Automatic elevation of system security
View Patent ↗A system for automatic setting of system security comprises an input interface and a processor. The input interface is configured to receive an indication to set a secure mode. The processor is configured to: determine whether the indication to set the secure mode comprises an indication to set a certificate mode; in the event that the indication to set the secure mode comprises an indication to set a certificate mode: 1) detect one or more connected systems for which to set the certificate mode; 2) select one or more certificates for the certificate mode; 3) update initialization files for the certificate mode; and 4) reinitialize local and one or more connected systems.
1. A system, comprising:
one or more processors configured to:
determine to set communication with the system to a secure mode;
in response to determining to set the communication with the system to the secure mode,
detect one or more connected systems for which to set to the secure mode;
select one or more certificates to use for communication with the one or more connected systems in connection with the secure mode; and
set the communication between the system and the one or more connected systems to the secure mode based at least in part on the one or more selected certificates; and
one or more memories coupled to the one or more processors and configured to provide the one or more processors with instructions.
2. The system of claim 1 , wherein the one or more processors are further configured to reinitialize at least one of the one or more connected systems in response to the communication with the one or more connected system being set to the secure mode.
3. The system of claim 1 , wherein the one or more processors are further configured to determine whether the one or more certificates have been received for the one or more connected systems.
4. The system of claim 1 , wherein to set the communication with the one or more connected systems to the secure mode comprises updating one or more initialization files associated with at least one of the one or more connected systems.
5. The system of claim 4 , wherein updating the one or more initialization files comprises changing at least one of the one or more initialization files to indicate a path to at least one of the one or more selected certificates.
6. The system of claim 1 , wherein to set the communication with the one or more connected systems to the secure mode comprises setting a certificate-based authentication between the system and the one or more connected systems.
7. The system of claim 1 , wherein to set the communication with the one or more connected systems to the secure mode comprises providing at least one of the one or more connected systems with at least one of the one or more selected certificates.
8. The system of claim 1 , wherein one or more of the one or more connected systems comprise docbrokers.
9. The system of claim 1 , wherein one or more of the one or more connected systems comprise content servers.
10. The system of claim 1 , wherein to select the one or more certificates comprises receiving one or more of the one or more certificates.
11. The system of claim 1 , wherein to select the one or more certificates comprises generating one or more of the one or more certificates.
12. The system of claim 1 , wherein the one or more processors are further configured to create a trust store.
13. The system of claim 1 , wherein the one or more processors are further configured to create a key store.
14. The system of claim 1 , wherein the one or more processors are further configured to, in response to a determination to set communication with one or more connected systems to a secure mode comprises an indication to not set a certificate mode:
detect at least one of the one or more connected systems for which to set to the anonymous mode;
update initialization files for the anonymous mode; and
reinitialize local and at least one of the one or more connected systems.
15. The system of claim 1 , wherein the one or more processors are further configured to determine whether at least one of the one or more selected certificates has been previously created, and in response to a determination that the at least one of the one or more selected certificates has not been previously created, creating the at least one of the one or more certificates.
16. A method for automatic setting of system security, comprising:
determining to set communication with the system to a secure mode; and
in response to determining to set the communication with the system to the secure mode,
detecting one or more connected systems for which to set to the secure mode;
selecting one or more certificates to use for communication with the one or more connected systems in connection with the secure mode; and
setting the communication between the system and the one or more connected systems to the secure mode based at least in part on the one or more selected certificates.
17. The method of claim 16 , further comprising: reinitializing at least one of the one or more connected systems in response to the communication with the one or more connected system being set to the secure mode.
18. The method of claim 16 , further comprising: determining whether the one or more certificates have been received for the one or more connected systems.
19. The method of claim 16 , further comprising: updating one or more initialization files associated with at least one of the one or more connected systems.
20. The method of claim 19 , wherein updating the one or more initialization files comprises changing at least one of the one or more initialization files to indicate a path to at least one of the one or more selected certificates.
21. The method of claim 16 , wherein setting the communication with the one or more connected systems to the secure mode comprises setting a certificate-based authentication between the system and the one or more connected systems.
22. The method of claim 16 , wherein setting the communication with the one or more connected systems to the secure mode comprises providing at least one of the one or more connected systems with at least one of the one or more selected certificates.
23. A computer program product for automatic setting of system security, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
determining to set communication with the system to a secure mode; and
in response to determining to set the communication with the system to the secure mode,
detecting one or more connected systems for which to set to the secure mode;
selecting one or more certificates to use for communication with the one or more connected systems in connection with the secure mode; and
setting the communication between the system and the one or more connected systems to the secure mode based at least in part on the one or more selected certificates.