Granted Patent B2

US 12,267,330 · App. 17/592,581 · Granted Apr 1, 2025

Inventor: Michael Robert Rinehart (Naperville, IL)

Assignee: Rapid7, Inc.

H04L63/108H04L9/0891H04L63/102H04L63/1491H04L67/133

Abstract

Claims (65)

1. A computer-implemented method, comprising:

determining that (a) an existing credential associated with a web application will expire and (b) the existing credential has been compromised prior to being renewed, and in response:

sending, to the web application, a credential renewal request for a new credential to replace an existing credential, wherein the credential renewal request is submitted via a request interface of the web application and obfuscates an identity of the existing credential to prevent correlation of the new credential to the existing credential;

receiving the new credential from the web application;

storing the new credential to use to access the web application; and

adjusting an expiration period of the existing credential to cause the existing credential to expire immediately.

2. The computer-implemented method of claim 1 , wherein

the web application is a cloud-based service accessible over a public network.

3. The computer-implemented method of claim 1 , wherein

the credential renewal request is a Hypertext Transfer Protocol (HTTP) request, and the new credential is received in an HTTP response.

4. The computer-implemented method of claim 1 , wherein

the new credential is received via a webhook associated with the web application.

5. The computer-implemented method of claim 1 , wherein

the credential renewal request is sent via an application programming interface (API) of the web application, and the new credential is received via the API.

6. The computer-implemented method of claim 1 , wherein

the method is performed by a credential management server configured to store credentials for a plurality of applications, and

the credential management server is configured to receive notifications from one or more of the applications indicating credentials that will expire.

7. The computer-implemented method of claim 1 , wherein

the web application implements a developer lab environment, and the existing credential and the new credential are associated with a developer account of the developer lab environment.

8. The computer-implemented method of claim 1 , wherein

obfuscating the identity of the existing credential comprises:

sending multiple credential renewal requests to the web application; and

selecting one of multiple new credentials received from the web application to replace the existing credential.

9. The computer-implemented method of claim 1 , further comprising:

prior to the expiration of the existing credential:

generating a honeypot associated with the web application; and

causing network traffic sent to the web application using the existing credential to be redirected to the honeypot for remainder of the expiration period.

10. The computer-implemented method of claim 9 , further comprising:

causing access to be permitted to the web application only after the new credential has been received within the adjusted expiration period.

11. A system comprising:

one or more processors; and

a memory coupled to the one or more processors, wherein the memory stores program instructions executable by the one or more processors to:

determine that (a) an existing credential associated with a web application will expire and (b) the existing credential has been compromised prior to being renewed, and in response:

send, to the web application, a credential renewal request for a new credential to replace an existing credential, wherein the credential renewal request is submitted via a request interface of the web application and obfuscates an identity of the existing credential to prevent correlation of the new credential to the existing credential;

receive the new credential from the web application;

store the new credential to use to access the web application; and

adjust an expiration period of the existing credential to cause the existing credential to expire immediately.

12. The system of claim 11 , wherein

the web application is a cloud-based service accessible over a public network.

13. The system of claim 11 , wherein

the credential renewal request is a Hypertext Transfer Protocol (HTTP) request, and the new credential is received in an HTTP response.

14. The system of claim 11 , wherein

the new credential is received via a webhook associated with the web application.

15. The system of claim 11 , wherein

the credential renewal request is sent via an application programming interface (API) of the web application, and the new credential is received via the API.

16. The system of claim 11 , wherein

the one or more processors and the memory implement a credential management server configured to store credentials for a plurality of applications, and

the credential management server is configured to receive notifications from one or more of the applications indicating credentials that will expire.

17. The system of claim 11 , wherein

the web application implements a developer lab environment, and the existing credential and the new credential are associated with a developer account of the developer lab environment.

18. The system of claim 11 , wherein

to obfuscate the identity of the existing credential, the program instructions are executable by the one or more processors to:

send multiple credential renewal requests to the web application; and

select one of multiple new credentials received from the web application to replace the existing credential.

19. The system of claim 11 , wherein

the program instructions are executable by the one or more processors to:

prior to the expiration of the existing credential:

generate a honeypot associated with the web application; and

cause network traffic sent to the web application using the existing credential to be redirected to the honeypot for remainder of the expiration period.

20. A non-transitory computer readable storage medium comprising program instructions executable to:

determine that (a) an existing credential associated with a web application will expire and (b) the existing credential has been compromised prior to being renewed, and in response:

send, to the web application, a credential renewal request for a new credential to replace an existing credential, wherein the credential renewal request is submitted via a request interface of the web application and obfuscates an identity of the existing credential to prevent correlation of the new credential to the existing credential;

receive the new credential from the web application;

store the new credential to use to access the web application; and

adjust an expiration period of the existing credential to cause the existing credential to expire immediately.

Assignments (2)

Continuity (2)

References Cited (13)