Microservices Admin Key Segmentation for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Microservices face security risks due to the perpetual storage of admin credentials in unsecure internal memory, making them vulnerable to unauthorized administrative access.
Innovation Solution
A method and system that generate and partition admin keys into multiple portions, with secure storage and temporary use to perform administrative operations, ensuring that sensitive data is not stored in unsecure locations for extended periods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If microservice stores admin credentials in internal memory for continuous access, then administrative operations can be performed continuously, but security risk increases due to perpetual storage of sensitive data in unsecure location
Solution Approach 1:
The admin key is divided into multiple portions (first portion and second portion) that are stored separately in secure storage. To perform an administrative operation, the portions are temporarily recombined in memory only when needed, then discarded after use. This segmentation prevents the complete admin key from being stored continuously in unsecure locations.
Solution Approach 2:
Instead of continuously storing admin credentials in memory, the system periodically reconstructs the admin key only when an administrative operation is required. The key is assembled from stored portions, used immediately for the operation, then discarded. This periodic reconstruction eliminates perpetual storage of sensitive data in unsecure memory.
2Object-affected harmful factors
If microservice uses unprivileged user account, then security is improved by reducing attack surface, but ability to perform administrative operations is lost
Solution Approach 1:
The system dynamically changes the privilege level of the microservice account. The microservice runs as an unprivileged user account under normal conditions for security. When an administrative operation is needed, the system temporarily elevates privileges by reconstructing the admin key in memory, performs the operation, then returns to unprivileged state. This dynamic privilege management allows the system to maintain security while enabling administrative capabilities when required.
Data Source
AI summary
System and method of providing administrative access to an endpoint server. In one example, the method includes receiving, at an admin server, a request for performing an admin operation on the endpoint server and a first portion of an admin key from a microservice server. The method also includes receiving, at the admin server, a second portion of the admin key. The method further includes generating, at the admin server, a copy of the admin key based at least in part on the first portion and the second portion of the admin key. The method also includes performing, via the admin server, the admin operation on the endpoint server using the copy of the admin key. The method further includes deleting the copy of the admin key on the admin server after performing the admin operation on the endpoint server.