets entitlement operations, such as those described in this disclosure (including with respect to FIGS. 9 and 10 below), may be carried out between digital assets entitlement system server 210 and digital assets streaming server 810 in order to generate entitlements for and deploy and provision sequences applications to one or more target systems 204 in order to match authorized target systems 204 to selected streaming applications. Sequencing of applications to create sequenced applications 802 may be performed by known industry-standard tools, and such process is outside the scope of this disclosure. Once an application is sequenced, entitlement data 214 associated with the sequenced application 802 may be created which matches a streaming application environment to the sequenced application 802.
Fulfillment agent 808 executing on digital assets streaming server 810 within the streaming application environment may query digital assets entitlement system 218 for an entitlement to a sequenced application 802. If digital assets entitlement system 218 finds an entitlement for such streaming application environment in entitlement data 214, the digital assets management system 218 may deliver (e.g., via a network, such as network 252) such sequenced application to digital assets streaming server 810, where it may then be stored in streaming application library 812.
After delivery, fulfillment agent 808 may determine from entitlement data 814 the number and types of entitlements associated with the delivered application for use in the streaming application environment. Fulfillment agent 808 may also communicate to policy management system 806 that the delivered streaming application is ready for provisioning on one or more target systems 204 of the streaming application environment. Depending on policy set (e.g., by a user 202) for the streaming application environment, the policy management system may signal to the digital assets streaming system 818 that the application is ready to be deployed and may provision the application to the various target systems 204 (e.g., in response to a request by a target system 204 to execute the application) in accordance with the policies and entitlements as set forth in the entitlement data. In situations in which user 202 sets a policy to require approval for execution of a streaming application by a target system 204, such user 202 may interface with the policy management system 806 to approve the deployment and provisioning of the application for the target system 204.
FIG. 9 illustrates a flow chart of an example method 900 for digital fulfillment of streaming applications, in accordance with embodiments of the present disclosure. According to certain embodiments, method 900 may begin at step 902. As noted above, teachings of the present disclosure may be implemented in a variety of configurations of systems 200 and 800. As such, the preferred initialization point for method 900 and the order of the steps comprising method 900 may depend on the implementation chosen.
In method 900, digital fulfillment of streaming applications may begin in step 902. At step 904, fulfillment agent 808 executing on digital assets streaming server 810 within a streaming application environment may query digital assets entitlement system 218 for an entitlement to a sequenced application 802. At step 906, digital assets entitlement system 218 may determine if an entitlement for such streaming application environment exists in entitlement data 214. If an entitlement exists, method 900 may proceed to step 908. Otherwise, method 900 may end.
At step 908, in response to a determination that an entitlement for the sequenced application 802 exists for the streaming application environment, the digital assets management system 218 may deliver (e.g., via a network, such as network 252) such sequenced application to digital assets streaming server 810, where it may then be stored in streaming application library 812.
At step 910, digital assets streaming server 810 may deploy and provision the delivered application to one or more target systems 204 in accordance with entitlement data 814 associated with the delivered application and/or one or more policies set by user 202 for the delivered application. After completion of step 910, method 900 may end.
Although FIG. 9 discloses a particular number of steps to be taken with respect to method 900, method 900 may be executed with greater or lesser steps than those depicted in FIG. 9. In addition, although FIG. 9 discloses a certain order of steps to be taken with respect to method 900, the steps comprising method 900 may be completed in any suitable order.
Method 900 may be implemented using information handling system 100, system 200, system 800, components thereof, and/or any other system operable to implement method 900. In certain embodiments, method 900 may be implemented partially or fully in software and/or firmware embodied in computer-readable media.
The present disclosure is well adapted to attain the advantages mentioned as well as others inherent therein. While the present disclosure has been depicted, described, and is defined by reference to particular embodiments of the disclosure, such references do not imply a limitation on the disclosure, and no such limitation is to be inferred. The disclosure is capable of considerable modification, alteration, and equivalents in form and function, as will occur to those ordinarily skilled in the pertinent arts. The depicted and described embodiments are examples only, and are not exhaustive of the scope of the disclosure.
For example, the above-discussed embodiments include software modules that perform certain tasks. The software modules discussed herein may include script, batch, or other executable files. The software modules may be stored on a machine-readable or computer-readable storage medium such as, for example, a disk drive. Storage devices used for storing software modules in accordance with embodiments of the disclosure may be magnetic floppy disks, hard disks, or optical discs such as CD-ROMs or CD-Rs, for example. A storage device used for storing firmware or hardware modules in accordance with embodiments of the disclosure may also include a semiconductor-based memory, which may be permanently, removably or remotely coupled to a microprocessor/memory system. Thus, the modules may be stored within a computer system memory to configure the computer system to perform the functions of the module. Other new and various types of computer-readable storage media may be used to store the modules discussed herein. Additionally, those skilled in the art will recognize that the separation of functionality into modules is for illustrative purposes. Alternative embodiments may merge the functionality of multiple modules into a single module or may impose an alternate decomposition of functionality of modules. For example, a software module for calling sub-modules may be decomposed so that each sub-module performs its function and passes control directly to another sub-module.
Accordingly, although the present disclosure has been described in detail, it should be understood that various changes, substitutions, and alterations can be made hereto without departing from the spirit and the scope of the disclosure as defined by the appended claims.

