Automated SSIS Password Management via Electronic Vault

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for updating passwords in SQL Server Integration Services (SSIS) environments are inefficient and burdensome, requiring significant manual intervention and posing security risks due to the need for manual updates and potential mistyped passwords.

Innovation Solution

A method and system for automatically updating passwords in SSIS databases based on data from an electronic password vault (EPV), which involves identifying credential update triggers, accessing and parsing user credentials, generating new passwords, and storing the updates in the SSIS database, with features like periodic updates and job management to prevent execution errors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual password updates are performed in SSIS environments, then system administrators can maintain user credentials, but the process is inefficient and burdensome requiring significant user intervention

Engineering Contradiction:
Improvepassword update processVSAvoidtime for credential maintenance
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The system enables self-service by automatically updating SSIS credentials using information from the electronic password vault without requiring manual administrator intervention. The automated process retrieves credentials, updates them in the SSIS database, and manages the entire workflow independently.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system performs preliminary actions by pre-storing credential information in an electronic password vault before it is needed. When updates are required, the system retrieves pre-prepared credential data from the vault, eliminating the need for manual credential creation and update processes.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If manual password updates are performed in SSIS environments, then credentials can be changed, but security risks increase due to potential mistyped passwords and individuals having knowledge of passwords

Engineering Contradiction:
Improvecredential securityVSAvoidsecurity risks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system introduces an intermediary electronic password vault that acts as a secure mediator between credential storage and SSIS updates. The vault stores credentials in a protected format and automatically retrieves them, eliminating the need for administrators to manually handle or type sensitive password information, thus reducing security risks.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

By enabling the system to automatically retrieve and apply credentials from the electronic password vault without human intervention, the self-service mechanism eliminates security vulnerabilities associated with manual password handling, such as mistyping or unauthorized knowledge of credentials.

Inventive Principle:
Principle #25Self-service

3Extent of automation

If automated password updates are implemented, then security is enhanced and manual intervention is reduced, but system complexity increases due to integration with electronic password vault

Engineering Contradiction:
Improvepassword update automationVSAvoidsystem architecture
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The system achieves universality by designing the electronic password vault integration to serve multiple functions: storing credentials, managing updates, and interfacing with SSIS. This multi-functional approach consolidates what could be separate complex systems into a unified solution, managing complexity while providing comprehensive automation.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11487865B2Method and system for SSIS password management integration
Publication Date: 2022.11.01 JPMORGAN CHASE BANK NA
  • US11487865B2 patent drawing
  • US11487865B2 patent drawing
  • US11487865B2 patent drawing

AI summary

A method for facilitating credential management in a Structured Query Language (SQL) Server Integration Services (SSIS) environment is provided. The method includes identifying a credential update trigger event; accessing a user credential at an electronic password vault (EPV) in response to the credential update trigger event, the user credential including at least one string; parsing the user credential to identify a username and a password that are associated with the user credential; splitting the user credential into the username and the password; updating the password; and storing the updated password in a SSIS database.