Multi-processing node connection in a data store system via encrypted password

Patent metadata

Field	Value
Publication number	US-11115212-B1
Application number	US-201715808461-A
Country	US
Kind code	B1
Filing date	Nov 9, 2017
Priority date	Nov 15, 2016
Publication date	Sep 7, 2021
Grant date	Sep 7, 2021

Abstract

A system may include a server and a data store system. The server may include at least one storage device and at least one processor. The server may execute an application and may store an encrypted password. The data store system may include at least one persistent storage device configured to store a data store. The data store system may further include a plurality of processing nodes configured to operate on the data store. The data store system may receive the encrypted password from the application with one of the plurality of processing nodes and may decrypt the encrypted password with the one of the plurality of processing nodes. The data store system may authenticate the decrypted password with the one of the processing nodes and provide the decrypted password to other processing nodes. Each processing node that has the decrypted password may be accessible to the application to operate on the data store. A method and computer-readable medium may also be implemented.

First claim

We claim:

1. A system comprising:
a server comprising at least one storage device and at least one processor, wherein the server is configured to execute an application and the storage device is configured to store an encrypted password;
a data store system independent from the server, wherein the data store system comprises:
at least one persistent storage device configured to store a data store;
a plurality of processing nodes configured to operate on the data store, wherein the data store is configured to:
receive the encrypted password from the application with one of the plurality of processing nodes;
decrypt the encrypted password with the one of the plurality of processing nodes;
authenticate the decrypted password with the one of the processing nodes; and
provide, with the one of the processing nodes, the decrypted password to other processing nodes, wherein each processing node that has the decrypted password is accessible to the application to operate on the data store.

2. The system of claim 1 , wherein the data store system is further configured to:
receive an installation request from the application;
determine if a valid password has been received from the application; and
in response to receipt of the valid password, provide the encrypted password to the server.

3. The system of claim 2 , wherein at least one of the processing nodes of the plurality of processing nodes is configured to, in response to receipt of the installation request, execute a user-defined function to process the installation request.

4. The system of claim 1 , wherein the one of the plurality of processing nodes is configured to provide the decrypted password to the other processing nodes.

5. The system of claim 1 , wherein the one of the plurality of processing nodes is configured to execute an external stored procedure to decrypt the encrypted password.

6. The system of claim 5 , wherein the other processing nodes are configured to execute the external stored procedure to authenticate a received decrypted password.

7. The system of claim 1 , wherein the server is configured to store the encrypted password in the storage device.

8. A method comprising
executing an application with a server comprising at least one storage device and at least one processor;
storing, on the storage device, an encrypted password;
receiving, with a data store system, the encrypted password, wherein the data store system is independent from the server, wherein the data store system comprises a plurality of processing nodes and at least one persistent storage device configured to store a data store;
decrypting the encrypted password with the one of the plurality of processing nodes;
authenticating the decrypted password with the one of the processing nodes; and
providing, with the one of the processing nodes, the decrypted password to other processing nodes, wherein each processing node that has the decrypted password is accessible to the application to operate on the data store.

9. The method of claim 8 , further comprising:
receiving, with the data store system, an installation request from the server;
determining, with the data store system, if a valid password has been received from the server; and
in response to receipt of the valid password, provide the encrypted password to the server.

10. The method of claim 9 , further comprising, in response to receipt of the installation request, executing, with at least one of the processing nodes of the plurality of processing nodes, a user-defined function to process the installation request.

11. The method of claim 8 , further comprising providing, with the one of the plurality of processing nodes, the decrypted password to the other processing nodes.

12. The method of claim 8 , further comprising executing, with the one of the plurality of processing nodes, an external stored procedure to decrypt the encrypted password.

13. The method of claim 12 , further comprising executing, with the other processing nodes, the external stored procedure to authenticate a received decrypted password.

14. The method of claim 8 , further comprising storing the encrypted password in the storage device of the server.

15. A non-transitory computer-readable medium encoded with a plurality of instructions executable by a processor, the plurality of instructions comprising:
instructions to receive, with a data store system, an encrypted password from an application executed on an external server, wherein the application seeks access to a data store of the data store system, wherein the data store system is independent from the external server;
instructions to decrypt the encrypted password with a processing node from a plurality of processing nodes of the data store system;
instructions to authenticate the decrypted password with the processing node; and
instructions to provide, with the processing node, the decrypted password to other processing nodes, wherein each processing node that has the decrypted password is accessible to the application to operate on the data store.

16. The non-transitory computer-readable medium of claim 15 , wherein the plurality of instructions further comprises:
instructions to receive, with the data store system, an installation request from the application;
instructions to determine, with the data store system, if a valid password has been received from the server; and
in response to receipt of the valid password, instructions to provide, with the data store system, the encrypted password to the server.

17. The non-transitory computer-readable medium of claim 15 , wherein the plurality of instructions further comprises, in response to receipt of the installation request, instructions to execute, with at least one of the processing nodes of the plurality of processing nodes, a user-defined function to process the installation request.

18. The non-transitory computer-readable medium of claim 15 , wherein the plurality the plurality of instructions further comprises instructions to provide, with the one of the plurality of processing nodes, the decrypted password to the other processing nodes.

19. The non-transitory computer-readable medium of claim 15 , wherein the plurality of instructions further comprises instructions to execute, with the one of the plurality of processing nodes, an external stored procedure to decrypt the encrypted password.

20. The non-transitory computer-readable medium of claim 15 , wherein the plurality of instructions further comprises instructions to execute, with the other processing nodes, the external stored procedure to authenticate a received decrypted password.

Assignees

• Teradata Us Inc

Inventors

• Ladha Alnasir
• Radovic Blazimir
• Li Zhenrong
• Siddiqui Ehtesham

Classifications

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/0894 Primary

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title