CA2637168A1 - Method and system for version independent software release management - Google Patents

Abstract

A method for assembling an update for a software release is described, comprising defining classes of software components, each class comprising one or more instances of the class, each instance having a unique identifier, each instance representing a software component, which has one or more version; for each version of a software component, assigning time stamps and indicators identifying status of the version; introducing a flexible coupling between versions of components and instances of classes by providing a pointer between a version of a component and a unique identifier of an instance of a class;
selecting versions of software components from which pointers originate; for each instance of the class, to which the pointer points at, selecting one version of the software component based on the assigned indicators; and assembling the selected versions of software components into the update of the software release. A corresponding system is also provided.

Description

METHOD AND SYSTEM FOR VERSION INDEPENDENT SOFTW"E RELEASE
>wRn,**~-~~T
RELATED APPLICATIONS
The present application claims benefit from the US provisional application serzal number 60/949,185 to Jeb Thorley, filed on July 11, 2007 entitled "Version Independent Software Release Management".

The present invention relates to software release management, and in partiGular, to version independenu component release management.

SACKGROUND OF THE INVENTION
No'~,! A1 ~ ~, ~,~, ~ ~ ~ ~ I~~ ..C~,~a ~3C.~' ~~'~'L~~"~='t 3:11t J.
~S' ~Fd~3r~ d~.h i]d ~~, ~ ~~ ~ t v t ~ ~13 r f ~ , i, , '. ... , .:, ,='I
E64xa~i~~~ ~~ c~ c1 ~
~ c ~~~J~~~~i 3I7G1 S ~1 1Sl C~ci~1 ~F ~
t) ~E~?lEt ~~ r[ U i~~ ~~' t G_ ~ ~~
~= y.~ ~ , =~+.-._ =:'.V..
C~ir~3~7 ~~e r.37 oJ1 7dt3~1T~ ~~.c~t~ rh y' c1'L' 3 a1 rr,~ ~.' wa~~ deveopme~nr, tRitirl~
' ~ . ~J t~ J -' E ~ ' ~ '' ' . '=
..~ + i3 t ~ i ~ ,.= ~, . i~ , t il~i ... ! . i J i i . i , .., ,'',;
t4 E 9 ~ y ~~~,Or Va Cc~>>J re th~p v a1v, df ~ ts>~a ~
11! ~rr~
t ,.. .. . , ~

f1xY1a1 ,r'! )t)i ~~ , R r ~ , 'P , FI I , au t i t I - ~+ ! i 3` r ~
T~i~ i t11c~~s T h~a ti1! td , ~ [ F~ t 111 t' . 1 rl l t r~,~

The embodiinents of the invention will now be described, by way of example, with reference to the accompanying drawings in which:

Figure 1 a.llustrat.es a host intrusion prevention system ;H2P) , in which embodiments of the invention have been impler,iented;

Figure 2 illu.stxates classes af software components;

Figure 3 illustrates status and timestamps associated with software components;

Figure 4 illustrates a sample set of software components and their inte.rrelatiozzship;

Figure 5 shows a flow chart 300 iliustxating a method for checking in a version of software component of any class ar~d setting up its date 4ime stamp;

Figure 6 shows a;Clowchart 400 illustrating a method for validating a checked-:J"n version of a Filter software component;
Figure 7 shows a flowchart 500 illustxating a method fox issuing a version of software component, comp2~ising assigning .an issued indicator and setting up an .issue date;

Fig:zre 8 shows a flowchart 600 illustrating a method for validating an issued version of Filter software compQnent;

Figure 9 shows a flowchart 700 illustrating a method for un-issu~z~g, a version of software component, comprisiag assigning an un-issued indicator;

Ts-o25-cA
Figure 10 shows a flowchart 800 illustrating a method for un-issue validation for a version of port list software component;
Figure 11 shows a flowchart 9-00 illustrating a method for deleting a version of software component from the update of 5 software release;

Figure 12 shows a flow chart 1000 illustrating delete validation method for a version of a port list software component;

Figure 13 shows a flowchart 1100 illustrating an assembly of an update for software release according to the embodiment of the presont invention;

Figure 14 shows the Release Management System 13 of Figure 1 in more detail; and Figure 15 shows the Software Release management Module of Figure 14 in more detail.

SvMUiRY OF TBE INVENTION
There is an object of the invention to provide a method and system for assembling an update for a software release, which would avoid or mitigate drawbacks of the prior art.

Accordin.g to one aspect of the invention, there is provided a method for assembling an update for a software release, coznprising steps of:
(a) defining classes of software components, each class comprising one or more instances of the class, each instance having a unique identifier (UID), each instance of the class representing a software component, which has one or more versions;

(b) for each version of a software component, assigning one or more time stamps, and an iadicator identifying a status of the version of the software component;
(c) introducing a flexible coup.ling between versions of coznponents and instances of classes by providing a pointer between a version of a component and a TJID of an instance of a class;
(d) selecting versions of software components from which pointers originate;
(e) for each instance of the class, to which the pointer points at, selecting one version of the software component based on the assigned indicators;
(f) assembling the selected versions of software components into the update of the software release.
The step (b) comprises assigning one or more of the following indicators:
(1) a deleted indicator when aversion of software component is no longer needed;
(m) an issued indicator when a version of software component is included in a current software release; or (n) an un-issued indicator when a new version of the software component has been submitted to repository of sofitware components, or when the version of software component does not have the issued or deleted indicator.
The step (b) further, comprises:
(p) assigning a checked-in date set and an issued date, set to each version of the software components.
The step (p) comprises assigning the checked-in date set, including a checked-in date time stamp when the version of the software component has become the latest version of the software component, and a checked-in retired date time stamp when a new version of the software component is submitted to repository of software components.

The,step (p) further comprises assigning the issued date set including an issued date time stamp when the version of software component is assigned the issued indicator, and an issued xetired date time stamp when the version of software component is assigned the un-issued or deleted indicator.
In the method described above, the steps (d) and (e) comprise selecting versions of software components, which have the issued indicator to form an issued view of the software components.
The steps (d) and (e) further comprise selecting versions of software components having the most recent checked-in date time stamps and no checked-in retired date time stamps to form a latest view of the software components.
In the embodirnent of the invention, the step (a) comprises defining one or more of the following classes:
(i) an Application Type class;
(ii) a Filter class;
(iii) a Port List class.

