IP Library › Granted Patent US 12,475,200
Granted Patent B2
US 12,475,200 · App. 17/929,055 · Granted Nov 18, 2025

Account credential reset and reconciliation

Inventors: Lokajit Tikayatray (Bangalore, IN); David John Linsey (Marietta, GA); Gireesh P (Kollam, IN); Saumya Jain (Jaipur, IN)
Assignee: Dell Products L.P.
G06F21/31
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,475,200
App. No.
17/929,055
Filed
Sep 1, 2022
Granted
Nov 18, 2025
Kind
B2
Examiner
KIM, HEE SOO
Art Unit
2443
USPC
726/6
Abstract

An example methodology includes, by a computing device, determining that a reset of credentials associated with one or more service accounts is to be performed. The method also includes, by the computing device, responsive to a determination that the reset of the credentials is to be performed, shutting down instances of applications in which the one or more service accounts are used and resetting the credentials associated with the one or more service accounts, wherein resetting the credentials updates current credentials associated with the one or more service accounts to new credentials. The method further includes, by the computing device, propagating the new credentials to the applications in which the one or more service accounts are used and starting the instances of the applications in which the one or more service accounts are used, wherein the started instances of the applications use the new credentials.

Claims (49)

1 . A method comprising:

creating, by a computing device, a mapping between service accounts and applications in which the service accounts are used;

determining, by the computing device, that a reset of credentials associated with one or more service accounts is to be performed; and

responsive to a determination that the reset of the credentials associated with the one or more service accounts is to be performed, by the computing device:

determining one or more applications in which the service accounts are used based on the mapping;

marking down at least one of: one or more of instances of load balancers being utilized by instances of the applications in which the one or more service accounts are used, network addresses of servers hosting the instances of the applications, or network routes to the instances of the applications to ensure that network traffic is not sent to the instances of the applications when the instances of the applications are shut down when resetting the credentials associated with the one or more service accounts;

shutting down the instances of the applications;

resetting the credentials associated with the one or more service accounts, wherein resetting the credentials updates current credentials associated with the one or more service accounts to new credentials;

storing the new credentials within an application vault; and

starting the instances of the applications in which the one or more service accounts are used, wherein starting the instances of the applications includes retrieving, by the instances of the applications, their service accounts and the new credentials associated with the service accounts from the application vault, wherein the started instances of the applications use the new credentials.

2 . The method of claim 1 , further comprising, responsive to the determination that the reset of the credentials associated with the one or more service accounts is to be performed, determining that necessary approvals to perform the reset of the credentials is obtained.

3 . The method of claim 1 , wherein the marking down includes marking down the one or more of instances of load balancers being utilized by instances of the applications.

4 . The method of claim 1 , wherein resetting the credentials associated with the one or more service accounts includes utilizing an enterprise vault to reset the credentials.

5 . The method of claim 1 , wherein starting the instances of the applications includes:

connecting, by the instances of the applications, to a configuration service; and

retrieving, by the instances of the applications, their service accounts and the new credentials associated with the service accounts from the configuration service.

6 . The method of claim 1 , further comprising smoke testing the started instances of the applications.

7 . The method of claim 1 , further comprising, responsive to successfully smoke testing the started instances of the applications, marking up one or more of instances of load balancers being utilized by the instances of the applications, network addresses of servers hosting the instances of the applications, or network routes to the instances of the applications.

8 . A computing device comprising:

one or more non-transitory machine-readable mediums configured to store instructions; and

one or more processors configured to execute the instructions stored on the one or more non-transitory machine-readable mediums, wherein execution of the instructions causes the one or more processors to carry out a process comprising:

create a mapping between service accounts and applications in which the service accounts are used;

determining that a reset of credentials associated with one or more service accounts is to be performed; and

responsive to a determination that the reset of the credentials associated with the one or more service accounts is to be performed:

determining one or more applications in which the service accounts are used based on the mapping;

marking down at least one of: one or more of instances of load balancers being utilized by instances of the applications in which the one or more service accounts are used, network addresses of servers hosting the instances of the applications, or network routes to the instances of the applications to ensure that network traffic is not sent to the instances of the applications when the instances of the applications are shut down when resetting the credentials associated with the one or more service accounts;

shutting down the instances of the applications;

resetting the credentials associated with the one or more service accounts, wherein resetting the credentials updates current credentials associated with the one or more service accounts to new credentials;

storing the new credentials within an application vault; and

starting the instances of the applications in which the one or more service accounts are used, wherein starting the instances of the applications includes retrieving, by the instances of the applications, their service accounts and the new credentials associated with the service accounts from the application vault, wherein the started instances of the applications use the new credentials.

