IP Library Granted Patent US 10,523,425
Granted Patent B2
US 10,523,425 · App. 15/630,642 · Granted Dec 31, 2019

Database password changes

Inventors: Raghavendran Hanumantharau (Fremont, CA); Yoram Tal (San Francisco, CA); Amit Das (Fremont, CA); Edward F. Gulakowski, Jr. (Reston, VA)
Assignee: salesforce.com, inc.
H04L9/0819G06F16/23G06F21/41G06F21/45H04L9/0891H04L63/083H04L63/0846G06F3/065
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,523,425
App. No.
15/630,642
Filed
Jun 22, 2017
Granted
Dec 31, 2019
Kind
B2
Art Unit
2492
USPC
726/5
Abstract

Systems and methods for changing database passwords are described. A first server computing system receives an indication to perform a password change process for an administrative account of an associated database. The server generates a vault configured to store a password change status and a password secret associated with the account. The server sets the password change status to a first value to indicate that the server is performing the password change process and then performs the password change process for the account. The server then sets the password change status to a second value to enable a second server computing system to perform a second password change process for a second administrative account of a database associated with the second server system. The database associated with the second server computing system is a standby database of the database associated with the first server system.

Claims (54)

1. A method comprising:

receiving, by a first server computing system, an indication to perform a first password change process for a first administrative account of a database associated with the first server computing system;

generating, by the first server computing system in response to receiving the indication, a vault configured to store content including a password change status, a password secret, and a new password associated with the first administrative account;

storing, by the first server computing system, the password change status in the vault, the password change status having a first value to indicate that the first server computing system is performing the first password change process;

performing, by the first server computing system, the first password change process for the first administrative account, performing the first password change process includes generating the new password;

storing, by the first server computing system, the generated new password and the password secret in the vault; and

setting, by the first server computing system, the password change status in the vault to a second value to enable a second server computing system to perform a second password change process for a second administrative account of a database associated with the second server computing system, the database associated with the second server computing system being a standby database of the database associated with the first server computing system.

2. The method of claim 1 , wherein the first server computing system is located at a first site, the second server computing system is located at a second site, the database associated with the first server computing system is a production database, and the vault is associated with a centralized storage.

3. The method of claim 2 , further comprising enabling, by the first server computing system, the second server computing system to access the password change status and the password secret stored in the vault.

4. The method of claim 3 , wherein the performing the first password change process for the first administrative account comprises:

performing, by the first server computing system, a database command to update the first administrative account with the new password; and

storing, by the first server computing system, at least the new password and a user identification (ID) associated with the first administrative account in the vault as the password secret.

5. The method of claim 4 , wherein an application is configured to perform the receiving the indication, generating the vault, setting the password change status and performing the first password change process in the first server computing system.

6. The method of claim 5 , further comprising monitoring, by the first server computing system, for the password change status to be updated by the second server computing system to a third value indicating that the second server computing system has completed the second password change process.

7. The method of claim 6 , wherein the performing the second password change process by the second server computing system comprises:

accessing the password secret from the vault; and

performing a database command to update a password of the second administrative account using the password secret.

8. The method of claim 7 , further comprising verifying, by the first server computing system, that the first administrative account is unlocked based on detecting that the password change status has been updated to the third value.

9. A system comprising:

one or more processors; and

a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors of a first server computing system to:

receive an indication to perform a first password change process for a first administrative account of a database associated with the first server computing system;

generate in response to receiving the indication, a vault configured to store content including a password change status, a password secret, and a new password associated with the first administrative account;

store, the password change status in the vault, the password change status having to a first value to indicate that the first server computing system is performing the first password change process;

perform the first password change process for the first administrative account, performing the first password change process includes generating the new password;

store the generated new password and the password secret in the vault; and

set the password change status in the vault to a second value to enable a second server computing system to perform a second password change process for a second administrative account of a database associated with the second server computing system, the database associated with the second server computing system being a standby database of the database associated with the first server computing system.

10. The system of claim 9 , wherein the first server computing system is located at a first site, the second server computing system is located at a second site, the database associated with the first server computing system is a production database, and the vault is associated with a centralized storage.

11. The system of claim 10 , further comprising instructions to enable the second server computing system to access the password change status and the password secret stored in the vault.

12. The system of claim 11 , wherein the instructions to perform the first password change process for the first administrative account comprises instructions to:

perform a database command to update the first administrative account with the new password; and

store the new password and a user identification (ID) associated with the first administrative account in the vault as the password secret.

13. The system of claim 12 , further comprising instructions to monitor for the password change status to be updated by the second server computing system to a third value, the third value indicating that the second server computing system has completed the second password change process.

14. The system of claim 13 , wherein the instructions to perform the second password change process by the second server computing system comprises instructions to:

access the password secret from the vault; and

perform a database command to update a password of the second administrative account using the password secret.

15. The system of claim 14 , further comprising instructions to verify that the first administrative account is unlocked based on detecting that the password change status has been updated to the third value.

16. A non-transitory computer-readable medium storing a plurality of instructions, which when executed, cause one or more processors of a first server computing system to:

receive an indication to perform a first password change process for a first administrative account of a database associated with the first server computing system;

generate in response to receiving the indication, a vault configured to store content including a password change status, a password secret, and a new password associated with the first administrative account;

store, the password change status in the vault, the password change status having a first value to indicate that the first server computing system is performing the first password change process;

perform the first password change process for the first administrative account, performing the first password change process includes generating the new password;

store the generated new password and the password secret in the vault; and

set the password change status in the vault to a second value to enable a second server computing system to perform a second password change process for a second administrative account of a database associated with the second server computing system, the database associated with the second server computing system being a standby database of the database associated with the first server computing system.

17. The non-transitory computer-readable medium of claim 16 , wherein the first server computing system is located at a first site, the second server computing system is located at a second site, the database associated with the first server computing system is a production database, and the vault is associated with a centralized storage.

18. The non-transitory computer-readable medium of claim 17 , further comprising instructions to enable the second server computing system to access the password change status and the password secret stored in the vault.

19. The non-transitory computer-readable medium of claim 18 , wherein the instructions to perform the first password change process for the first administrative account comprises instructions to:

perform a database command to update the first administrative account with the new password; and

store the new password and a user identification (ID) associated with the first administrative account are stored in the vault as the password secret.

20. The non-transitory computer-readable medium of claim 19 , further comprising instructions to monitor for the password change status to be updated by the second server computing system to a third value, the third value indicating that the second server computing system has completed the second password change process.

21. The non-transitory computer-readable medium of claim 20 , wherein the instructions to perform the second password change process by the second server computing system comprises instructions to:

access the password secret from the vault; and

perform a database command to update a password of the second administrative account using the password secret.

22. The non-transitory computer-readable medium of claim 21 , further comprising instructions to verify that the first administrative account is unlocked based on detecting that the password change status has been updated to the third value.

Assignments (2)
CHANGE OF NAME Recorded Oct 30, 2023
From: SALESFORCE.COM, INC.
To: SALESFORCE, INC.
Reel/Frame 065394/0169 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 22, 2017
From: HANUMANTHARAU, RAGHAVENDRAN; TAL, YORAM; DAS, AMIT; GULAKOWSKI, EDWARD F., JR.
To: SALESFORCE.COM, INC.
Reel/Frame 042790/0825 →
Continuity (1)
Related Publication 20180375645A1 · Dec 27, 2018
Cited By (1)
US 12,314,733