According to the xules for the assembly of the update for software release, the method further comprises a step (X1) preveziting the version, of the software component, from which the pointer originates, to be set as the issued version of the software component unless at least one version of a software component in the instance of the class, to which the pointer points at, has the issued indicator, the step (yl) being performed before the step (f).

The method further comprises a step (y2) preventing the version of the software component, to which the pointer points, to have a deleted indicator applied as long as the versioxl of the sbftware component is pointed to by a pointer originating from a version of another software component, which has an issued indicator, the step (y2) being performed before the step (f).
The method further comprises a step (y3) preventing the version of the software component to have un-issued indicator once the version of software component is included in the update of the software release.
Iri the method described above, the step (c) comprises providing the pointer between the version of the software component in the Filter class and the uID of the instance of the Application Type class.
The step (b) further comprises:
(zl) provided the version of software component has a valid name, determining whether the version of software component does not have a deleted indicator;
(z2) perfdrming validation for the verszon of $oftware component based on the class;
(z3) if there is no a previous version of software component, assigning a checked-in date time stamp to the version of software component; otherwise, (z4) if there is a previous version of software component, setting a checked-in retired time stamp to the previous version of software component;
z5) otherwise terminating the step (q).

The step (z2) further comprises:
checking-in the version of the Filter component from which the pointer originates, comprising:
ensuring that an Application Type component, to which the pointer points at, exists; and provided there is a pointer to another Filter component, ensuring that said another Filter component exists_ The step (b) further comprises:
(s) assigning the issued indicator to the version of software component, comprising:
(sl) performing validation of the version of software component based on the class;
(s2) if the version of software component has a deleted indi.cator, assignizlg an un-issued indlcator to the version of software component;
(s2) if the version of software component does not have a deleted indicator; determining that the version of software component does not have any version with the issued indicator, followed by assigning the issued indicator to the version Qf software component and setting an issued retired date time stamp to a previous version of software component.
The step (sl) further comprises:
(t) assigning the issued indicator to the version of the Filter component from which the pointer originates, comprising:
ensuring that an Application Type component, to which the pointer points at, exists and has an issued indicator; and provided there is a pointer to another Filter component, ensuring that said another.Filter component exists and has an issued indicator;

otherwise, term,inating the step (t).

The step (b) further comprises:
(u) un-issuing the version of software component, comprising assigning the un-issued indicator, comprising:
(ul) performing validation of the version of software comporient based on the class;
(u2) determining whether the version of software component was not previously included in the update of software release and then deleted frorn the update;
(u3) if the version of software component has a deleted indicator, assigning an un-issued indicator to the version of software component;
(u4) if the version of software component does not have a deleted indicator, assigning an issued indicator to the version of software component, and assigning an issued retired date time stamp to the previous version of software component;
(u4) otherwise, terminating step (u).
The step (u) further comprises:
(v) un-issuing a version of Port List component, including assigning the un-issued indicator, comprising:
searching for versions of Applicatiorz Type software components in the Latest view or the Issued view, which point to the version of the Port List component; and terminating the step (v) if the Applicant Type software components, which point to the Port List software component, have issued indicators.
Yet further, the step (b) comprises:
(w) assigning the deleted indicator to the version of software component, comprising:

$

(wl) performing validation of the version of software componexzt based on the class;
(w2) provided the version of software component has not been withdrawn from a repository of software components for further development:
(ww2) if the version of software component has an issued indicator, assigning an un-issued indicator and an issued retired time stamp to the previous version of the software component;
(www2) if the version of software component does not have an issued indicator, assigning the deleted indicator to the verszon-of software component and setting its checked-in retired date stamp to the current date.
The step (wl) further comprises:
{x) assigning the deleted indicator to the version ot the Port List component, comprising ensuring that n.o version of the Application Type component in the Latest view or the Issued view points at the instance of the Port List class.
According to another aspect of the invention, there is provided a system for assembling an update for software re,leaser comprising:
(a) a repository of classes of software components, each class comprising one or more instances of the class, each instance having a unique identifiex (UID), each instance of the class representing a software component, which has one or more versions;
(b) a software release management module, comprising:
(bi) a rule repository, comprising rules for flexible coupling between versions of software components azzd instances of classes by providing a pointer between a version of a software component and a UID of an instarice of a class;
(b2) means for assigning, for each software component, one or more time stamps and indicators identifying status of the software component in accordance with the rules;
(b3) means for selecting versions of software components from which the pointers oTigina'Ce; and for selecting, for each instance of the class, to which the pointer points at, one version of the software component based on the assigned indicators; and (c) means for assembling the selected versions of the software compoi1ents into the update of the software release, In the systern described above, the indicators comprise one or more of the following:
(1) a deleted indicator when a version of software component is no longer needed;
(m) an issued indicator when a version of software component is included in a current software release; and (n) an un-issued indicator when a new version of the software component has been subznitted to repository of software components, or when the version of software component does not, have the issued or deleted indicator.

The means (b2) coznprises means for assigning date sets, comprising a checked-in date set and an issued date set, to each version of the software components;
wherein the Checked-in, date set includes a checkecl-in date time stamp when the version of the software component has become the latest version of the software component, and a checked-in reti.xed date tiine Stamp when a new version of the software component is submitted to reposaa.tory of software componerats; and wherein the issued date set includes an issued date time stamp when the veTsion of software component is assigned the issued indicator, and an issued retired sate time stamp when the.ve,rsion of software component is assigned the un-issued or deleted indicator.

The means (b3) comprises means for generating views of versions of software components, including generating an issued view by selecting versions of software components, which have the issued indicator, and a latest view by selecting vers;.on of components, which have the most recent checked-in date time stamp-Th:e repository of classes (a) comprises one or more of the following classes:
(i) an Application Type class;, (ii) a Filter class;
(iii) a Port List class.

A computex readable medium is also provided, comprising computer readable instructions stored thereon, for execution by a processor, to perform the steps of the method described above.

Thus, an improved method and system for assembling an update for software release have been provided.

