Methods and systems for dynamic upgrade of an access manager

Patent metadata

Field	Value
Publication number	US-9858065-B2
Application number	US-201514951951-A
Country	US
Kind code	B2
Filing date	Nov 25, 2015
Priority date	Jan 24, 2013
Publication date	Jan 2, 2018
Grant date	Jan 2, 2018

Abstract

Methods and systems are described for upgrading an access manager framework. In response to an upgrade request from a client, current and new versions of the access manager framework are identified. Upon successful identification of the current version, one or more supported upgrade paths are determined for the upgrade process. An appropriate upgrade path from the current version to the new version is determined upon successful identification of the current and/or new version of the access manager framework. In response to determination of the appropriate upgrade path, a version specific program upgrade component and a version specific upgrade program are associated with the determined upgrade path. In addition, a set of information may be extracted from the access manager framework, transformed, and imported to the upgraded access manager framework based at least in part upon the determined version specific upgrade program and the version specific program upgrade component.

First claim

What is claimed is:

1. A method implemented by one or more processors of a computer executing instructions of an upgrade management system stored in memory on the computer, the method comprising:
Detecting, by the upgrade management system, an update for an access manager executing on a computer system, wherein the update is for a first version of the access manager to a second version of the access manager;
based on detecting the update to the first version of the access manager, automatically updating, by the upgrade management system executing on the computer system, the first version of the access manager on the computer system to execute the second version of the access manager on the computer system, wherein the updating includes:
retrieving, by the upgrade management system, the configuration of the first version of an access manager executing on the computer system to protect access to one or more resources, wherein the configuration includes one or more functional settings of the first version of the access manager, and wherein the configuration includes one or more policy parameters of the first version of the access manager that defines authentication for accessing the one or more resources;
extracting, by the upgrade management system, the one or more policy parameters from within the configuration of the first version of the access manager;
extracting, by the upgrade management system, the one or more functional settings from within the configuration of the first version of the access manager;
generating, by the upgrade management system, a configuration of the second version of the access manager to protect access to the one or more resources, wherein generating the configuration of the second version includes:
modifying the one or more policy parameters for adjustment from the first version of the access manager to the second version of the access manager; and
modifying the one or more functional settings of the first version of the access manager for adjustment from the first version of the access manager to the second version of the access manager; and

modifying, by the upgrade management system, based on the generated configuration of the second version of the access manager, a control flow for executing the access manager, wherein the control flow is modified from the first version of the access manager to the second version of the access manager for execution on the computer system; and
initiating execution of the second version of the access manager on the computer system using the modified control flow from the first version of the access manager to the second version of the access manager.

2. The method of claim 1 , wherein the configuration of the first version has a first format, and wherein the configuration for the second version has a second format.

3. The method of claim 1 , wherein the configuration of the first version of the access manager includes information about appearance of a graphical interface of the access manager.

4. The method of claim 1 , wherein the one or more policy parameters for configuring one or more of an authentication policy or an authorization policy.

5. The method of claim 1 , further comprising:
determining, by the upgrade management system, one or more directories to obtain the one or more policy parameters and the one or more functional settings; and
exporting, by the upgrade management system, the one or more policy parameters and the one or more functional settings to a file having a directory format.

6. The method of claim 5 , wherein the one or more policy parameters and the one or more functional settings are modified using the file.

7. The method of claim 1 , wherein the second version of the access manager is configured using an import file that includes the modified one or more policy parameters and the one or more modified functional settings.

8. The method of claim 1 , further comprising:
determining, by the upgrade management system, a path for updating the access manager from the first version to the second version.

9. The method of claim 8 , wherein the path is determined based on an upgrade parameter including an execution speed parameter and a system resource usage parameter.

10. The method of claim 8 , further comprising:
determining, by the upgrade management system, based on the path, a separate program to update the access manager from the first version to the second version.

11. The method of claim 10 , wherein the one or more policy parameters and the one or more functional settings are obtained for the first version of the access manager using the separate program.

12. The method of claim 1 , wherein modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager includes reducing the one or more policy parameters.

13. The method of claim 1 , wherein modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager includes adding a policy parameter to the one or more policy parameters.

14. A system for configuring an access manager, the system comprising:
one or more processors; and
a memory readable by and coupled with the one or more processors, wherein the memory stores instructions that, when executed by the one or more processors, cause the one or more processors to:
determine a configuration of first version of an access manager executing on the computing system to protect access to one or more resources, wherein the configuration includes one or more functional settings of the first version of the access manager, and wherein the configuration includes one or more policy parameters that defines authentication for accessing the one or more resources;
obtain the one or more policy parameters included in the configuration of the first version of the access manager;
obtain the one or more functional settings included in the configuration of the first version of the access manager;
generate a configuration of a second version of the access manager to protect access to the one or more resources, wherein generating the configuration of the second version includes:
modifying the one or more policy parameters for adjustment from the first version to the second version of the access manager; and
modifying the one or more functional settings of the first version for adjustment from the first version to the second version of the access manager;

configure, based on the generated configuration of the second version of the access manager, the second version of the access manager on the computing system; and
modify execution of the access manager on the computing system from the first version to the second version based on configuring the second version of the access manager.

15. The system of claim 14 , wherein the instructions, when executed by the one or more processors, further causes the one or more processors to:
determine one or more directories to obtain the one or more policy parameters and the one or more functional settings; and
export the one or more policy parameters and the one or more functional settings to a file having a directory format.

16. The system of claim 14 , wherein the instructions, when executed by the one or more processors, further causes the one or more processors to:
determine a path for changing the access manager from the first version to the second version; and
determine, based on the path, a program to modify the access manager from the first version to the second version.

17. The system of claim 16 , wherein the o

Assignees

• Oracle Int Corp

Inventors

• Subramanya Ramya Kukkehali
• Martin Madhu

Classifications

• G06F9/44505

  Configuring for program initiating, e.g. using registry, configuration files · CPC title

• H04W4/50

  Service provisioning or reconfiguring · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04W4/001

  Electricity · mapped topic