## Claims

1. An information handling system for deployment of a streaming application to a streaming application environment comprising the information handling system and a plurality of target systems, the information handling system comprising:
non-transitory computer-readable storage media for storing a sequenced application and entitlement data associated with the sequenced application, wherein the entitlement data includes information regarding a number and types of entitlements available for the sequenced application, wherein the sequenced application:
includes a plurality of information handling system changes, recorded by a sequencing tool, associated with an installation of a particular application; and
sequence information indicative of a sequence of said changes; and

a processor communicatively coupled to the non-transitory computer-readable storage media and configured to:
communicate a query for an entitlement to the sequenced application to a digital assets entitlement system server;
responsive to a determination that an entitlement exists for the streaming application environment to the sequenced application, receive the sequenced application from the digital assets entitlement system server;
determine from entitlement data a number and types of entitlements available to the sequenced application for the plurality of target systems; and
based on the number and types of entitlements available to the sequenced application for the plurality of target systems, deploy and provision the sequenced application to the plurality of target systems via application streaming.

2. The information handling system of claim 1, the processor configured to deploy and provision the sequenced application to the plurality of target systems in accordance with the entitlement data.

3. The information handling system of claim 1, the processor configured to deploy and provision the sequenced application to the plurality of target systems in accordance with policies set by a user.

4. A computer-implemented method for deployment of a streaming application to a streaming application environment comprising the information handling system and a plurality of target systems, comprising:
communicating a query for an entitlement to a sequenced application to a digital assets entitlement system server;
responsive to a determination that an entitlement exists within entitlement data of the digital assets entitlement system server for the streaming application environment to the sequenced application, receiving the sequenced application from the digital assets entitlement system server in a library of one or more sequenced applications, wherein the entitlement data includes information regarding a number and types of entitlements available for the sequenced application and wherein the sequenced application includes:
a plurality of information handling system changes, recorded by a sequencing tool, associated with an installation of a particular application and;
sequence information indicative of a sequence of said changes;

determining from entitlement data a number and types of entitlements available to the sequenced application for the plurality of target systems; and
based on the number and types of entitlements available to the sequenced application for the plurality of target systems, deploying and provisioning the sequenced application to the plurality of systems via application streaming.

5. The method of claim 4, wherein deploying and provisioning the sequenced application to the plurality of target systems comprises deploying and provisioning the sequenced application to the plurality of target systems in accordance with the entitlement data.

6. The method of claim 4, wherein deploying and provisioning the sequenced application to the plurality of target systems comprises deploying and provisioning the sequenced application to the plurality of target systems in accordance with policies set by a user.

7. An article of manufacture comprising:
a non-transitory computer readable medium; and
computer-executable instructions carried on the non-transitory computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, in a streaming application environment comprising an information handling system and a plurality of target systems:
communicate a query for an entitlement to sequenced application to a digital assets entitlement system server;
responsive to a determination that an entitlement exists within entitlement data of the digital assets entitlement system server for the streaming application environment to the sequenced application, receive the sequenced application from the digital assets entitlement system server, wherein the entitlement data includes information regarding a number and types of entitlements available for the sequenced application stored in a library;
determine from entitlement data a number and types of entitlements available to the sequenced application for the plurality of target systems; and
based on the number and types of entitlements available to the sequenced application for the plurality of target systems, deploy and provision the sequenced application to the plurality of target systems via application streaming, wherein the sequenced application includes:
a plurality of information handling system changes, recorded by a sequencing tool, associated with an installation of a particular application; and
sequence information indicative of a sequence in which said changes occurred.

8. The article of claim 7, wherein deploying and provisioning the sequenced application to the plurality of target systems comprises deploying and provisioning the sequenced application to the plurality of target systems in accordance with the entitlement data.

9. The article of claim 7, wherein deploying and provisioning the sequenced application to the plurality of target systems comprises deploying and provisioning the sequenced application to the plurality of target systems in accordance with policies set by a user.