DESCRIPTION OF THE DETAILED MMMIMENT$ OF T8E INVE'NTION
.An embodiment of the present invention will, be described with regard to software release management for security software, in particular, for host intrusion prevention/detection software developed by the applicants_ With reference to Figure 1, a host intrusion prevention system (HIPS) 1 of the applicant, including a Release Management System 13 of th.e embodiments of the present invention, is illustrated.
The HIPS 1 comprises a server computer 11, includi.ng "Labs"
module 14 for storing intrusion prevention system (IPS) filters; and a Release Manageznent System 13 for implemeating the embodiments for the software release management of the present invention. Both Labs 14 and Release Management System 7.3 are stored in the memory of the server computer 11. IPS
filters are defined in the "Labs' 14 through Filter Writer modul.es FW 10a, lUb and 10c, which are optionally stored in the memory of the server computer 11, or in a memory of one or more other cnmputers.

The HIPS I further comprises a "Deep Security Ager~t" (DSA) 19, which includes a software module stored, in the memory of a client computer and executed on the client computer, which performs the HIPS on the client computer. By way of example, three DSAs 19a, 19b and 19c are shown in. Figure 1.

The HIPS also comprises a "Deep Security Manager" (D$M) 16, which includes a software module including a server portion that is stored in the memory of a computer, and executed by the computer within the cli,ent's enterprise to communicate to the Labs 14 to receive updates, make queries to the DSAs 19a, 19b, 19c, and distribute security configuration to the DSAs 19a, 19b, 19c.
The server computer 11, including the Release Management System 13 communicates with the Deep Security Managers 16, 1-7, 18 through a Communication Network (CN) 15.

To proceed with the description of tkxe methods for assembling an update' for a software release of the embodiment of the invention, a classification of software components will be presented next along with time stamps and indicators identifying status of software components.

According to the embodiment of the invention, software components are divided into classes, each class compxising one or more instances of the class, each instance of the class having a unique identifier (tJID) and representing a software component, which may have an unl i_mited number of versions of the software component. Functionality of the software component can be modified in future versions of the softwar.e compozient.
With reference to Figure 3, diagram 200 illustrates three classes of software components, comprisin.g: Application Type class (X~ 30x representing a software component X, Filter class (F) 30f, representing a software component F, and Port List class (P) 30p representing a software component P.

Filter software components, or Filters, provide protection against network based attacks. They examine traffic to determine whether it contains malicious coiltent, such as a known attack, or an amount of suspicious activity above an acceptable threshold, and take protective action_ Each Filter should point to exactly one Application Type alass, and may point to N other Filters via respective UIDs_ Application Type components represent a specific application, or class of software applications protected by IPS, for example an Internet Explorer (IE), or a Web Client. Application Types are used pri.marily to group Filters, but also may provide assistance in decoding the traffic generated by the application for further investigation by the Filters. Each Application Type must point to 1, Port List and may point to N other Application Types.
Port List software components specify a set of ports. They provide a means for Application Type software components to know what port(s) to listen to_ Each class of software components has rules defining how versions of software components and instances of each class interact with instances of other classes of software components, and in particular, defining rules for flexible coupling between versions of components and -instances of classes. In Figure 2, rules for Application Type class (X) 30x, Filter class (F) 30f and Port List class (P) 30p have been designated by reference numerals 31x, 31f and 31p respectively.
Each instance of the class of software componen.ts has a unique identifier (UID). Corresponding UI.Ds for Application Type class (X) 30x, Filter class (F) 30f and Port List class (P) 30p have been designated by reference numerals 32x, 32f and 32p in Figure 3.

Each instance of a class, representing a software component, has a number of versions of the software component, for example, an instance 394x of the Application Type class (X) 30x has versions Xl (Versionl) and X2 (Version2) of the software component X, designated by reference numexals 33x and 3$x respectively. Similarly, an instance 394f of the Filter Class (F) 30f has versions Fl (Vea;sionl) and F2 (Version2) of the software cornponent F, which have been labeled as 33f and 38f respectively, and an instance 394p of the class Port List (P) 30p has versions P1 (Versionl), P2 (Version2), P3 (vexsion4), P4 (Version4) and P5 (Version5) of the software component P, which have been labeled as 33p to 37p respectively. For simplicity, Figure 3 illustrates only one .instance per each class of software components 30x, 30f and 30p. It is understood that each class of software components may have many instan.c:es as required.

All versions of a software component represented by a given instance of the class have the same UIn, which is the UID of the instance of the class. For example, version7. Xl (33x) and version2 X2 (38x) of the instance of the class 394x, representing the software component X, have the saate UID 32x, versionl Fl (33f) and version2 F2 (38f) of the instance of the class 394f, representing the software component F, have the same UID 32f, and all versionsl P1 to version5 P5 (33p) through (37p) of the instance of the class 394p, representing the software component P, have the same UID 32p.

As mentioned above, each class 30x, 30f and 30p of software components has respective rules 31x, 31f and 31p, which it follows. One rule in this regard introduces a flexi.rle coupling between versions of components and instances of c.lasses by providing a pointer between a version of a component and a IJID
of an iristance of a class, for example, a pointer 3A1 between the version Fn (38f) of the software compon,ent F and the UID
32x of the instance of the Application Type class 30x, or a pointer 3A2 between the version X1(33x) of the software component X and the UID 32p of the instance of the Port List class 30p as shown in Figure 2. The flexible coupling is maintained by letting each version of the component store only the ID of an instance of a class to whzch it points, but not the version of the component that is requires. For example, versionl Xl (33x) of the component X of the instance of the class 394x may require that a component "P" of the instance of the class 394p is present, but is not concerned what version of the software component "P" it is, i.e. any one of version 1 P1 (33p) to version5 P5 (37p).

Another rule is concerned with the dependency between classes of software components. Although typically each class of software coznponents depends only on one othex class of software components, it is possible for a class to depend on multiple other classes, or even on other components of its own class. In the embodiment of the present invention, one or more versions Versionl Fl (33f) and Version 2 F2 (38f) of the Filter Class 30f may optionally point at another instance (not shown in Figure 2) of the Filter class 30f as required, however, they should always point at a required instance of the Application Type class (x) 30x, see, e.g., the pointer 3A1 in Figure 2.
Similarly, one or more versions of the software component X. of the Application Type class 30x should point at an instance of the Fort List class 30p as illustrated by the pointer 3A1 in Figure 2.

Each version of the software component has one or more time stamps associated therewith. By way of example, diagram 220 of Figure 3 illustrates four time stamps TS11 (34x), TS12 (35x), TS13 (36x), and TS14 (37x), associated with the versionl Xl (33x) of the software component X. In the embodiment of the invention, the time sets are grouped into two date sets,'namely a date set 39x, comprising time stamps 34x and 35x, and another date set 40x, comprising time stamps 36x and 37x.

