# US 2026/0100944 A1 · Systems and methods for automatically rotating passwords in a multi-server environment

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2026/0100944 A1
- Document ID: US20260100944A1
- Status: Published application
- Kind: A1
- Application number: 18/905,913
- Filed: 2024-10-03
- Published: 2026-04-09
- Earliest claimed: 2024-10-03
- Assignees: Bank of America Corporation
- Applicants: Bank of America Corporation
- Inventors: Daniel Christopher Dunn; Leonard William Burt; Smitha Gudur; Laxminarayana Koutarapu
- Web page: https://patentgrep.com/patent/US20260100944A1

## CPC

- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems, computer program products, and methods are described herein for systems and methods for automatically rotating passwords in a multi-server environment. The present disclosure is configured to identify, from at least one of an external source or an internal source, at least one authentication credential comprising a password rotation requirement associated with at least one server, to transmit, using a temporary credential, a request to an application programming interface (API) to rotate passwords associated with the at least one authentication credential, to receive, from the API, the rotated password associated with the at least one authentication credential, and to update the at least one authentication credential with the rotated password.

## Claims

### Claim 1

A system for automatically rotating password in multi-server environment, the system comprises:
a memory device with computer-readable program code stored thereon;
at least one processing device operatively coupled to the at least one memory device and the at least one communication device, wherein executing the computer-readable code is configured to cause the at least one processing device to:
identify, from at least one of an external source or an internal source, at least one authentication credential comprising a password rotation requirement associated with at least one server;
transmit, using a temporary credential, a request to an application programming interface (API) to rotate passwords associated with the at least one authentication credential;
receive, from the API, the rotated password associated with the at least one authentication credential; and
update the at least one authentication credential with the rotated password.

### Claim 2 (depends on 1)

The system of claim 1, wherein executing the computer-readable code is configured to cause the at least one processing device to:
store the at least one authentication credential comprising the password rotation requirement in at least one data storage.

### Claim 3 (depends on 1)

The system of claim 1, wherein the external source is a data storage component or an API metadata from the API, or the internal source comprises a server metadata associated with the at least one server.

### Claim 4 (depends on 1)

The system of claim 1, wherein the temporary credential is a token, and wherein the token comprises an automatic expiration at a pre-defined threshold time.

### Claim 5 (depends on 1)

The system of claim 1, wherein the at least one authentication credential is associated with at least one of: a standalone server authentication credential, a Virtual Network Name (VNN) authentication credential that has access to an Always-On-Always-Available Group (AOAG), a report authentication credential in a Structured Query Language (SQL) Server Reporting Services (SSRS) server, a package authentication credential in a SQL Server Integration Services (SSIS) server, a package configuration authentication credential in SSIS server, a multi-dimensional cube authentication credential in a SQL Server Analysis Services (SSAS) server, or a tabular cube authentication credential in the SSAS server.

### Claim 6 (depends on 5)

The system of claim 5, wherein executing the computer-readable code is further configured to cause the at least one processing device to:
connect at least one node associated with the AOAG to the VNN authentication credential, wherein the authentication credential is the VNN authentication credential; and
update the at least one node with the rotated password associated with the VNN authentication credential.

### Claim 7 (depends on 5)

The system of claim 5, wherein executing the computer-readable code is further configured to cause the at least one processing device to:
parse SSRS server to identify the at least one of report authentication credential, wherein the authentication credential is the report authentication credential;
update the report authentication credential with the rotated password associated with the report authentication credential.

### Claim 8 (depends on 5)

The system of claim 5, wherein executing the computer-readable code is further configured to cause the at least one processing device to:
parse at least one file system, at least one database, and at least one SSIS database (SSISDB) to identify the package authentication credential, the package configuration authentication credential, or a value type of the package, wherein the authentication credential is the package authentication credential or the package configuration authentication credential; and
update the package authentication credential,
wherein, in an instance where the package authentication credential and the package configuration authentication credential are identified, update the package authentication credential and the package configuration authentication credential with the rotated password, or
wherein, in an instance where the value type of the package is identified, update the package authentication credential with the rotated password.

### Claim 9 (depends on 5)

The system of claim 5, wherein executing the computer-readable code is further configured to cause the at least one processing device to:
parse the SSAS server;
identify, based on the parsing of the SSAS server, a multi-dimensional cube format of the SSAS server or a tabular cube format of the SSAS server, wherein the multi-dimensional cube format comprises the multi-dimensional cube authentication credential and wherein the tabular cube format comprises the tabular cube authentication credential; and
update the multi-dimensional cube authentication credential or the tabular cube authentication credential,
wherein, in an instance where the multi-dimensional cube format is identified, update the multi-dimensional cube authentication credential with the rotated password, or
wherein, in an instance where the tabular cube format is identified, update the tabular cube authentication credential with the rotated password.

