Cloud Credential Management via API Plugins for Partitioned Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud computing systems struggle to manage and secure numerous sets of security credentials across diverse networks with different access protocols, requiring individual governance and management, and biometric authentication is not feasible for all sets of credentials.
Innovation Solution
A system using an abstraction layer with dynamically-selected API plugins to generate requests compatible with various access protocols, enabling centralized management and monitoring of security credentials across partitioned network structures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is used to secure credentials, then security is improved, but feasibility across all credential sets deteriorates due to device variability
Solution Approach 1:
The patent introduces a credential management service as an intermediary between users and cloud resources. This service centrally stores and manages credentials, acting as a mediator that eliminates the need for biometric authentication on every device while maintaining security. The intermediary handles credential distribution, rotation, and access control across diverse devices and networks.
Solution Approach 2:
The patent extracts credentials from individual devices and centralizes them in a dedicated credential management service. By taking credentials out of the device ecosystem and storing them centrally, the system eliminates device-specific biometric requirements while maintaining secure access control across all devices.
2Reliability
If individual governance is applied to each credential set, then security control is improved, but management complexity deteriorates
Solution Approach 1:
The patent merges individual credential management into a unified credential management service. Instead of governing each credential set separately across multiple devices, the system combines all credential management functions into a single centralized service that handles multiple credentials through standardized processes, reducing management complexity while maintaining security control.
Solution Approach 2:
The credential management service provides universal functionality for managing all credentials across the organization. A single service handles credential storage, distribution, rotation, and access control for diverse cloud resources, eliminating the need for separate governance mechanisms for each credential set.
3Productivity
If centralized management is implemented across diverse networks, then operational efficiency is improved, but compatibility with different access protocols deteriorates
Solution Approach 1:
The patent employs parameter changes by dynamically adjusting access protocol parameters based on the target cloud resource. The credential management service modifies request parameters, authentication methods, and communication protocols to match the requirements of different cloud providers while maintaining centralized management and operational efficiency.
Data Source
AI summary
Systems and methods generate requests for encrypted (e.g., secured) credentials and data using one of a plurality of API plugins that are selected based on an access protocol for a network partition at which requested data is determined to be stored. Through the use of the dynamically-selected API plugins, the systems and methods may provide the aforementioned functions while being compatible with the different access protocols that may be encountered when providing central management across a diverse spectrum of user accounts, networks, and/or cloud platforms.