~b The date set 39x assigned to the versionl x1 (33x) of the software companent X and illustrated in Figuze 3, is a checked-in date set, including a checked-in date time stamp when the version of the component has become the latest version of the component, and a checked-in retired data time stamp when the next version of the software component is checked-in, i.e.
submitted to a repository of software components.

The another date set 40x assigned to the versioni Xl (33x) of the software component X and illustrated in Figure 3, is an issued date set, including an, issued date time stamp when the version of the compon,ent is assigned the issued indicator, and arx a,ssued retired date time stamp when the version of software component is assigned the un-issued or deleted indicator.
Each version of the software component also has one or more i.ndioators identifying status of the version of the software component. Hy way of example, an indicator STU (42x) has been shown for the versioni Xl of the software component X. In the embodiment of the invention, each version of the software component has a status indicator, or indicator, which is labeled as 41x in Figure 3.

The following indicators have been used in the embodiment of the ,invention:
(1) a deleted indicator when a version of software component is no longer needed;
(m) an issued indicator when a version of software component is included in a current software release; or (n) an un-issued indicator when a new version of the software component has been just checked-in, i.e. submitted to repository of software components, or when the version of software component does not have the issued or deleted indicator.

In Qrder for a version of software component to be included in the update of software release, it should have an issued indicator.

Later, the version of the component having an issued indicator can have, if needed, an un-issued indicator, and vice versa.
All versions of a software componerxt have deleted indicators when the software component is no longer needed, or a].ternatively, only the latest version may have a deleted indicator. Only one version of a software component can have an issued or deleted indicator at a given time_ When we delete a version of software component, it means that any attempt to retrieve it by the UID will indicate that it is deleted. To accornplish this, we perform the following:
1) Apply the delcted indicator to the latest version_ Since only one version ,may have an issued/deleted indicator assigned, this means no vezsion has an issued indicator assigned. Thus, the version of software component shows as deleted in the Issued view.
2) Set the checked-in retired date time stamp of the latest version of software component. since the latest version of software component is defined as having the most recent checked-in date time, stamp with no check-in retired date time stamp, this will result in the version of softraare component showing as having a deleted indicator in the La.test view.

Diagram 300 of Figure 4 illust:rates a sample set of software coznponents and their relationships to be used in the assembly of an update for a software release. Three instances of the Filter Class 30f are shown, namely the instance of the class 5- 394x including versionl Fl (33f) and version2 F2 (38f) of the software component F' siznils.r to that of' Figure 2, an instance, of the class 395f including versionl Yl (42) and version2 Y2 (43). of a software component Y, and an instance of the class 396f, including a versionl Z1 (44) of a software component Z.
One instance of the Application Type class 30x is shown similar to that of Figure 2, including five versions x1, to X5 (33x to 37x) of the software component X. Two instances of the Fort List class 30p are shown, namely the instance of the class 394p including versionl P1 (33p) and version2 22 (38p) of the softwaxe component P similar to that of Figure 2, and the instance of the class 395p, including versionl G1 (491), version2 G2 (492) and version4 G3 (493) of a software component G.

The version2 F2 (38f) of the instance 394f of the Filter class 30f has an issued indicator 45, and the version2 F2 (38f) points at the UID (not shown izi Figure 4) of the. instance 394x of the Application Type class 30x by pointer 5A1. The versionl Z1 (44) of the software component Z has a deleted indicator 48, and the vexsionl Zl (44) which poi.nts at the UID (not shown in Figure 4) of the instance 394x of the Application Type class 30x by pointer 5B1. The version2 Y2 (43) of the software component Y does not have any indicator associated with it, or may have an un-issued indicator assigned to it. The version2 Y2 (43) points at the L1TD (not shown in Figure 4) of the instance 394x of the Application Type class 30x by pointer 5C1. The pointer 5A1.requires that the version of the Application Type component, to which it points, to be issued, i.e. assigned an issued indicator. The pointer 5C1 requires that the version of the Application Type component, to which it points, to be included in the Latest View, since version2 Y2 (43) is the latest version of the Filter component. The pointer 5A1 also requirEs that the version of the Application Type component, to which it points, to be included in the Latest View, since version2 F2 (38f) of the Filtex component is included in both in the Issued view and the Latest view. Since the pointer 5BI
is for the vexsionl Zl (44) of a Filter that is deleted, it has no requirements of the ,A.pplication Type.

A pointer SD1 from the version5 X5 (37x) of the software component X to the instance 394p of the Port List class 30p requires that any version of the software componezit from the instance 394p of the Port List class 30p is present.

Similarly, version3 X3 (35x) of the software component X has an issued indicator 46, and the verion3 X3 (35x), which points at the UID (not shown in Figure 4) of the instance 395p of the Port List 30p class by pointer 5E1, requiring that any version of the software component from the i.nstance 395p of the Port List class 30p is present_ Because version3 X3 (3x) of the Application Type 394x is issued, it requires that some version of the Port List 395p to which, it poizats be present in the Issued View.

The result of publishing an update of the software release with the relationships detailed in Figure 4' will be the update-(394f.2, 394x.3, 395p.3), i.e. containing version2 k'2 (38f) of the software component F of the instance 394f of the Filter class 30f, version3 X3 (35x) of the software component X of the instance 394x of the Application Type class 30x, and version3 G3 (493) of the software component G of the instance 395p of the 2oxt List class 30p, as well as an instructi.on to delete the versionl z1 (44) of the software component Z of the instance of the class 396f from the client installat.ion- Please note that no versions of software compozients from the instance 395f of the Filter class 30f and instance 394p of the Port List class 30p will be included in the update of the software release, because they do not have issued indicators.

