IP Library Granted Patent US 9,584,324
Granted Patent B2
US 9,584,324 · App. 14/153,400 · Granted Feb 28, 2017

Centralized datastore password management

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,584,324
App. No.
14/153,400
Granted
Feb 28, 2017
Kind
B2
Abstract

According to some embodiments, an application server may have a repository to facilitate a transfer of data between data storage elements. A datastore may be stored in the repository for a data storage element, the datastore including a password reference identifier. A password center table may be created in the repository to associate the password reference identifier with an actual encrypted password for the data storage element. At execution time, the password reference identifier in the datastore may be automatically replaced with the actual encrypted password for the data storage element.

Claims (28)

1. A method associated with an application server having a repository to facilitate a transfer of data between data storage elements, comprising:

storing, in the repository via a computer processor, a datastore for a data storage element, the datastore including a password reference identifier comprising a globally unique identifier (“GUID”);

creating, in the repository, a password center table associating the password reference identifier with (i) an encrypted password for the data storage element (ii) a datastore identifier to identify the datastore in the repository and (iii) a pointer to a decryption key for decrypting the encrypted password;

prior to execution time, determining a revised encrypted password for the data storage element;

at execution time, automatically replacing, by a hardware computer processor, the password reference identifier in the datastore with the encrypted password and the pointer to the decryption key from the password center table for the data storage element based on the datastore identifier; and

updating the password center table, without updating the datastore, to associate the password reference identifier with the revised encrypted password.

2. The method of claim 1 , wherein at least one of the data storage elements is associated with: (i) a database, (ii) a cloud implementation, (iii) data saved in a local file, (iv) data from a file transfer protocol server, or (v) web services.

3. The method of claim 1 , wherein the encrypted password is further associated with a pointer to a decryption key.

4. The method of claim 1 , wherein the transfer of data between data storage elements is associated with an extract, transform, load tool and a cloud implementation.

5. The method of claim 4 , wherein the datastore comprises an abstract layer used by the extract, transform, load tool to represent the data storage element.

6. A non-transitory computer-readable medium storing program code, the program code executable by a hardware computer processor to perform a method associated with an application server having a repository to facilitate a transfer of data between data storage elements, wherein the method comprises:

storing, in the repository, a datastore for a data storage element, the datastore including a password reference identifier comprising a globally unique identifier (“GUID”);

creating, in the repository, a password center table associating the password reference identifier with (i) an encrypted password for the data storage element (ii) a datastore identifier to identify the datastore in the repository and (iii) a pointer to a decryption key for decrypting the encrypted password;

prior to execution time, determining a revised encrypted password for the data storage element;

at execution time, replacing, via a hardware computer processor, the password reference identifier in the datastore with the encrypted password from the password center table and the pointer to the decryption key for the data storage element based on the datastore; and

updating the password center table, without updating the datastore, to associate the password reference identifier with the revised encrypted password.

7. The medium of claim 6 , wherein at least one of the data storage elements is associated with: (i) a database, (ii) a cloud implementation, (iii) data saved in a local file, (iv) data from a file transfer protocol server, or (v) web services.

8. The medium of claim 6 , wherein the encrypted password is further associated with a pointer to a decryption key.

9. The method of claim 1 , wherein the transfer of data between data storage elements is associated with an extract, transform, load tool and a cloud implementation.

10. The method of claim 9 , wherein the datastore comprises an abstract layer used by the extract, transform, load tool to represent the data storage element.

11. A system, comprising:

an application server repository to facilitate a transfer of data between data storage elements; and

an application server computer processor to: (i) store, in the repository, a datastore for a data storage element, the datastore including a password reference identifier comprising a globally unique identifier (“GUID”), (ii) create, in the repository, a password center table associating the password reference identifier with (i) an encrypted password for the data storage element and (ii) a datastore identifier to identify the datastore in the repository, (iii) prior to execution time, determine a revised encrypted password for the data storage element (iv) at execution time, replace the password reference identifier in the datastore with the encrypted password from the password center table for the data storage element based on the datastore identifier, and (v) update the password center table, without updating the datastore, to associate the password reference identifier with the revised encrypted password.

12. The system of claim 11 , wherein at least one of the data storage elements is associated with: (i) a database, (ii) a cloud implementation, (iii) data saved in a local file, (iv) data from a file transfer protocol server, or (v) web services.

13. The system of claim 11 , wherein the encrypted password is further associated with a pointer to a decryption key.

14. The system of claim 11 , wherein the transfer of data between data storage elements is associated with an extract, transform, load tool and a cloud implementation.

15. The system of claim 14 , wherein the datastore comprises an abstract layer used by the extract, transform, load tool to represent the data storage element.

16. The method of claim 1 , wherein the password center table further associates the password reference identifier with a pointer to a decryption key for decrypting the encrypted password and at execution time, the password reference identifier in the datastore is replaced with the encrypted password and the pointer to the decryption key.

Assignments (2)
CHANGE OF NAME Recorded Aug 26, 2014
From: SAP AG
To: SAP SE
Reel/Frame 033625/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 13, 2014
From: TU, ENPING; CHEN, YUNG-YIN; LI, NING
To: SAP AG
Reel/Frame 031951/0256 →