Centralized datastore password management

Patent metadata

Field	Value
Publication number	US-9584324-B2
Application number	US-201414153400-A
Country	US
Kind code	B2
Filing date	Jan 13, 2014
Priority date	Jan 13, 2014
Publication date	Feb 28, 2017
Grant date	Feb 28, 2017

Abstract

According to some embodiments, an application server may have a repository to facilitate a transfer of data between data storage elements. A datastore may be stored in the repository for a data storage element, the datastore including a password reference identifier. A password center table may be created in the repository to associate the password reference identifier with an actual encrypted password for the data storage element. At execution time, the password reference identifier in the datastore may be automatically replaced with the actual encrypted password for the data storage element.

First claim

What is claimed is:

1. A method associated with an application server having a repository to facilitate a transfer of data between data storage elements, comprising:
storing, in the repository via a computer processor, a datastore for a data storage element, the datastore including a password reference identifier comprising a globally unique identifier (“GUID”);
creating, in the repository, a password center table associating the password reference identifier with (i) an encrypted password for the data storage element (ii) a datastore identifier to identify the datastore in the repository and (iii) a pointer to a decryption key for decrypting the encrypted password;
prior to execution time, determining a revised encrypted password for the data storage element;
at execution time, automatically replacing, by a hardware computer processor, the password reference identifier in the datastore with the encrypted password and the pointer to the decryption key from the password center table for the data storage element based on the datastore identifier; and
updating the password center table, without updating the datastore, to associate the password reference identifier with the revised encrypted password.

2. The method of claim 1 , wherein at least one of the data storage elements is associated with: (i) a database, (ii) a cloud implementation, (iii) data saved in a local file, (iv) data from a file transfer protocol server, or (v) web services.

3. The method of claim 1 , wherein the encrypted password is further associated with a pointer to a decryption key.

4. The method of claim 1 , wherein the transfer of data between data storage elements is associated with an extract, transform, load tool and a cloud implementation.

5. The method of claim 4 , wherein the datastore comprises an abstract layer used by the extract, transform, load tool to represent the data storage element.

6. A non-transitory computer-readable medium storing program code, the program code executable by a hardware computer processor to perform a method associated with an application server having a repository to facilitate a transfer of data between data storage elements, wherein the method comprises:
storing, in the repository, a datastore for a data storage element, the datastore including a password reference identifier comprising a globally unique identifier (“GUID”);
creating, in the repository, a password center table associating the password reference identifier with (i) an encrypted password for the data storage element (ii) a datastore identifier to identify the datastore in the repository and (iii) a pointer to a decryption key for decrypting the encrypted password;
prior to execution time, determining a revised encrypted password for the data storage element;
at execution time, replacing, via a hardware computer processor, the password reference identifier in the datastore with the encrypted password from the password center table and the pointer to the decryption key for the data storage element based on the datastore; and
updating the password center table, without updating the datastore, to associate the password reference identifier with the revised encrypted password.

7. The medium of claim 6 , wherein at least one of the data storage elements is associated with: (i) a database, (ii) a cloud implementation, (iii) data saved in a local file, (iv) data from a file transfer protocol server, or (v) web services.

8. The medium of claim 6 , wherein the encrypted password is further associated with a pointer to a decryption key.

9. The method of claim 1 , wherein the transfer of data between data storage elements is associated with an extract, transform, load tool and a cloud implementation.

10. The method of claim 9 , wherein the datastore comprises an abstract layer used by the extract, transform, load tool to represent the data storage element.

11. A system, comprising:
an application server repository to facilitate a transfer of data between data storage elements; and
an application server computer processor to: (i) store, in the repository, a datastore for a data storage element, the datastore including a password reference identifier comprising a globally unique identifier (“GUID”), (ii) create, in the repository, a password center table associating the password reference identifier with (i) an encrypted password for the data storage element and (ii) a datastore identifier to identify the datastore in the repository, (iii) prior to execution time, determine a revised encrypted password for the data storage element (iv) at execution time, replace the password reference identifier in the datastore with the encrypted password from the password center table for the data storage element based on the datastore identifier, and (v) update the password center table, without updating the datastore, to associate the password reference identifier with the revised encrypted password.

12. The system of claim 11 , wherein at least one of the data storage elements is associated with: (i) a database, (ii) a cloud implementation, (iii) data saved in a local file, (iv) data from a file transfer protocol server, or (v) web services.

13. The system of claim 11 , wherein the encrypted password is further associated with a pointer to a decryption key.

14. The system of claim 11 , wherein the transfer of data between data storage elements is associated with an extract, transform, load tool and a cloud implementation.

15. The system of claim 14 , wherein the datastore comprises an abstract layer used by the extract, transform, load tool to represent the data storage element.

16. The method of claim 1 , wherein the password center table further associates the password reference identifier with a pointer to a decryption key for decrypting the encrypted password and at execution time, the password reference identifier in the datastore is replaced with the encrypted password and the pointer to the decryption key.

Assignees

• Tu Enping
• Chen Yung-Yin
• Li Ning
• Sap Se

Inventors

• Tu Enping
• Chen Yung-Yin
• Li Ning

Classifications

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L67/06

  specially adapted for file transfer, e.g. file transfer protocol [FTP] · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title