Transient Key Generation for Automated Application Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for automating password management in application-to-application contexts are inadequate, as they often require modifications to target computer applications, lack protection for connection and authentication data, and introduce administrative complexity, particularly when authentication keys need to be changed or updated.
Innovation Solution
A process that generates a transient cryptographic key based on invariant environmental information, encrypts and decrypts authentication data, and uses fingerprints to securely access computer resources without human intervention, with features like obfuscation and caching to enhance security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If plain text identification information is included in configuration files and scripts to automate communication, then automation is improved, but security deteriorates due to static passwords being easily compromised
Solution Approach 1:
The patent transforms static passwords into dynamic credentials by implementing a credential management system that generates, stores, and rotates authentication data automatically. The system uses cryptographic key pairs where credentials can be dynamically updated without requiring application code changes, thus maintaining automation while improving security through dynamic credential rotation.
Solution Approach 2:
The patent introduces a credential management system as an intermediary between applications and secured resources. This mediator handles credential storage, rotation, and distribution automatically, eliminating the need for applications to manage their own credentials directly. The system uses a credential store and management service that mediates authentication requests, providing both automation and security.
2Adaptability or versatility
If tokens with chain data are used to pass security information between applications, then platform independence is improved, but device complexity increases due to token management requirements
Solution Approach 1:
The patent implements a universal credential management system that works across multiple platforms and application types. The credential store and management service provide a common interface for different applications (Java, .NET, PHP, etc.) to access secured resources without platform-specific implementations. This universal approach simplifies complexity by providing a single management mechanism for diverse environments.
Solution Approach 2:
The patent extracts credential management functionality from individual applications and centralizes it in a separate credential management system. By taking out the complex token and credential management logic from applications and placing it in a dedicated external system, the patent reduces application complexity while maintaining platform independence through the universal credential interface.
3Reliability
If authentication keys are changed or updated in hosted applications, then security is improved, but administrative complexity increases due to modification requirements
Solution Approach 1:
The patent implements self-service credential rotation where the credential management system automatically handles key updates without requiring administrative intervention or application modifications. The system monitors credential expiration, generates new credentials, and updates the credential store automatically. This self-service mechanism improves security through regular key rotation while eliminating administrative complexity.
Solution Approach 2:
The patent performs preliminary credential rotation by updating authentication keys before they expire or become compromised. The credential management system proactively generates and installs new credentials in advance, ensuring continuous security without requiring reactive administrative actions. This preliminary action approach maintains security while reducing administrative burden by automating the timing and execution of key updates.
Data Source
AI summary
A method for accessing a secure computer resource by a computer application having no human-machine interaction for inputting authentication information comprises: a) a first initialization step comprising the creation of a temporary cryptographic key consisting of applying a cryptographic process to a plurality of information that is invariant over time and of encrypting, using the thus calculated key, authentication data of an account authorized to access a vault with passwords and b) steps for automatic access by the application to the secure computer resource consisting of creating a temporary cryptographic key consisting of applying a cryptographic process to the plurality of information that is invariant over time, reading the credentials file created during the initialization step and decrypting the credentials file with the temporary cryptographic key calculated in the preceding step, then transferring, to the calling application, the data coming from the computer resource.