Some other rules for assembling the update of the 'sditware release include the following:
= Version5 X5 (37x) of the instance 394x of the Applicatiorx Type class 30x cannot be assigned an issued indicator until there is a version of the instance 394p of the Port List class 30p, which has an issued indicator;
= Any version of the software component (491, 492 or 493) of the instance 395p of the Fort List class 30p can not be assigned a deleted indicator as long as there is a pointer from the Version3 X3 (35x) of the instance 394x of the Application Type class 30x, or any other version 33x to 37x of the instance 39xp of the Application Type class 30x, to the instance 395p of the Port List class 30p;
= The version2 F2 (38f) of the software component F of the instarice 394f of the Filter class 30x cannot be assigned an un-issued indicator, because thi.s-version of the software component has been included in the update for the software release. This is required to avoid a violation of a requirement of a single predicable state after applying the update of the software relea$e. If a subsequent update for a software release with unpublished version of the software component 33f having un-issued indicator were allowed, clients that had applied a previous update with the software coznponent 33f having the issued irada.cator present would end in a different state than those that had not. However, ~,f version2 F2 (3$f) had never been included in an upciate for a software release, it can be assigned an un-issued indicator.
= Any versionl Xl (33x) to version5 (37x) of the ir~stance 394x of the Application. Type class 30x cannot be ass3gned a deleted indicator, because it has pointers 5A1 and 5C1 from instances 394f and 395f of the Filter class 30f pointing at the instance 394x of the Application Type class 30x.

The rules for software release management outlined above are designed to ensure that clients obtain a single, predictable set of versions of software components after applying a given update. This implies further restrictions to operations that may be performed on a version of a software component after the version has been inctuded in the update for the software release. For example, after a version of a software component has been included in the update for the software release, it should always appear in future updates to the software release, either having an issued indicator or deleted indicator. Other rules will be described below with regard to Figures 5-13_ Agsembly of an IIpdate for m Software ftlease In addition to indicators identifying the status of versions of software components, there have been introduced two conceptual "views" of the version of components, a "Latest view' and an "Issued view". The Latest view comprises versions of software components having checked-in indicator, which have the most recent checked-in date time stamps to form a latest view of software components. The Latest view is a view of software components seen by software developers. Referring back to Figure 4, one example of the Latest view of software components may comprise the following versions ot software components:
(394f.2, 395E.2, 396f.1, 394x.5, 395p.3 and 394p.2), i.e. it may include version2 F2 (38f) of the iristance 394f of the Filter class 30f, verion2 Y2 (43) of the instarxce 395f of the Filter class 30f, versa.onl Z1 (44) of the instance 396f of the Filter class 30f, version5 X5 (37x) of the instance 394x of the Application Type class 30x, version3 G3 (493) of the instance 395p of the Port List class 30p, and version2 P2 (38p) of the instance 394p of the port List class 30p.

The Issued view comprises a set of versiaris of software components, having an issued indicator; this is the view of the software components seen by clients. Referring ba.ck to Figure 4, one example of the zssued view of software components will comprise the following versions of software components:
(394f.2, 394x.3 and 395p.3), i.e. version 2 F2 (38f) of the instance 394f of the Filter class 30f, verion3 X3 (35x) of the instance 394x of the Application Type class 30x, and version3 G3 (493) of the instance 395p of the Port List class 30p.

A version of a certain software component may have the latest checkQd-in date time stamp, and therefore will be included in the Latest view, but not yet included in an update for software release, because it has not been a.ssigned an issued indlcatoz.
For any given time, the assembly and release of an update for software is invoked from the Issued view of software components, while continued development of the Latest view of softwaxe components is unaffected by the update of software release.

In order to obtaixi the Latest view or the Issued View of softwaze components, a date-based approach usi.n.g time stamps mentioned with regard to Figure 3, has been used for managing versions of software components. Referriilg back to F.igure 3, the checked-in date set 39x comprises two time stamps, a checked-in date time stamp 34x and a checked-in retired date time stamp 35x. The checked-in date time stamp 34x is the date when the versionl X1, (33x) of software component X has been submitted to the repository of software components, hence becoming eligible for including in the Latest view of software components. The checked-in retired date time stamp when a new version of the software component is submitted to repository of software components. When a new check-in occurs for the new version of software component, the version of software component currently having the checked-in date time stamp will be assigned a check-in retired date time stamp.

Using the latest cheeked-in date time stamps enables a developer to retrieve the Latest view of software components for a given time period. It also allows them to determine the current latest version of software component by looking for the version of software component with no checked-in retixed date time stamp.

When a version of a software component is assigned a deleted indicator, it is assigned a checked-in retired date time stamp, so that the version of software component will not appear in any Latest view.

As mentioned with reference to Figure 3, the issued date set 40x comprises two time stamps, an issued date time stamp 36x and an issued retired date time stamp 37x. The issued date time stamp 36x is the date when a version of the software component is inc7.uded in the update of software release. The retired date time stamp 37x is the date when the version of software component is assigned un-issued indicator, or when the version of software component is assigned a deleted indicator. The issued date time stamp 36x and the retired date time stamp 37x are used for managing the zssued view of software components, while the checked-in date time stamp 34x and checked-in retired date stamp 35x are used for managing the Latest view of software components. When a version of the software component is assigned an issued indicator, its issued date time stamp is set. When another version of the software comporient replaces the version of software component with *the issued indicator, the issued retired date time stamp is set for the version of software component. -The rules for managing the issued date set are different froa-those for managing the checked-in date set, because the status of a given version of software component having an issued indicatox may be changed multiple times. When such a change happens, a replacement does not have to be with a newer version. It is not uncommor), for an update for software release, or a certain version of software component, to be rolled back to an earlier working update or version of software components respectively. In this case, the versions of software components in the rolled back update will be the ones having the issued indicator-. Similarly, an issued version may be several versions higher than tkxe previously issued version.

