Credential information management in network

Patent metadata

Field	Value
Publication number	US-12328236-B2
Application number	US-202218008303-A
Country	US
Kind code	B2
Filing date	Jul 28, 2022
Priority date	Jul 28, 2022
Publication date	Jun 10, 2025
Grant date	Jun 10, 2025

Abstract

A credential management apparatus performs a change process, an acquisition process, and a locking process. The change process is processing that periodically changes credential information of components that constitute a network. The acquisition process is processing that acquires maintenance operation information related to a maintenance operation of the network. The locking process is processing that locks the credential information of, among the components, a target component for the maintenance operation not to be changed based on the maintenance operation information, at least during the period while the maintenance operation is being performed.

First claim

What is claimed is:

1. A credential management apparatus comprising one or more processors, at least one of the one or more processors being configured to:
periodically change credential information of components that constitute a network, the components comprising a target component;
acquire maintenance operation information related to a maintenance operation of the network; and
lock credential information of the target component for the maintenance operation based on the maintenance operation information such that the credential information of the target component remains unchanged, at least during performance of the maintenance operation,
wherein the periodically changing of the credential information of components is based on a request to generate new credential information of components sent to other processors of the one or more processors, the credential information of the components being changed to the new credential information of components, and
wherein the request to generate new credential information of the target component is prevented from being sent to the other processors of the one or more processors by the locking of the credential information of the target component for the maintenance operation.

2. The credential management apparatus according to claim 1 , wherein,
when the maintenance operation information includes a scheduling notice indicating that the maintenance operation is scheduled, the at least one of the one or more processors is further configured to lock the credential information at a time when the scheduling notice is acquired.

3. The credential management apparatus according to claim 1 , wherein,
when the maintenance operation information includes information related to an operator performing the maintenance operation, the at least one of the one or more processors is further configured to lock the credential information associated with the operator.

4. The credential management apparatus according to claim 1 , the at least one of the one or more processors is further configured to unlock the credential information at a predetermined time after the credential information is locked.

5. The credential management apparatus according to claim 4 , wherein,
when the maintenance operation information includes a completion notice indicating that the maintenance operation has been completed, the at least one of the one or more processors is further configured to unlock the credential information at a time when the completion notice is acquired.

6. The credential management apparatus according to claim 4 , wherein the at least one of the one or more processors is further configured to unlock the credential information after a predetermined period of time has elapsed since the credential information was locked.

7. The credential management apparatus according to claim 6 , wherein the at least one of the one or more processors is further configured to:
acquire the maintenance operation information including information indicating a scheduled operation period of the maintenance operation; and
unlock the credential information after the predetermined period of time that is longer than the scheduled operation period has elapsed.

8. A credential management method, comprising:
periodically changing credential information of components that constitute a network, the components comprising a target component;
acquiring maintenance operation information related to a maintenance operation of a network; and
locking credential information of a target component for the maintenance operation based on the maintenance operation information such that the credential information of the target component remains unchanged, at least during performance of the maintenance operation,
wherein the periodically changing of the credential information of components is based on a request to generate new credential information of components sent to a processor, the credential information of the components being changed to the new credential information of components, and
wherein the requesting to generate new credential information of the target component is prevented from being sent to the processor by the locking of the credential information of the target component for the maintenance operation.

9. A credential management system comprising one or more processors, at least one of the one or more processors being configured to:
periodically change credential information of components that constitute a network, the components comprising a target component;
acquire maintenance operation information related to a maintenance operation of the network; and
lock credential information of the target component for the maintenance operation based on the maintenance operation information such that the credential information of the target component remains unchanged, at least during performance of the maintenance operation,
wherein the periodically changing of the credential information of components is based on a request to generate new credential information of components sent to other processors of the one or more processors, the credential information of the components being changed to the new credential information of components, and
wherein the request to generate new credential information of the target component is prevented from being sent to the other processors of the one or more processors by the locking of the credential information of the target component for the maintenance operation.

Assignees

• Rakuten Mobile Inc

Inventors

• OH Jayoung
• Kanai Tomomi
• Jo Hiroyuki

Classifications

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• G06F16/1774

  Locking methods, e.g. locking methods for file systems allowing shared and concurrent access to files · CPC title

• G06F16/2343

  Locking methods, e.g. distributed locking or locking implementation details · CPC title

• H04L41/28 Primary

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title