Credential vault encryption

Abstract

Application role mappings can be maintained at a reverse proxy server. When a request for a web application is received at the reverse proxy servers, the proper user role for the web application can be determined at the reverse proxy server. The proper user role can be sent as part of a HTTP header to the web application. The web application can use the user role without doing an independent mapping of the user to a role.

Description

CLAIM OF PRIORITY[0001]This application claims priority to U.S. Provisional Application No. 60 / 826,633 entitled “Runner Security” by Pandrangi et al., filed Sep. 22, 2006 which is hereby incorporated by reference [Atty. Docket No. BEAS-02041US0] and to U.S. Provisional Application No. 60 / 883,398 entitled “Runner” by Hayler et al., filed Jan. 4, 2007 which is hereby incorporated by reference [Atty. Docket No. BEAS-02042US0].COPYRIGHT NOTICE[0002]A portion of the disclosure of this patent document contains material which is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent file or records, but otherwise reserves all copyright rights whatsoever.BACKGROUND OF INVENTION[0003]Web applications have become increasingly popular within the enterprise as a result of their flexibility of deployment and their relatively intuitive int...

AI Technical Summary

Benefits of technology

The patent text describes a system for controlling passwords in a reverse proxy system. The system uses a credential vault to store secondary passwords for applications accessed through the reverse proxy. These secondary passwords are encrypted with a primary password for a single sign on system. The primary password can be used to decrypt the secondary passwords and provide them to the application. The technical effect of this system is to ensure the security of the secondary passwords and to provide a centralized governance for the reverse proxy.

Problems solved by technology

Web applications have become increasingly popular within the enterprise as a result of their flexibility of deployment and their relatively intuitive interfaces, but web applications present potential problems in the enterprise environment due to security and governance issues.

Images