Methods and systems for dynamic upgrade of an access manager

Patent metadata

Field	Value
Publication number	US-2016077826-A1
Application number	US-201514951951-A
Country	US
Kind code	A1
Filing date	Nov 25, 2015
Priority date	Jan 24, 2013
Publication date	Mar 17, 2016
Grant date	—

Abstract

Methods and systems are described for upgrading an access manager framework. In response to an upgrade request from a client, current and new versions of the access manager framework are identified. Upon successful identification of the current version, one or more supported upgrade paths are determined for the upgrade process. An appropriate upgrade path from the current version to the new version is determined upon successful identification of the current and/or new version of the access manager framework. In response to determination of the appropriate upgrade path, a version specific program upgrade component and a version specific upgrade program are associated with the determined upgrade path. In addition, a set of information may be extracted from the access manager framework, transformed, and imported to the upgraded access manager framework based at least in part upon the determined version specific upgrade program and the version specific program upgrade component.

First claim

What is claimed is:

1 . A method comprising:
by an upgrade management system on a computing system:
determining a configuration of first version of an access manager executing on the computing system to protect access to one or more resources, wherein the configuration includes one or more functional settings of the first version of the access manager, and wherein the configuration includes one or more policy parameters that defines authentication for accessing the one or more resources;
obtaining the one or more policy parameters included in the configuration of the first version of the access manager;
obtaining the one or more functional settings included in the configuration of the first version of the access manager;
generating a configuration of a second version of the access manager to protect access to the one or more resources, wherein generating the configuration of the second version includes:
modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager; and
modifying the one or more functional settings of the first version for adjustment from the first version to the second version of the access manager;

configuring, based on the generated configuration of the second version of the access manager, the second version of the access manager on the computing system; and
modifying execution of the access manager on the computing system from the first version to the second version based on configuring the second version of the access manager.

2 . The method of claim 1 , wherein the configuration of the first version has a first format, and wherein the configuration for the second version has a second format.

3 . The method of claim 1 , wherein the one or more settings includes a functional setting and the configuration includes information about appearance of a graphical interface of the access manager.

4 . The method of claim 1 , wherein the policy configuration includes one or more of an authentication policy or an authorization policy.

5 . The method of claim 1 , further comprising:
determining one or more directories to obtain the one or more policy parameters and the one or more functional settings; and exporting the one or more policy parameters and the one or more functional settings to a file having a directory format.

6 . The method of claim 5 , wherein the one or more policy parameters and the one or more functional settings are modified using the file.

7 . The method of claim 1 , wherein the second version of the access manager is configured using an import file that includes the modified one or more policy parameters and the one or more modified functional settings.

8 . The method of claim 1 , further comprising:
determining a path for changing the access manager from the first version to the second version.

9 . The method of claim 8 , wherein the path is determined based on an upgrade parameter including an execution speed parameter and a system resource usage parameter.

10 . The method of claim 8 , further comprising:
determining, based on the path, a program to modify the access manager from the first version to the second version.

11 . The method of claim 10 , wherein the one or more policy parameters and the one or more functional settings are obtained for the first version of the access manager using the determined program.

12 . The method of claim 1 , wherein modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager includes reducing the one or more policy parameters.

13 . The method of claim 1 , wherein modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager includes adding a policy parameter to the one or more policy parameters.

14 . A system for configuring an access manager, the system comprising:
one or more processors; and a memory readable by and coupled with the one or more processors, wherein the memory stores instructions that, when executed by the one or more processors, causes the one or more processors to:
determine a configuration of first version of an access manager executing on the computing system to protect access to one or more resources, wherein the configuration includes one or more functional settings of the first version of the access manager, and wherein the configuration includes one or more policy parameters that defines authentication for accessing the one or more resources;
obtain the one or more policy parameters included in the configuration of the first version of the access manager;
obtain the one or more functional settings included in the configuration of the first version of the access manager;
generate a configuration of a second version of the access manager to protect access to the one or more resources, wherein generating the configuration of the second version includes:
modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager; and
modifying the one or more functional settings of the first version for adjustment from the first version to the second version of the access manager;

configure, based on the generated configuration of the second version of the access manager, the second version of the access manager on the computing system; and
modify execution of the access manager on the computing system from the first version to the second version based on configuring the second version of the access manager.

15 . The system of claim 14 , wherein the instructions, when executed by the one or more processors, further causes the one or more processors to:
determine one or more directories to obtain the one or more policy parameters and the one or more functional settings; and export the one or more policy parameters and the one or more functional settings to a file having a directory format.

16 . The system of claim 14 , wherein the instructions, when executed by the one or more processors, further causes the one or more processors to:
determine a path for changing the access manager from the first version to the second version; and determine, based on the path, a program to modify the access manager from the first version to the second version.

17 . The system of claim 16 , wherein the one or more policy parameters and the one or more functional settings are obtained for the first version of the access manager using the determined program.

18 . A non-transitory machine-readable medium storing instructions that, when executed by a computing system, causes the computing system to:
determine a configuration of first version of an access manager executing on the computing system to protect access to one or more resources, wherein the configuration includes one or more functional settings of the first version of the access manager, and wherein the configuration includes one or more policy parameters that defines authentication for accessing the one or more resources; obtain the one or more policy parameters included in the configuration of the first version of the access manager; obtain the one or more functional settings included in the configuration of the first version of the access manager; generate a configuration of a second version of the access manager to protect access to the one or more resources, wherein generating the configuration of the second version includes:
modifying the one or more policy parameters for adjustment from the first version to

Assignees

• Oracle Int Corp

Inventors

• Subramanya Ramya Kukkehali
• Martin Madhu

Classifications

• H04W4/50

  Service provisioning or reconfiguring · CPC title

• G06F9/44505

  Configuring for program initiating, e.g. using registry, configuration files · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title