会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 6. 发明授权
    • Automated management of system credentials
    • 自动管理系统凭据
    • US08539562B2
    • 2013-09-17
    • US12963834
    • 2010-12-09
    • Christian BolikNeeta GarimellaZhiguo HuangErick C. KisselJayashree Ramanathan
    • Christian BolikNeeta GarimellaZhiguo HuangErick C. KisselJayashree Ramanathan
    • H04L9/00
    • G06F21/41H04L9/0891
    • One disclosed aspect of the present invention includes authentication and user account automation within a compute cluster for each cluster node that requires password or other credential administration. For example, a storage appliance computing system may rely on a plurality of subsystems (such as databases, storage management software, and application servers) that each have internal user accounts with associated passwords and credential keys that need to be changed at frequent intervals. Rather than requiring an administrator to manually manage all of these accounts, the presently described invention includes techniques and an authentication manager component to automatically manage, update, and refresh authentication information as required. Further, the authentication manager component may be used to perform and propagate automatic credential changes such as new sets of SSH keys or updated passwords as required within a computing system, and respond to new nodes or out-of-sync credentialing scenarios.
    • 本发明的一个公开的方面包括需要密码或其他凭证管理的每个集群节点的计算集群内的认证和用户帐户自动化。 例如,存储设备计算系统可以依赖于多个子系统(诸如数据库,存储管理软件和应用服务器),每个子系统具有内部用户帐户,其具有需要以频繁间隔改变的相关密码和凭证密钥。 目前描述的发明不是要求管理员手动管理所有这些帐户,而是包括根据需要自动管理,更新和刷新认证信息的技术和认证管理器组件。 此外,认证管理器组件可以用于在计算系统内根据需要执行和传播自动凭证更改,例如新的SSH密钥集或更新的密码,并响应新节点或不同步的认证情景。
    • 7. 发明授权
    • Identity based auditing in a multi-product environment
    • 在多产品环境中进行基于身份的审核
    • US09460277B2
    • 2016-10-04
    • US12960866
    • 2010-12-06
    • Christian BolikNeeta GarimellaJayashree RamanathanMarkus RohwedderZhiguo Huang
    • Christian BolikNeeta GarimellaJayashree RamanathanMarkus RohwedderZhiguo Huang
    • G06F21/00G06F21/31
    • G06F21/31G06F2221/2101
    • An identity of a user performing an operation with respect to an application is propagated, from a point at which the user authenticates, to one or more other applications in a multi-product environment. The application may be a management console associated with an information cluster. In an embodiment, an administrator logs on to a management console (using an identity) and invokes a management operation. The management console then performs a programmatic remote access login (e.g., using SSH/RXA) to one or more nodes using a system account, invokes an application, and passes in the identity. As the application performs one or more management operations, audit events are logged, and these events each contain the identity that has been passed in by the management console during the SSH/RXA login. The technique thus provides a method for identity-based auditing in an environment having a plurality of applications, where each application typically has a respective authentication process or mechanism and distinct identity registries.
    • 执行相对于应用的操作的用户的身份从用户认证的点传播到多产品环境中的一个或多个其他应用。 该应用可以是与信息集群相关联的管理控制台。 在一个实施例中,管理员登录到管理控制台(使用身份)并且调用管理操作。 然后,管理控制台使用系统帐户执行到一个或多个节点的编程远程访问登录(例如,使用SSH / RXA),调用应用程序并传入身份。 当应用程序执行一个或多个管理操作时,将记录审核事件,并且这些事件每个都包含管理控制台在SSH / RXA登录期间传递的身份。 因此,该技术提供了在具有多个应用的​​环境中的基于身份的审计的方法,其中每个应用通常具有相应的认证过程或机制和不同的身份注册表。
    • 8. 发明申请
    • Identity based auditing in a multi-product environment
    • 在多产品环境中进行基于身份的审核
    • US20120144453A1
    • 2012-06-07
    • US12960866
    • 2010-12-06
    • Christian BolikNeeta GarimellaJayashree RamanathanMarkus RohwedderZhiguo Huang
    • Christian BolikNeeta GarimellaJayashree RamanathanMarkus RohwedderZhiguo Huang
    • G06F21/22
    • G06F21/31G06F2221/2101
    • An identity of a user performing an operation with respect to an application is propagated, from a point at which the user authenticates, to one or more other applications in a multi-product environment. The application may be a management console associated with an information cluster. In an embodiment, an administrator logs on to a management console (using an identity) and invokes a management operation. The management console then performs a programmatic remote access login (e.g., using SSH/RXA) to one or more nodes using a system account, invokes an application, and passes in the identity. As the application performs one or more management operations, audit events are logged, and these events each contain the identity that has been passed in by the management console during the SSH/RXA login. The technique thus provides a method for identity-based auditing in an environment having a plurality of applications, where each application typically has a respective authentication process or mechanism and distinct identity registries.
    • 执行相对于应用的操作的用户的身份从用户认证的点传播到多产品环境中的一个或多个其他应用。 该应用可以是与信息集群相关联的管理控制台。 在一个实施例中,管理员登录到管理控制台(使用身份)并且调用管理操作。 然后,管理控制台使用系统帐户执行到一个或多个节点的编程远程访问登录(例如,使用SSH / RXA),调用应用程序并传入身份。 当应用程序执行一个或多个管理操作时,将记录审核事件,并且这些事件每个都包含管理控制台在SSH / RXA登录期间传递的身份。 因此,该技术提供了在具有多个应用的​​环境中的基于身份的审计的方法,其中每个应用通常具有相应的认证过程或机制和不同的身份注册表。
    • 9. 发明申请
    • AUTOMATED MANAGEMENT OF SYSTEM CREDENTIALS
    • 系统认证自动化管理
    • US20120151563A1
    • 2012-06-14
    • US12963834
    • 2010-12-09
    • Christian BolikNeeta GarimellaZhiguo HuangErick C. KisselJayashree Ramanathan
    • Christian BolikNeeta GarimellaZhiguo HuangErick C. KisselJayashree Ramanathan
    • G06F21/00H04L9/00
    • G06F21/41H04L9/0891
    • One disclosed aspect of the present invention includes authentication and user account automation within a compute cluster for each cluster node that requires password or other credential administration. For example, a storage appliance computing system may rely on a plurality of subsystems (such as databases, storage management software, and application servers) that each have internal user accounts with associated passwords and credential keys that need to be changed at frequent intervals. Rather than requiring an administrator to manually manage all of these accounts, the presently described invention includes techniques and an authentication manager component to automatically manage, update, and refresh authentication information as required. Further, the authentication manager component may be used to perform and propagate automatic credential changes such as new sets of SSH keys or updated passwords as required within a computing system, and respond to new nodes or out-of-sync credentialing scenarios.
    • 本发明的一个公开的方面包括需要密码或其他凭证管理的每个集群节点的计算集群内的认证和用户帐户自动化。 例如,存储设备计算系统可以依赖于多个子系统(诸如数据库,存储管理软件和应用服务器),每个子系统具有内部用户帐户,其具有需要以频繁间隔改变的相关密码和凭证密钥。 目前描述的发明不是要求管理员手动管理所有这些帐户,而是包括根据需要自动管理,更新和刷新认证信息的技术和认证管理器组件。 此外,认证管理器组件可以用于在计算系统内根据需要执行和传播自动凭证更改,例如新的SSH密钥集或更新的密码,并响应新节点或不同步的认证情景。