IP Library Granted Patent US 9,729,575
Granted Patent B1
US 9,729,575 · App. 14/140,845 · Granted Aug 8, 2017

Methods, systems, and computer readable mediums for performing centralized management of converged infrastructure system credential information

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,729,575
App. No.
14/140,845
Granted
Aug 8, 2017
Kind
B1
Abstract

Methods, systems, and computer readable mediums for managing credential information are disclosed. According to one method, the method includes, at a credential management module (CMM) associated with a converged infrastructure system (CIS), establishing communication with at least one or more converged infrastructure elements (CIEs) included in a CIS. The method further includes receiving a credential policy corresponding to each of the at least one or more CIEs and generating credential information in accordance with the received credential policy.

Claims (31)

1. A method for managing credential information in a converged infrastructure system (CIS), the method comprising:

at a credential management module (CMM) associated with a CIS:

establishing communication with converged infrastructure elements (CIEs) included in the CIS via a secure communication access interface, wherein the CIEs comprise a plurality of components of a physical infrastructure of the CIS and a plurality of components of a virtualized infrastructure of the CIS;

receiving a credential policy corresponding to each of the CIEs, wherein receiving a credential policy includes receiving a set of rules for generating the credential information that comprises a parameter that indicates a duration in which the credential information remains valid, and wherein the method comprises supplying an access credential to a subscriber associated with the CIS to access a first CIE, after the duration in which the credential information remains valid expires, notifying the subscriber that further access to the first CIE will be denied while the subscriber is accessing the first CIE, receiving a request from the subscriber to extend the duration of the access credential, and extending the duration of the access credential so that the subscriber can continue accessing the first CIE;

generating, for each of CIEs, credential information in accordance with the received credential policy;

providing the generated credential information to the subscriber; and

resetting the credential information for a plurality of the CIEs based on interdependencies that exist among the plurality of the CIEs, wherein resetting the credential information for a plurality of the CIEs based on interdependencies includes determining, based on interdependencies between at least some of the plurality of components of the physical infrastructure of the CIS and at least some of the plurality of components of the virtualized infrastructure of the CIS, to reset credential information for a first group of the plurality of CIEs before resetting credential information for a second group of the plurality of CIEs.

2. The method of claim 1 wherein establishing communication with the at least one or more CIEs comprises communicating with the at least one or more CIEs via a secured communication protocol that is at least one of a Transport Layer Security (TLS) protocol, a Secure Socket Layer (SSL) protocol, a Secure Shell (SSH) protocol, a Secure File Transfer Protocol (SFTP), and a Secure Copy Protocol (SCP).

3. The method of claim 1 wherein generating the credential information comprises storing the generated credential information in a secured table within a repository associated with the CIS.

4. The method of claim 1 further comprising resetting the credential information associated with the at least one or more CIEs.

5. The method of claim 4 wherein the credential information is reset on a periodic basis by the CMM.

6. The method of claim 4 wherein the credential information is reset by the CMM upon the CMM receiving an administrator request.

7. A system for managing credential information, the system comprising:

converged infrastructure elements (CIEs) associated with a converged infrastructure system (CIS), wherein the CIEs comprise a plurality of components of a physical infrastructure of the CIS and a plurality of components of a virtualized infrastructure of the CIS; and

a credential management module (CMM) configured to establish communication with each of the CIEs via a secure communication access interface, to receive a credential policy corresponding to each of the CIEs that includes receiving a set of rules for generating the credential information that comprises a parameter that indicates a duration in which the credential information remains valid, to generate, for each of the CIEs, credential information in accordance with the received credential policy, to provide the generated credential information to a subscriber associated with the CIS, and to reset the credential information for a plurality of the CIEs based on interdependencies that exist among the plurality of the CIEs via a determination, based on interdependencies between at least some of the plurality of components of the physical infrastructure of the CIS and at least some of the plurality of components of the virtualized infrastructure of the CIS, to reset credential information for a first group of the plurality of CIEs before resetting credential information for a second group of the plurality of CIEs

wherein the CMM is further configured to supply an access credential to the subscriber to access a first CIE, after the duration in which the credential information remains valid expires, to notify the subscriber that further access to the first CIE will be denied while the subscriber is accessing the first CIE, to receive a request from the subscriber to extend the duration of the access credential, and to extend the duration of the access credential so that the subscriber can continue accessing the first CIE.

8. The system of claim 7 wherein the CMM is further configured to communicate with the at least one or more CIEs via a secured communication protocol that is at least one of a Transport Layer Security (TLS) protocol, a Secure Socket Layer (SSL) protocol, a Secure Shell (SSH) protocol, a Secure File Transfer Protocol (SFTP), and a Secure Copy Protocol (SCP).

9. The system of claim 7 wherein the CMM is further configured to store the generated credential information in a secured table within a repository associated with the CIS.

10. The system of claim 7 wherein the CMM is further configured to reset the credential information associated with each of the CIEs.

11. The system of claim 10 wherein the CMM is further configured to reset the credential information on a periodic basis.

12. The system of claim 10 wherein the CMM is further configured to reset the credential information upon receiving an administrator request.

13. A non-transitory computer readable medium having stored thereon executable instructions that when executed by a processor of a computer control the computer to perform steps comprising:

at a credential management module (CMM) associated with a CIS

establishing communication with converged infrastructure elements (CIEs) included in the CIS via a secure communication access interface, wherein the CIEs comprise a plurality of components of a physical infrastructure of the CIS and a plurality of components of a virtualized infrastructure of the CIS;

receiving a credential policy corresponding to each of the CIEs, wherein receiving a credential policy includes receiving a set of rules for generating the credential information that comprises a parameter that indicates a duration in which the credential information remains valid, and wherein the method comprises supplying an access credential to a subscriber associated with the CIS to access a first CIE, after the duration in which the credential information remains valid expires, notifying the subscriber that further access to the first CIE will be denied while the subscriber is accessing the first CIE, receiving a request from the subscriber to extend the duration of the access credential, and extending the duration of the access credential so that the subscriber can continue accessing the first CIE;

generating credential information in accordance with the received credential policy;

providing the generated credential information to the subscriber; and

resetting the credential information for a plurality of the CIEs based on interdependencies that exist among the plurality of the CIEs, wherein resetting the credential information for a plurality of the CIEs based on interdependencies includes determining, based on interdependencies between at least some of the plurality of components of the physical infrastructure of the CIS and at least some of the plurality of components of the virtualized infrastructure of the CIS, to reset credential information for a first group of the plurality of CIEs before resetting credential information for a second group of the plurality of CIEs.

14. The non-transitory computer readable medium of claim 13 further comprising resetting the credential information associated with the at least one or more CIEs.

15. The non-transitory computer readable medium of claim 14 wherein the credential information is reset on a periodic basis by the CMM.

16. The non-transitory computer readable medium of claim 14 wherein the credential information is reset by the CMM upon the CMM receiving an administrator request.

Assignments (4)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
MERGER Recorded Mar 26, 2020
From: VCE IP HOLDING COMPANY LLC
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 052236/0497 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 8, 2016
From: VCE COMPANY, LLC
To: VCE IP HOLDING COMPANY LLC
Reel/Frame 040576/0161 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 29, 2014
From: STONER, THADDEUS W.
To: VCE COMPANY, LLC
Reel/Frame 032984/0191 →