With reference to Figure 5, a method 350 for setting a checked-in date time stamp for a version of software component is described. The method 350 provides the framework used by all classes for checking in a version, and setting up its time stamp. Classes of components extend thi9 framework with validation specific to their class. At block 51, the method is initiated. At block 52, name of the version of software component is examined. If it is invalid (exit No" from block 52) the check-in _~s rejected (block 50), otherwise the method proceeds to block 53. At block 53, the method checks whether the version of software component was previously assigrxed a deleted indicator. If yes (exit "yes" from block 53), the check-in is rejected (block 50), otherwise the method proceeds to the next step to block 54. At block 54, the method checks that all dependencies are satisfied and have not been assigned a deleted indicator. Class specific validation is also performed to ensure the component meets the requirements to enter the repository- If the dependencies or validations are violated (exit "Tail" from block 54), the check-in fails (block 50), otherwise the method proceeds to the next step to block 55. At block 55, the existence of a previous version of software component is verified. If iL does not exist (exit "No"
from block 55), the method continues with setting the checked-in date time stamp, otherwise (exit "Yes" from block 55), the method continues with checking over the previous version of software component. At block 57, t,h,e method checks Sahether the current software developer has checked-out the previous version of software component, i.e. the previous version has been withdrawn from repository of software components.for further developrnent. zf not (exit "No" from block 57), the check-in is rejected at block 50, otherwise the method continues with the next step (block 58) - At block 58, check-in date time stamp is set for the version of software component, followed by termination of the method at block 59.
With reference to Figure 6, a diagram 400 illustrates a method for validating a checked-in version of Filter software component. At block 61, the method is initiated. At block 65, the method checks whether the version of Filter software component of a given instance of the Filter class 30f points at another instance of the Filter class 30f. If not (exit "No"
from block, 65), the method proceeds to the next step to block 64, otherwise (exit "Yes" from block 65) the method proceeds to block 62. At block 62, the Latest view including Filter software components is searched through the UID, which have pointers ta the instance of a Filter class 30f. At block 63, the method determines if the instance of the Filter class to which the pointers point at, is present. If not (exit "No" from block 63), the validation fails (block 60), otherwise (exit "Yes" from block 63), the method continues with block 64. At block 64, the Latest View of Application Type software components is searched by common component ID to determine a pointer between the version of the component in the Filter class and the UID of the instance. of the Application Type class. At block 66, the method checks whether the instance of the Application Type class, pointed at by the pointer, is present. If it is not (exit "No" from block 66), the validation fails (block 60); otherwise, the validation passes with block 67.

With reference to Figure 7, diagram 500 describes a method including rules, which are used for issuing a version of software component, including setting up an issue date and an issued indicator for a version of software Component. At block 71, issue of a version of software component starts. At block 72, the method checks that all dependencies are satisfied and have not been assigned a deleted indicator. Class specific validation is also performed to ensure the component meets the requirements to be issued. If rules are violated (exit "Fa:~l"
from block 72), the issue is rejected (block 70), otherwise (exit "Pass" from block 72), the method continues to the next step to block 74. Block 74 verifies if the version of software component under examination was previously assigned a deleted indicator. If it was not (exit "No" from block 74), the method continues with block 76, otherwise (exit "Yes" fxozn block 74), the method proceeds to block 73 where the deleted irxdicator is 55 Te-025-CA
reset (un-deleted) . At block 76, the method verifi2s whether any version of software component under examination was previously assigned an issued indicator. If not (exit "no" from block 76), the method continues with block 77, otherwise (exit =5 "Yes".from block 76), it continues with block 75. At block. 75, the version of the previ.ously existing software cdmponent having the issued indicator is assigned an un-issued indicator.
At block 77, the version of software component under examination is assigned an issued indicator, followed by termination of the method at block 78.

With reference to Figure 8, a diagram 600 illustrates a method for validating an about to be issued version of the Filter software component. The validation process di,ffers per type of software component. If validation does not pass the component does not become the issued version. At block 81, validation is initiated. At block 82, the method checks whether the version of Filter software component under examination points at another instance of Filter class. If such a pointer does not exi,st (exit "No" from block 82), the method proceeds to block 85, otherwise (exit "Yes" from block 82), the method continues with block 83. At block 83, the existenCe of the pointed instance of the Filter class is searched for in the Issued view of software components through common Ulns. At bZock 84, the method checks whether the instance' of the Filter class, which has been pointer at, is present in the Issued view. If not (exit "No" from block 84), the validation fails (block8p);
otherwise (exit "Yes" from block 84), the method continues with block 85. At block 85, the method checks the Issued View of Application Type software components for the existence of required versions of Application 'rype softwa.re components, which have been pointed at by the component UID of the Filter under examination. At block 86, the method checks whether such TB-02$-CA
required versions of the Application Type software components exists. If not (exit "No" from block 86), the validation method fails (block 80), otherwise (exit "Yes" from block 86), the validation method passes (block 87).
With reference to Figure 9, a diagram 700 illustrates a method for assigning an un-issued indicator to a version of software component. At block 91, the Un-Issue method is initiated. At block 92,, the method checks rules for coupling between the version of software component under examination and instances of classes, including existing pointers for the Issued view of software components. If the rules are violated (exit "Fail"
from block 92), the Un-Issue is rejected (block 90) ; otherwise (exit "Pass" from block 92), the method continues to block 93.
At block 93, the method checks whether the version of software component was previously assigned an issued indicator in an update for a software release. If th,is Zs true (exit "Yes" from block 93), the un-issue is rejected (block 90), otherwise (exit "No" from block 93), the method continues to block 94. At block 94, the method checks whether the version of software component was previously marked as deleted in an update for a software release. If this is true (exit "Yes" from block 94), the Un-Issue is rejected (block 90), otherwise (exit "No" from block 94), the method continues to block 96, where the method checks' whether the version of software component has a deleted indicator. If not (exit "No" from block 96), the meth.od continues to block 98, otherwise (exit "Yes" from block 96), the method continues to block 95, where the deleted version of software component is un-deleted, and the method continues to block 98. At block 98, the method checks whether the version of software component under examination has an issued indicator.
If rl.ot (exit, "No" fxom block 98), the method is terminated (block 99), otherwise (exit 'Yes" from block 98), the method continues with block. 97. At block 97, the version of softwaxe component under examination is assigned an un-issued indicator, followed by the termination of the method at block 99.

With referezice to Figure 10, a diagram 800 illustrates a method for un-issue validation for a version of Port List software coznpenent. At block 101, the Un-Issue validation method is initiated. At block 102, the method checks the Issued view of software components for instances of Application Type software components referencing the component UTA under examination. At block 103, the method verifies if such versions of the Application Type software components were found. If yes (exit "Yes" from block 103), the Un-Issue validation fails (block 100), otherwise (exit "No" from block 103), the Un-Issue validation passes (block 104).

