Apparatus and method for obtaining up-to-date security credentials

A system for maintaining access to correct security credentials, the system comprising:

• a credentials database that includes a first credentials locker with a first path defining the location of the first locker, and a second credentials locker, wherein the first credentials locker and the second credentials locker are separate from each other, each of the first credentials locker and the second credentials locker having controlled access;
• a control circuit that executes a credentials control program;
• an application program that is executed by the control circuit, the application program being a computer program that has direct interaction with a user;
• a first service program and a second service program being executed by the control circuit, the first service program and the second service program not having direct interaction with the user and being executed as background tasks;
• wherein the application program calls the first service program, the first service program calls the second service program, the first service program using security credentials to request and obtain data from the second service program, wherein the second service program, upon presentation of correct security credentials from the first service program, grants the first service program access to the data, wherein the security credentials are one or more of a code, key, token, or password;
• wherein the application program requests and the credentials control program creates a one-time authentication code, and wherein the application program stores the one-time authentication code and the credentials in the first credentials locker;
• wherein the application program requests and the credentials control program creates a two-time authentication code;
• wherein the application program uses the two-time authentication code to write the first path and the one-time authentication code to the second credentials locker;
• wherein application program passes the second path and the two-time authentication code to the first service program, and wherein the first service program uses the two-time authentication code to obtain the first path and the one-time authentication code from the first credentials locker;
• wherein the first service program subsequently uses the one-time authentication code to request permission from the credentials control program to permanently access the first credentials locker and obtains the credentials, such that as the credentials change, the first service program will always have access to the first credentials locker and be able to obtain the current credentials in the first credentials locker.