Job Scheduler Credential Migration Using Transfer-Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
WorkLoad Automation (WLA) systems face challenges in securely managing and transferring sensitive data, such as credentials and other information, across different environments due to the need for varying security requirements and the risk of exposing sensitive information during job transfers.
Innovation Solution
A method and system for securely transferring objects between job scheduler instances using encryption keys, where a first instance encrypts credentials with a first key, decrypts and re-encrypts them with a transfer encryption key for secure transfer to a second instance, ensuring that sensitive data remains protected during transit.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If credentials are transferred in plain text between job scheduler instances, then the transfer process is simple and fast, but security is compromised and sensitive data is exposed
Solution Approach 1:
The patent introduces an intermediary encryption mechanism that acts as a mediator between the source and destination job scheduler instances. The credentials are encrypted using a transfer encryption key before transmission and decrypted only at the destination, preventing direct exposure of sensitive data during transfer while maintaining automated transfer capability
Solution Approach 2:
The patent changes the state of credentials from plain text to encrypted form during transfer. The encryption key management system handles the transformation of credentials between different encryption states (stored encrypted, transferred encrypted, decrypted at destination), allowing secure transfer without manual intervention
2Productivity
If manual credential changes are performed during job transfers, then security can be maintained, but time consumption increases and efficiency decreases
Solution Approach 1:
The patent implements self-service automation where the job scheduler automatically handles the entire credential transfer process. The system self-manages encryption, transmission, and decryption of credentials without requiring manual intervention from administrators, enabling automated job transfers between development, test, and production environments
Solution Approach 2:
The patent performs preliminary encryption of credentials before transfer using a transfer encryption key. This preliminary action ensures that credentials are already secured in transit and eliminates the need for manual credential updates at the destination, as the encrypted credentials are automatically decrypted and applied
3Reliability
If credentials are stored in plain text in data storage, then access and retrieval are fast, but security is compromised and data exposure risk increases
Solution Approach 1:
The patent introduces encryption as an intermediary layer between the stored credentials and the accessing systems. Credentials are stored in encrypted form in data storage and automatically decrypted only when needed for job execution, maintaining both security and operational ease through automated key management
Data Source
AI summary
A workload automation (WLA) system and method operates a job scheduler to automate jobs, that each specify one or more tasks to be performed by corresponding software programs, within and across computer systems. The job scheduler enables secure transfer of a job that includes sensitive information from a first instance of the job scheduler to a second instance by decrypting each encrypted item of sensitive information for transfer to the second instance and encrypting each such item with a transfer key which is used by the second instance to decrypt the transferred sensitive items and to then re-encrypt such sensitive items with a different key for storage and usage by the second instance.