With reference to Figure 11, a diagram 900 shows a flowchart 900 illustrating a method for deleting a version of software component from the update of software release. At block 11l, the znethod starts. At block 112, the method checks for instances of software components in the Latest view and the Issued view, which point at the component UID under examination. If xules are violated (exit "f'ail" from block 111), the method is rejected (block 110), otherwise (exit "Pass" from block 111), the method continues to block 113. At block 113, the method determines if the version of software component has been checked-out, i.e. withdrawn from the repository of software components for further development. If yes (exit "Yes" from block 113), the delete is rejected (block 110). If not (exit ^No'' from block 113), the method continues to block 115. At block 115, the method checks if the version of software component under examination is assigned an issued indicator. If yes (exit "Yes" from block 115), the method continues to block 114; otherwise (exit "Nq" from block 115), the raethod coritinues to block 116. At block 114, the previous version of software component having an issued indicator is assigned . an un-isstaed indicator, and the version of soft,~are 5, component under examination is assigned an issued indicator inst.e8.d, after which the method proceeds to block 116. At block 116, the latest version of software component is assigned a deleted indicator, and its check-in retired date time stamp is set to the current date. At block 117, the method terminates.
With refexence to Figure 12, a diagram 1000 illustrates a delete validation method for a version of Port List software component. At block 121, the method starts. At block 122, the method searches for instances of Application Type software components in the~Issued view pointing at the component UID
under examination. At block 123, the method verifies is such versions of Application Type software componenLs are found. If yes (exit 'Yes" from block 123), delete validation fails (block 120); otherwise (exit. "No" from block 123), the method continues to block 124. At block 124, the method searches for instances of Application Type software components in the Latest view pointing at the component UID under examination. At block 125, the method verifies if such versions of Application Type software components are found. If yes (exit "`Yes" from block 125), delete validation fails (block120) ; otherwise (exit "No"
from block 125), the delete validation method passes (block 126).

With reference to Figure 13, a diagram 1100 illustrates a.n assembly of an update for software release according to the embodiment of the present invention. At block 130, the assembly of the update for software release is initiated- At block 131, versions of Filter software components having issued indicators are added to the update. At block 132, versioris of Application Type software components having issued indicators are added to the update. At block 133, versions of Port List software components having issued indicators are added to the update. At block 134, comxnon UIbs for all versions of software component having deleted indicators are added to the update, followed by compiling the update of so.ftware release and making it available to a client.

Figure 14 illustrates the Release Management System 13 of Figure 1 in more detail. The Release Management System 13 resides at the server computer 11, comprising a Central Processing Unit (CPU) and the memory, storing computer executable instructions, thus forming various modules of the Release Management System 13 as will be described in detail below. The computer readable instructions, when exacuted, perform the steps of the methods described above. The Release Management System 13 includes a 5oftware Release Management Module 22, comprising software release management rules, alorzg with a number of repositories of software components, for brevity to be referred to as coznponents _ Three -types of repositories of software components are shown in Figure 14, namely Repository of Fort List components 20, Repository of A.pplication Type components 21, and Repository of Filter components 24. The Release Management System 13 further comprises a Software Release Update Module 22 for assemlaling the update of software release.

The Software Release Manage.ment Module 22 selects software components from the Repositories 20, 21, 24 of Port List, Application Type and Filter comporzents, which are supplied to the Software Release Update Module 23 for publishing the update of softwaxe release in accordance to the methods of the exnbodimen.t of the invention described above.

Figure 15 shows the Software Release Management Module 22 of Figure 14 in more detail. It coruprises- Rules Repository 157;
where versions of software components are checked for satisfying the rules as described above; means 158 for assigning time stamps and indicators to versions of software components, e.g., deleted, issued, and un-issued indicatoxs, further comprising means 154 for assigning date sets, e.g., an issued date set and checked-in date set. Once the time stamps and indicators are assigned to versions of software components, their status in the update for software release is defined. The Software Release Man.agement Module 22 further comprises means 152 for generating views of versions of software components, e.g., the Latest view and the Issued view; and means 156 for selecting versions of software components to be included in the update of software release.

It is understood that numerous modifications can be made to the methods and system described above. It is contemplated that various other classes of software components can bo introduced, as required, apart from the Application Type, Port List and Filter classes described above. Various other designations of date sets, time stamps and indicators may be assigned to versions of software components to indicate their status in an update for software release. In the system for assembling an update for software release, the means for assigning date sets, and means for assigning i.ndicators can be formed separate from the means for assigning time stamps as required. Repositories 20, 21 and 23 of versions of software components may be stored in one database on one computer, or alternatively on different computers communicating over a network_ Alternatively, all.

repositories 20, 21 and 23 can be combined into one combined repository of versions of software components, which is in communication with the Software Release Management Module 22.
Similarly, the Software Release Update Module, where the asserrLbly of the update for software release takes place, may be combined with the Software Release Management Module as needed.
A computer readable medium such as floppy, CD-ROM, DVD or memory is also provided comprising computer readable instructions stored thereon, when executed by a processor, to perform the steps of the methods described above.

Although the en3bodiment of the inventidn has been described in detail, it will be apparent to one skilled in the art that variations and modifications to the embodiment may be made within the scope of the following claims.

Claims (26)

1. A method for assembling an update for a software release, comprising steps of;
(a) defining classes of software components, each class comprising one or more instances of the class, each instance having a unique identifier (UID), each instance of the class representing a software component, which has one or more versions;
(b) for each version of a software component, assigning one or more time stamps, and an indicator identifying a status of the version of the software component;
(c) introducing a flexible coupling between versions of components and instances of classes by providing a pointer between a version of a component and a UID of an instance of a class;
(d) selecting versions of software components from which pointers originate;
(e) for each instance of the class, to which the pointer points at, selecting one version of the software component based on the assigned indicators;
(f) assembling the selected versions of software components into the update of the software release.

2. The method as described in claim 1, wherein the step (b) comprises assigning one or more of the following indicators:
(1) a deleted indicator when a version of software component is no longer needed;
(m) an issued indicator when a version of software component i.s included in a current software release; or (n) an un-issued indicator when a new version of the software component has been submitted to repository of software components, or when the version of software component does not have the issued or deleted indicator.

3. The method as described in claim 2(1), wherein the step (b) comprises:
(p) assigning a checked-in date set and an issued date set to each version of the software components.

4. The method as described in claim 3, wherein the step (p) comprises assigning the checked-in date set, including a checked-in date time stamp when the version of the software component has become the latest version of the software component, and a checked-in retired date time stamp when a new version of the software component is submitted to repository of software components.

5. The method as described in claim 3, wherein the step (p) comprises assigning the issued date set including an issued date time stamp when the version of software component is assigned the issued indicator, and an issued retired date time stamp when the version of software component is assigned the un-issued or deleted indicator.

6. The method as described in claim 2, wherein the steps (d) and (e) comprise selecting versions of software components, which have the issued indicator to form an issued view of the software components.

