# US 11,115,212 B1 · Multi-processing node connection in a data store system via encrypted password

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,115,212 B1
- Document ID: US11115212B1
- Status: Granted
- Kind: B1
- Application number: 15/808,461
- Filed: 2017-11-09
- Granted: 2021-09-07
- Earliest claimed: 2016-11-15
- Assignees: Teradata US, Inc.
- Applicants: Teradata US, Inc.
- Inventors: Alnasir Ladha; Blazimir Radovic; Zhenrong Li; Ehtesham Siddiqui
- Web page: https://patentgrep.com/patent/US11115212B1

## CPC

- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/0815: {providing single-sign-on or federations}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- G06F 21/31: User authentication
- G06F 21/629: {to features or functions of an application}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A system may include a server and a data store system. The server may include at least one storage device and at least one processor. The server may execute an application and may store an encrypted password. The data store system may include at least one persistent storage device configured to store a data store. The data store system may further include a plurality of processing nodes configured to operate on the data store. The data store system may receive the encrypted password from the application with one of the plurality of processing nodes and may decrypt the encrypted password with the one of the plurality of processing nodes. The data store system may authenticate the decrypted password with the one of the processing nodes and provide the decrypted password to other processing nodes. Each processing node that has the decrypted password may be accessible to the application to operate on the data store. A method and computer-readable medium may also be implemented.

## Claims

### Claim 1

A system comprising:
a server comprising at least one storage device and at least one processor, wherein the server is configured to execute an application and the storage device is configured to store an encrypted password;
a data store system independent from the server, wherein the data store system comprises:
at least one persistent storage device configured to store a data store;
a plurality of processing nodes configured to operate on the data store, wherein the data store is configured to:
receive the encrypted password from the application with one of the plurality of processing nodes;
decrypt the encrypted password with the one of the plurality of processing nodes;
authenticate the decrypted password with the one of the processing nodes; and
provide, with the one of the processing nodes, the decrypted password to other processing nodes, wherein each processing node that has the decrypted password is accessible to the application to operate on the data store.

### Claim 2 (depends on 1)

The system of claim 1, wherein the data store system is further configured to:
receive an installation request from the application;
determine if a valid password has been received from the application; and
in response to receipt of the valid password, provide the encrypted password to the server.

### Claim 3 (depends on 2)

The system of claim 2, wherein at least one of the processing nodes of the plurality of processing nodes is configured to, in response to receipt of the installation request, execute a user-defined function to process the installation request.

### Claim 4 (depends on 1)

The system of claim 1, wherein the one of the plurality of processing nodes is configured to provide the decrypted password to the other processing nodes.

### Claim 5 (depends on 1)

The system of claim 1, wherein the one of the plurality of processing nodes is configured to execute an external stored procedure to decrypt the encrypted password.

### Claim 6 (depends on 5)

The system of claim 5, wherein the other processing nodes are configured to execute the external stored procedure to authenticate a received decrypted password.

### Claim 7 (depends on 1)

The system of claim 1, wherein the server is configured to store the encrypted password in the storage device.

### Claim 8

A method comprising
executing an application with a server comprising at least one storage device and at least one processor;
storing, on the storage device, an encrypted password;
receiving, with a data store system, the encrypted password, wherein the data store system is independent from the server, wherein the data store system comprises a plurality of processing nodes and at least one persistent storage device configured to store a data store;
decrypting the encrypted password with the one of the plurality of processing nodes;
authenticating the decrypted password with the one of the processing nodes; and
providing, with the one of the processing nodes, the decrypted password to other processing nodes, wherein each processing node that has the decrypted password is accessible to the application to operate on the data store.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
receiving, with the data store system, an installation request from the server;
determining, with the data store system, if a valid password has been received from the server; and
in response to receipt of the valid password, provide the encrypted password to the server.

### Claim 10 (depends on 9)

The method of claim 9, further comprising, in response to receipt of the installation request, executing, with at least one of the processing nodes of the plurality of processing nodes, a user-defined function to process the installation request.

### Claim 11 (depends on 8)

The method of claim 8, further comprising providing, with the one of the plurality of processing nodes, the decrypted password to the other processing nodes.

### Claim 12 (depends on 8)

The method of claim 8, further comprising executing, with the one of the plurality of processing nodes, an external stored procedure to decrypt the encrypted password.

### Claim 13 (depends on 12)

The method of claim 12, further comprising executing, with the other processing nodes, the external stored procedure to authenticate a received decrypted password.

### Claim 14 (depends on 8)

The method of claim 8, further comprising storing the encrypted password in the storage device of the server.

### Claim 15

A non-transitory computer-readable medium encoded with a plurality of instructions executable by a processor, the plurality of instructions comprising:
instructions to receive, with a data store system, an encrypted password from an application executed on an external server, wherein the application seeks access to a data store of the data store system, wherein the data store system is independent from the external server;
instructions to decrypt the encrypted password with a processing node from a plurality of processing nodes of the data store system;
instructions to authenticate the decrypted password with the processing node; and
instructions to provide, with the processing node, the decrypted password to other processing nodes, wherein each processing node that has the decrypted password is accessible to the application to operate on the data store.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the plurality of instructions further comprises:
instructions to receive, with the data store system, an installation request from the application;
instructions to determine, with the data store system, if a valid password has been received from the server; and
in response to receipt of the valid password, instructions to provide, with the data store system, the encrypted password to the server.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the plurality of instructions further comprises, in response to receipt of the installation request, instructions to execute, with at least one of the processing nodes of the plurality of processing nodes, a user-defined function to process the installation request.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the plurality the plurality of instructions further comprises instructions to provide, with the one of the plurality of processing nodes, the decrypted password to the other processing nodes.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the plurality of instructions further comprises instructions to execute, with the one of the plurality of processing nodes, an external stored procedure to decrypt the encrypted password.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the plurality of instructions further comprises instructions to execute, with the other processing nodes, the external stored procedure to authenticate a received decrypted password.
