Vault encryption abstraction framework system
A vault encryption abstraction framework computing system provides interface functionality to facilitate integration of client applications with vaulting solutions. The vault encryption abstraction framework manages custom authentication and authorization using the vaulting solution application for one or more client applications such as by periodically rotating or renewing any authentication tokens. The vault encryption abstraction framework includes a scheduler to manage timing requirements and to configure the client application to the schedule by setting the renewed token value to an API endpoint (e.g., a function return) and/or a configuration file for access by one or more client applications. This event triggers the client application to update to the latest token value. The vault encryption abstraction framework then triggers the vaulting solution to create and return the new key. The new key is then returned to the client application. A history of the key generation messages and subsequent status is saved in a data log.
1. A computing device comprising:
a processor; and
non-transitory memory storing instructions that, when executed by a processor, cause the computing device to:
configure, via a configuration file, a scheduler of an abstraction framework via a configuration file;
initiate, based on a scheduling event at a first computing device triggered by the scheduler, an application to communicate a request to update to an electronic security token;
receive, via an application interface by the abstraction framework and from the first computing device, an electronic command from the application to update the electronic security token, wherein the electronic command is in a first format;
trigger, by the abstraction framework and based on the electronic command, generation of the electronic security token by a vault computing device;
receive, via a vault interface and from the vault computing device, a response message comprising the electronic security token, wherein the response message is in a second format; and
send, via the application interface and via a network by the abstraction framework to the first computing device, a second response message comprising the electronic security token, wherein the second response message is in the first format.
2. The computing device of claim 1 wherein the instructions further cause the computing device to send, by the scheduler via the network, the scheduling event to the first computing device.
3. The computing device of claim 2 , wherein the scheduling event is generated by a framework computing device and pushed to the first computing device.
4. The computing device of claim 1 , wherein the first format comprises a configuration file and the second format comprises an application programming interface function.
5. The computing device of claim 1 , wherein the first format comprises a first application programming interface function and the second format comprises a second application interface function, wherein the first application programming interface function is incompatible with a second application programming interface function.
6. The computing device of claim 1 , wherein the instructions further cause the computing device to store, by the abstraction framework, information corresponding to the electronic command received from the application and the response from the vault computing device.
7. A method comprising:
configuring, via a configuration file, a scheduler of a abstraction framework via a configuration file;
initiating, based on a scheduling event at a first computing device triggered by the scheduler, an application to communicate a request to update to an electronic security token;
triggering, by the abstraction framework and based on an electronic command received via an application interface, generation of an update to the electronic security token by a vaulting application, wherein the electronic command is in a first format;
receiving, via a vault interface and from the vaulting application, a response message comprising the electronic security token, wherein the response message is in a second format; and
communicating, via the application interface and via a network by the abstraction framework, a second response message comprising the electronic security token, wherein the second response message is in the first format.
8. The method of claim 7 , comprising:
triggering, based on a scheduling event triggered by a scheduler, an application to request an update to the electronic security token.
9. The method of claim 7 , wherein the first format comprises a configuration file and the second format comprises an application programming interface function.
10. The method of claim 7 , wherein the first format comprises a first application programming interface function and the second format comprises a second application interface function, wherein the first application programming interface function is incompatible with a second application programming interface function.
11. The method of claim 7 , comprising:
storing, by the abstraction framework, information corresponding to the electronic command received from an application and the response from the vaulting application.
12. A system comprising:
a vault computing device processing instructions to provide data vault and encryption services; and
a framework computing device comprising:
a processor; and
non-transitory memory storing instructions that, when executed by a processor, cause the framework computing device to:
configure, via a configuration file, a scheduler of an abstraction framework via a configuration file;
initiate, based on a scheduling event at a first computing device triggered by the scheduler, an application to communicate a request to update to an electronic security token;
trigger, by the abstraction framework and based on an electronic command received from the application to update the electronic security token, generation of the electronic security token by the vault computing device, wherein the electronic command is in a first format;
receive, via a vault interface and from the vault computing device, a response message comprising the electronic security token, wherein the response message is in a second format; and
send, via an application interface and via a network by the abstraction framework to a first computing device, a second response message comprising the electronic security token, wherein the second response message is in the first format.
13. The system of claim 12 , wherein the instructions further cause the framework computing device to:
initiate, based on a scheduling event at the first computing device triggered by a scheduler, the application to communicate a request to update to the electronic security token.
14. The system of claim 12 , wherein the instructions further cause the framework computing device to send, by a scheduler via the network, a scheduling event to the first computing device.
15. The system of claim 14 , wherein the scheduling event is generated by the framework computing device and pushed to the first computing device.
16. The system of claim 12 , wherein the first format comprises a configuration file and the second format comprises an application programming interface function.
17. The system of claim 12 , wherein the first format comprises a first application programming interface function and the second format comprises a second application interface function, wherein the first application programming interface function is incompatible with a second application programming interface function.
18. The system of claim 12 , wherein the instructions further cause the framework computing device to store, by the abstraction framework, information corresponding to the electronic command received from the application and the response from the vault computing device.
19. The system of claim 12 , wherein the instructions further cause the framework computing device to configure, via a configuration file, a scheduler of the abstraction framework via a configuration file.