Methods and systems for dynamic upgrade of an access manager

Patent metadata

Field	Value
Publication number	US-9229700-B2
Application number	US-201313749509-A
Country	US
Kind code	B2
Filing date	Jan 24, 2013
Priority date	Jan 24, 2013
Publication date	Jan 5, 2016
Grant date	Jan 5, 2016

Abstract

Methods and systems are described for upgrading an access manager framework. In response to an upgrade request from a client, current and new versions of the access manager framework are identified. Upon successful identification of the current version, one or more supported upgrade paths are determined for the upgrade process. An appropriate upgrade path from the current version to the new version is determined upon successful identification of the current and/or new version of the access manager framework. In response to determination of the appropriate upgrade path, a version specific program upgrade component and a version specific upgrade program are associated with the determined upgrade path. In addition, a set of information may be extracted from the access manager framework, transformed, and imported to the upgraded access manager framework based at least in part upon the determined version specific upgrade program and the version specific program upgrade component.

First claim

What is claimed is:

1. A method comprising:
determining, by an upgrade management system on a computing system, a configuration of an access manager that executes on the computing system, the configuration defining a first version of the access manager that protects access to one or more resources, wherein the configuration includes one or more settings defining functionality of the first version of the access manager, and wherein the first version of the access manager executes based on a policy configuration that defines access to the one or more resources for a plurality of users;
extracting, by the upgrade management system, a set of policy parameters of the policy configuration for the first version of the access manager, wherein the set of policy parameters indicates an authentication scheme for authenticating a client operated by a user and indicates an authorization policy for determining authentication of each of the plurality of users;
extracting, by the upgrade management system, the one or more settings indicated by the configuration of the first version of the access manager;
adjusting, by the upgrade management system, the extracted set of policy parameters to an updated set of policy parameters for an updated policy configuration, the updated policy configuration defining access to the one or more resources by a second version of the access manager for execution on the computing system, wherein adjusting the extracted set of policy parameters includes converting the extracted set of policy parameters for adjustment into the updated set of policy parameters to change from the first version to the second version of the access manager;
adjusting, by the upgrade management system, the one or more extracted settings to one or more updated settings in an updated configuration for a second version of the access manager, the updated configuration defining functionality for the second version to protect access to the one or more resources;
storing, by the upgrade management system, the updated set of policy parameters and the one or more updated settings to an import file for migration from the first version of the access manager to the second version of the access manager;
configuring, by the upgrade management system using the import file, the second version of the access manager for execution on the computing system based on the updated configuration; and
configuring, by the upgrade management system using the import file, the second version of the access manager to protect access to the one or more resources for a plurality of users based on the updated set of policy parameters in the updated policy configuration;
changing execution of the access manager on the computing system from the first version to the second version based on configuring the second version of the access manager according to the updated configuration and the updated policy configuration.

2. The method of claim 1 , wherein the set of policy parameters and the one or more settings are represented in a first format compatible with the first version of the access manager, and wherein the updated set of policy parameters and the one or more updated settings are represented in a second format compatible with the second version of the access manager.

3. The method of claim 1 , further comprising:
determining one or more upgrade paths for upgrading the access manager from the first version to the second version based at least in part upon identification of at least one of the first version of the access manager and the second version, wherein an upgrade path indicates an upgrade to change from the first version of the access manager to the second version of the access manager.

4. The method of claim 3 , wherein the one or more upgrade paths are determined dynamically upon receiving an upgrade request from the user.

5. The method of claim 3 , wherein a first upgrade path is identified from the one or more determined upgrade paths using at least one parameter, and wherein the at least one parameter includes an execution speed parameter and a system resource usage parameter.

6. The method of claim 5 , further comprising:
determining a version specific upgrade program based on the first upgrade path; and
determining a version specific upgrade program component based on the first upgrade path.

7. The method of claim 6 , wherein the set of policy parameters and the one or more settings are extracted for the first version of the access manager using at least one of the determined version specific upgrade program and the determined version specific upgrade program component.

8. The method of claim 5 , wherein the first upgrade path is an indirect upgrade path for upgrading the first version of the access manager to the second version of the access manager, the indirect upgrade path indicating an upgrade path for upgrading the first version of the access manager to a third version of the access manager and an upgrade path for upgrading the third version of the access manager to the second version of the access manager.

9. The method of claim 1 , wherein converting the extracted set of policy parameters for adjustment into the updated set of policy parameters includes merging at least two of policy parameters into the updated set of policy parameters.

10. The method of claim 1 , wherein converting the extracted set of policy parameters for adjustment into the updated set of policy parameters includes reducing one or more policy parameters from the set of policy parameters for adjustment into the updated set of policy parameters.

11. The method of claim 1 , wherein converting the extracted set of policy parameters for adjustment into the updated set of policy parameters includes adding a plurality of policy parameters to the updated set of policy parameters for adjustment of a policy parameter from the set of policy parameters.

12. An upgrade management system comprising:
a processor; and
memory coupled to the processor, the memory including instructions comprising program code executable by the processor for performing operations comprising:
determining a configuration of an access manager that executes on a computing system, the configuration defining a first version of the access manager that protects access to one or more resources, wherein the configuration includes one or more settings defining functionality of the first version of the access manager, and wherein the first version of the access manager executes based on a policy configuration that defines access to the one or more resources for a plurality of users;
extracting a set of policy parameters of the policy configuration for the first version of the access manager, wherein the set of policy parameters indicates an authentication scheme for authenticating a client operated by a user and indicates an authorization policy for determining authentication of each of the plurality of users;
extracting the one or more settings indicated by the configuration of the first version of the access manager;
adjusting the extracted set of policy parameters to an updated set of policy parameters for an updated policy configuration, the updated policy configuration defining access to the one or more resources by a second version of the access manager for execution on the computing system, wherein adjusting the extracted set of policy parameters includes converting the extracted set of policy parameters for adjustment into the updated set of policy parameters to change from the first version to the second version of the access manager;
adjusting the one or more extracted settings to one or more updated settings in an updated configuration for a second version of

Assignees

• Oracle Int Corp

Inventors

• Subramanya Ramya Kukkehali
• Martin Madhu

Classifications

• H04W4/50

  Service provisioning or reconfiguring · CPC title

• G06F9/44505

  Configuring for program initiating, e.g. using registry, configuration files · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title