### Claim 10

A computer program product for automatically rotating password in multi-server environment, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to:
identify, from at least one of an external source or an internal source, at least one authentication credential comprising a password rotation requirement associated with at least one server;
transmit, using a temporary credential, a request to an application programming interface (API) to rotate passwords associated with the at least one authentication credential;
receive, from the API, the rotated password associated with the at least one authentication credential; and
update the at least one authentication credential with the rotated password.

### Claim 11 (depends on 10)

The computer program product of claim 10, wherein the at least one authentication credential is associated with at least one of: a standalone server authentication credential, a VNN authentication credential that has access to an AOAG, a report authentication credential in a SSRS server, a package authentication credential in a SSIS server, a package configuration authentication credential in SSIS server, a multi-dimensional cube authentication credential in a SSAS server, or a tabular cube authentication credential in the SSAS server.

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein executing the instructions further causes the processing device to:
connect at least one node associated with the AOAG to the VNN authentication credential, wherein the authentication credential is the VNN authentication credential; and
update the at least one node with the rotated password associated with the VNN authentication credential.

### Claim 13 (depends on 11)

The computer program product of claim 11, wherein executing the computer-readable code is further configured to cause the at least one processing device to:
parse SSRS server to identify the at least one of report authentication credential, wherein the authentication credential is the report authentication credential;
update the report authentication credential with the rotated password associated with the report authentication credential.

### Claim 14 (depends on 11)

The computer program product of claim 11, wherein executing the computer-readable code is configured to cause the at least one processing device to:
parse at least one file system, at least one database, and at least one SSISDB to identify the package authentication credential, the package configuration authentication credential, or a value type of the package, wherein the authentication credential is the package authentication credential or the package configuration authentication credential; and
update the package authentication credential,
wherein, in an instance where the package authentication credential and the package configuration authentication credential are identified, update the package authentication credential and the package configuration authentication credential with the rotated password, or
wherein, in an instance where the value type of the package is identified, update the package authentication credential with the rotated password.

### Claim 15 (depends on 11)

The computer program product of claim 11, wherein executing the computer-readable code is configured to cause the at least one processing device to:
parse the SSAS server;
identify, based on the parsing of the SSAS server, a multi-dimensional cube format of the SSAS server or a tabular cube format of the SSAS server, wherein the multi-dimensional cube format comprises the multi-dimensional cube authentication credential and wherein the tabular cube format comprises the tabular cube authentication credential; and
update the multi-dimensional cube authentication credential or the tabular cube authentication credential,
wherein, in an instance where the multi-dimensional cube format is identified, update the multi-dimensional cube authentication credential with the rotated password, or
wherein, in an instance where the tabular cube format is identified, update the tabular cube authentication credential with the rotated password.

### Claim 16

A method for automatically rotating password in multi-server environment, the method comprising:
identifying, from at least one of an external source or an internal source, at least one authentication credential comprising a password rotation requirement associated with at least one server;
transmitting, using a temporary credential, a request to an application programming interface (API) to rotate passwords associated with the at least one authentication credential;
receiving, from the API, the rotated password associated with the at least one authentication credential; and
updating the at least one authentication credential with the rotated password.

### Claim 17 (depends on 16)

The method of claim 16, wherein the at least one authentication credential is associated with at least one of: a standalone server authentication credential, a VNN authentication credential that has access to an AOAG, a report authentication credential in a SSRS server, a package authentication credential in a SSIS server, a package configuration authentication credential in SSIS server, a multi-dimensional cube authentication credential in a SSAS server, or a tabular cube authentication credential in the SSAS server.

### Claim 18 (depends on 17)

The method of claim 17, wherein the method further comprises:
parsing SSRS server to identify the at least one of report authentication credential, wherein the authentication credential is the report authentication credential;
updating the report authentication credential with the rotated password associated with the report authentication credential.

### Claim 19 (depends on 11)

The method of claim 11, wherein the method further comprises:
parsing at least one file system, at least one database, and at least one SSISDB to identify the package authentication credential, the package configuration authentication credential, or a value type of the package, wherein the authentication credential is the package authentication credential or the package configuration authentication credential; and
updating the package authentication credential,
wherein, in an instance where the package authentication credential and the package configuration authentication credential are identified, update the package authentication credential and the package configuration authentication credential with the rotated password, or
wherein, in an instance where the value type of the package is identified, update the package authentication credential with the rotated password.

### Claim 20 (depends on 5)

The method of claim 5, wherein the method further comprises:
parsing the SSAS server;
identifying, based on the parsing of the SSAS server, a multi-dimensional cube format of the SSAS server or a tabular cube format of the SSAS server, wherein the multi-dimensional cube format comprises the multi-dimensional cube authentication credential and wherein the tabular cube format comprises the tabular cube authentication credential; and
updating the multi-dimensional cube authentication credential or the tabular cube authentication credential,
wherein, in an instance where the multi-dimensional cube format is identified, updating the multi-dimensional cube authentication credential with the rotated password, or
wherein, in an instance where the tabular cube format is identified, updating the tabular cube authentication credential with the rotated password.
