Securing Delegated Remote Management with Digital Signature

A system of script execution, the system comprising:

• a memory;
• one or more processors, in communication with the memory;
• a plurality of user accounts, including at least a service user account and a real user account, in communication with the one or more processors;
• a remote system, in communication with the one or more processors;
• a remote execution tool, configured to execute on the one or more processors;
• and
• a management system, including a service user account module, configured to execute on the one or more processors, to:
• receive, by the service user account module, a user script from the service user account;
• issue execution data, wherein the execution data includes:
• the user script;
• and
• a plurality of validation parameters;
• sign the execution data with a private key, such that responsive to signing the execution data, the execution data further includes a digital signature;
• authorize communication to the remote execution tool, wherein authorization requires the digital signature;
• and
• send, to the remote execution tool, the execution data including the digital signature;
• wherein the remote execution tool:
• confirms the plurality of validation parameters;
• and
• responsive to confirming the plurality of validation parameters, executes the user script on the remote system as the service user account.

A computer-readable non-transitory storage medium comprising executable instructions that, when executed, are configured to cause a management system to:

• receive, by a service user account module, a user script from a service user account;
• issue execution data, wherein the execution data includes:
• the user script;
• and
• a plurality of validation parameters;
• sign the execution data with a private key, such that responsive to signing the execution data, the execution data further includes a digital signature;
• authorize communication to a remote execution tool, wherein authorization requires the digital signature;
• and
• send, to the remote execution tool, the execution data including the digital signature;
• wherein the remote execution tool:
• confirms the plurality of validation parameters;
• and
• responsive to confirming the plurality of validation parameters, executes the user script on the remote system as the service user account.