Back to results
US 2010/0161965 A1Published application
Secure Credential Store
AssigneeBladeLogic, Inc.
InventorsDavid Allen Solin, Richard Guoyu Liao
Life of this patent
Estimating the term…
Abstract
A credential store provides for secure storage of credentials. A credential stored in the credential store is encrypted with the public key of a user owning the credential. A first user may provide a credential owned by the first user to a second user. The first user may add credentials owned by the first user to the credential store. An administrator may manage users of the credential store without having the ability to provide credentials to those users.
Claims21
A method, comprising:
- inserting a first credential in a credential store of a credential server computer, wherein the first credential is encrypted with a public key corresponding to a first user of the credential store;
- providing the first credential to a second user as requested by the first user, comprising:
- retrieving the first credential;
- decrypting the first credential with a private key of the first user;
- encrypting the decrypted first credential with a public key of the second user;
- and
- making the encrypted credential available to the second user from the credential store.
4 more elements
A networked computer system comprising:
- a first computer;
- a second computer;
- and
- a credential store computer, comprising:
- a processor;
- a credential store configured to store credentials, coupled to the processor;
- and
- a program store coupled to the processor and configured to store instructions, wherein the instructions cause the processor to perform acts comprising:
- retrieving an encrypted credential from the credential store on behalf of a first user of the first computer;
- decrypting the encrypted credential;
- using the decrypted credential to authenticate an action on the second computer on behalf of the first user;
- inserting a first credential in the credential store, wherein the first credential is encrypted with a public key corresponding to the first user;
- and
- providing the first credential to a second user as requested by the first user, comprising:
- retrieving the first credential;
- decrypting the first credential with a private key of the first user;
- encrypting the decrypted first credential with a public key of the second user;
- and
- making the encrypted credential available to the second user.
16 more elements
A method comprising:
- inserting a credential in a credential store of a credential server computer, wherein the credential is encrypted with a public key corresponding to a first user of the credential store;
- receiving an instruction to provide the credential;
- decrypting the first credential with a private key of the first user;
- encrypting the first credential with a single-use key;
- storing the single-use key-encrypted credential at a location;
- making the single use key-encrypted credential available at the location during a time window;
- and
- removing the single use key-encrypted credential from the location upon expiration of the time window.
5 more elements
Dependencies are inferred from the claim text.