9 . The computing device of claim 8 , wherein the process further comprises, responsive to the determination that the reset of the credentials associated with the one or more service accounts is to be performed, determining that necessary approvals to perform the reset of the credentials is obtained.

10 . The computing device of claim 8 , wherein the marking down includes marking down the one or more of instances of load balancers being utilized by instances of the applications.

11 . The computing device of claim 8 , wherein resetting the credentials associated with the one or more service accounts includes utilizing an enterprise vault to reset the credentials.

12 . The computing device of claim 8 , wherein starting the instances of the applications includes:

connecting, by the instances of the applications, to a configuration service; and

retrieving, by the instances of the applications, their service accounts and the new credentials associated with the service accounts from the configuration service.

13 . The computing device of claim 8 , wherein the process further comprises smoke testing the started instances of the applications.

14 . The computing device of claim 8 , wherein the process further comprises, responsive to successfully smoke testing the started instances of the applications, marking up one or more of instances of load balancers being utilized by the instances of the applications, network addresses of servers hosting the instances of the applications, or network routes to the instances of the applications.

15 . A non-transitory machine-readable medium encoding instructions that when executed by one or more processors cause a process to be carried out, the process including:

creating a mapping between service accounts and applications in which the service accounts are used;

determining that a reset of credentials associated with one or more service accounts is to be performed; and

responsive to a determination that the reset of the credentials associated with the one or more service accounts is to be performed:

determining one or more applications in which the service accounts are used based on the mapping;

marking down at least one of: one or more of instances of load balancers being utilized by instances of the applications in which the one or more service accounts are used, network addresses of servers hosting the instances of the applications, or network routes to the instances of the applications to ensure that network traffic is not sent to the instances of the applications when the instances of the applications are shut down when resetting the credentials associated with the one or more service accounts;

shutting down the instances of the applications;

resetting the credentials associated with the one or more service accounts, wherein resetting the credentials updates current credentials associated with the one or more service accounts to new credentials;

storing the new credentials within an application vault; and

starting the instances of the applications in which the one or more service accounts are used, wherein starting the instances of the applications includes retrieving, by the instances of the applications, their service accounts and the new credentials associated with the service accounts from the application vault, wherein the started instances of the applications use the new credentials.

16 . The machine-readable medium of claim 15 , wherein the marking down includes marking down the one or more of instances of load balancers being utilized by instances of the applications.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 14, 2022
From: TIKAYATRAY, LOKAJIT; LINSEY, DAVID JOHN; P, GIREESH; JAIN, SAUMYA
To: DELL PRODUCTS L.P.
Reel/Frame 061092/0795 →
Continuity (1)
Related Publication 20240078296A1 · Mar 7, 2024
References Cited (17)
US 8015596B2 · Wray · 2011 [cited by examiner]
US 9954867B1 · Johansson · 2018 [cited by examiner]
US 10754506B1 · Moyal · 2020 [cited by examiner]
US 20100175115A1 · Choi · 2010 [cited by examiner]
US 20130086658A1 · Kottahachchi · 2013 [cited by examiner]
US 20130167209A1 · McBride · 2013 [cited by examiner]
US 20140237564A1 · Dudziak · 2014 [cited by examiner]
US 20150286816A1 · Adler · 2015 [cited by examiner]
US 20160357955A1 · Kruse · 2016 [cited by examiner]
US 20180241756A1 · Johansson · 2018 [cited by examiner]
US 20200004946A1 · Gilpin · 2020 [cited by examiner]
US 20220086142A1 · Hecht · 2022 [cited by examiner]
US 20220269811A1 · Gummadivalli · 2022 [cited by examiner]
US 20230079608A1 · Chen · 2023 [cited by examiner]
US 20230129951A1 · Do · 2023 [cited by examiner]
US 20230195443A1 · Eberlein · 2023 [cited by examiner]
US 20230334140A1 · Vemula · 2023 [cited by examiner]