Secure Store Configuration Tool for Encrypted Connection Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional systems storing connection information as plain text in file systems are vulnerable to security breaches, as this information can be accessed by unauthorized users and communicated over networks, posing security risks.

Innovation Solution

A configuration tool is developed to administer a secure store file, using a front-end layer to display properties and receive input to set values in a data layer, employing secure store agents to manage encrypted information, and organizing data into key-value pairs for secure storage and retrieval.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If connection information is stored as plain text in a file system, then access and modification is simple and direct, but security is compromised as unauthorized users can access and comprehend the information

Engineering Contradiction:

Improveaccess and modification of connection informationVSAvoidsecurity vulnerability to unauthorized access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent transforms connection information from plain text format to encrypted format, changing the parameter of data representation. This encryption process makes the information incomprehensible to unauthorized users while maintaining secure access through decryption capabilities, directly resolving the security vulnerability without completely sacrificing accessibility.

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent introduces a secure store file and encryption/decryption mechanisms as intermediaries between the connection information and users. These intermediaries control access by requiring proper authentication and decryption keys, allowing legitimate users to access information while blocking unauthorized access, thus resolving the security-ease of operation contradiction.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If connection information is communicated over a network, then remote access is enabled, but security risks increase due to network vulnerabilities

Engineering Contradiction:

Improveremote access capabilityVSAvoidnetwork security vulnerability

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent encrypts connection information before network transmission, changing the data parameter from readable text to encrypted format. This ensures that even if data is intercepted during network communication, it remains secure and incomprehensible to unauthorized parties, maintaining remote access capability while mitigating network security risks.

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent uses secure store agents and encryption mechanisms as intermediaries that control and protect information during network communication. These intermediaries ensure that connection information is transmitted securely and only accessible to authenticated users, resolving the contradiction between remote access versatility and network security vulnerabilities.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS7707504B2Offline configuration tool for secure store administration

Publication Date: 2010.04.27 SAP SE

AI summary

A system and method are provided for a configuration tool to administer a secure store file. In an embodiment, a front-end layer of the configuration tool displays a visual representation of one or more properties stored in a secure store file. The configuration tool may receive input identifying one of the displayed properties. In an embodiment, the configuration tool uses a logical task to set a value for the selected property in a data layer of the configuration tool.