7. The method as described in claim 2, wherein the steps (d) and (e) comprise selecting versions of software components having the most recent checked-in date time stamps and no checked-in retired date time stamps to form a latest view of the software components.

8. The method as described in claim 2, wherein the step (a) comprises defining one or more of the following classes:
(i) an Application Type class;
(ii) a Filter class;
(iii) a Port List class.

9. The method as described in claim 4, further comprising a step (y1) preventing the version of the software component, from which the pointer originates, to be set as the issued version of the software component unless at least one version of a software component in the instance of the class, to which the pointer points at, has the issued indicator, the step (y1) being performed before the step (f).

10. The method as described in claim 4, further comprising a step (y2) preventing the version of the software component, to which the pointer points, to have a deleted indicator applied as long as the version of the software component is pointed to by a pointer originating from a version of another software component, which has an issued indicator, the step (y2) being performed before the step (f).

11. The method as described in claim 1, further comprising a step (y3) preventing the version of the software component to have un-issued indicator once the version of software component is included in the update of the software release.

12. The method as described in claim 8, wherein the step (c) comprising providing the pointer between the version of the software component in the Filter class and the UID of the instance of the Application Type class.

13. The method as described in claim 2, wherein the step (b) comprises:
(z1) provided the version of software component has a valid name, determining whether the version of software component does not have a deleted indicator;
(z2) performing validation for the version of software component based on the class;
(z3) if there is no a previous version of software component, assigning a checked-in date time stamp to the version of software component; otherwise, (z4) if there is a previous version of software component, setting a checked-in retired time stamp to the previous version of software component;
z5) otherwise terminating the step (q).

14. The method as described in claim 13, wherein the step (z2) comprises:
checking-in the version of the Filter component from which the pointer originates, comprising:
ensuring that an Application Type component, to which the pointer points at, exists; and provided there is a pointer to another Filter component, ensuring that said another Filter component exists.

15. The method as described in claim 2, wherein the step (b) comprises:
(s) assigning the issued indicator to the version of software component, comprising:
(s1) performing validation of the version of software component based on the class;
(s2) if the version of software component has a deleted indicator, assigning an un-issued indicator to the version of software component;

(s2) if the version of software component does not have a deleted indicator; determining that the version of software component does not have any version with the issued indicator, followed by assigning the issued indicator to the version of software component and setting an issued retired date time stamp to a previous version of software component.

16. The method as described in claim 15, wherein the step is1) comprises:
(t) assigning the issued indicator to the version of the Filter component from which the pointer originates, comprising:
ensuring that an Application Type component, to which the pointer points at, exists and has an issued indicator; and provided there is a pointer to another Filter component, ensuring that said another Filter component exists and has an issued indicator;
otherwise terminating the step (t).

17. The method as described in claim 6, wherein the step (b) comprises:
(u) un-issuing the version of software component, comprising assigning the un-issued indicator, comprising:
(u1) performing validation of the version of software component based on the class;
(u2) determining whether the version of software component was not previously included in the update of software release and then deleted from the update;
(u3) if the version of software component has a deleted indicator, assigning an un-issued indicator to the version of software component;
(u4) if the version of software component does not have a deleted indicator, assigning an issued indicator to the version of software component, and assigning an issued retired date time stamp to the previous version of software component;
(u4) otherwise, terminating step (u),

18. The method as described in claim 17, wherein the step (u) comprises:
(v) un-issuing a version of Port List component, including assigning the un-issued indicator, comprising:
searching for versions of Application Type software components in the Latest view or the Issued view, which point to the version of the Port List component; and terminating the step (v) if the Applicant Type software components, which point to the Port List software component, have issued indicators.

19. The method as described in claim 7, wherein the step (b) comprises:
(w) assigning the deleted indicator to the version of software component, comprising:
(w1) performing validation of the version of software component based on the class;
(w2) provided the version of software component has not been withdrawn from a repository of software components for further development:
(ww2) if the version of software component has an issued indicator, assigning an un-issued indicator and an issued retired time stamp to the previous version of the software component;
(www2) if the version of software component does not have an issued indicator, assigning the deleted indicator to the version of software component and setting its checked-in retired date stamp to the current date.

20. The method as described in claim 19, wherein the step (w1) comprises:
(x) assigning the deleted indicator to the version of the Port List component, comprising ensuring that no version of the Application Type component in the Latest view or the Issued view points at the instance of the Port List class.

21. A system for assembling an update for software release, comprising:
(a) a repository of classes of software components, each class comprising one or more instances of the class, each instance having a unique identifier (UID), each instance of the class representing a software component, which has one or more versions;
(b) a software release management module, comprising:
(b1) a rule repository, comprising rules for flexible coupling between versions of software components and instances of classes by providing a pointer between a version of a software component and a UID of an instance of a class;
(b2) means for assigning, for each software component, one or more time stamps and indicators identifying status of the software component in accordance with the rules;
(b3) means for selecting versions of software components from which the pointers originate; and for selecting, for each instance of the class, to which the pointer points at, one version of the software component based on the assigned indicators; and (c) means for assembling the selected versions of the software components into the update of the software release.

22. The system as described in claim 21, wherein the indicators comprise one or more of the following:
(l) a deleted indicator when a version of software component is no longer needed;
(m) an issued indicator when a version of software component is included in a current software release; and (n) an un-issued indicator when a new version of the software component has been submitted to repository of software components, or when the version of software component does not have the issued or deleted indicator.

23. The system as described in claim 22, wherein the means (b2) comprises means for assigning date sets, comprising a checked-in date set and an issued date set, to each version of the software components;
wherein the checked-in date set includes a checked-in date time stamp when the version of the software component has become the latest version of the software component, and a checked-in retired date time stamp when a new version of the software component is submitted to repository of software components; and wherein the issued date set includes an issued date time stamp when the version of software component is assigned the issued indicator, and an issued retired sate time stamp when the version of software component is assigned the un-issued or deleted indicator.

24. The system as described in claim 22, wherein the means (b3) comprises means for generating views of versions of software components, including generating an issued view by selecting versions of software components, which have the issued indicator, and a latest view by selecting version of components, which have the most recent checked-in date time stamp.

25. The system as described in claim 21, wherein the repository of classes (a) comprises one or more of the following classes:
(i) an Application Type class;
(ii) a Filter class;
(iii) a Port List class.

26. A computer readable medium, comprising computer readable instructions stored thereon, for execution by a processor, to perform the steps of the method as described in claim 1.