Back to results
US 8,510,810 B2Granted
Secure credential store
AssigneeBladeLogic, Inc.
InventorsDavid Allen Solin, Richard Guoyu Liao
Life of this patent
Estimating the term…
Abstract
A credential store provides for secure storage of credentials. A credential stored in the credential store is encrypted with the public key of a user owning the credential. A first user may provide a credential owned by the first user to a second user. The first user may add credentials owned by the first user to the credential store. An administrator may manage users of the credential store without having the ability to provide credentials to those users.
Claims18
A computer-implemented method, comprising:
- inserting a first credential in a credential store of a credential server computer, the first credential encrypted with a public key corresponding to a first user of the credential store;
- and
- providing the first credential to a second user based on a request received from the first user, comprising:
- retrieving the first credential;
- decrypting the first credential with a private key of the first user;
- after decrypting the first credential with the private key of the first user, encrypting the decrypted first credential with a public key of the second user;
- and
- making the encrypted credential available to the second user from the credential store.
5 more elements
A computer implemented method, comprising:
- inserting a first credential in a credential store of a credential server computer, the first credential encrypted with a public key corresponding to a first user of the credential store;
- providing the first credential to a second user based on a request received from the first user, comprising:
- retrieving the first credential,
- decrypting the first credential with a private key of the first user,
- encrypting the decrypted first credential with a public key of the second user, and
- making the encrypted credential available to the second user from the credential store;
- receiving a replacement first credential from the first user;
- creating a one-way digested copy of the first credential;
- and
- storing the one-way digested copy of the first credential in the credential store, accessible to the second user.
7 more elements
A networked computer system comprising:
- a first computer;
- a second computer;
- and
- a credential store computer, comprising:
- a processor;
- a credential store configured to store credentials, coupled to the processor;
- and
- a program store coupled to the processor and configured to store instructions, wherein the instructions cause the processor to perform acts comprising:
- retrieving an encrypted credential from the credential store on behalf of a first user of the first computer;
- decrypting the encrypted credential;
- using the decrypted credential to authenticate an action on the second computer on behalf of the first user;
- inserting a first credential in the credential store, wherein the first credential is encrypted with a public key corresponding to the first user;
- and
- providing the first credential to a second user based on a request received from the first user, comprising:
- retrieving the first credential;
- decrypting the first credential with a private key of the first user;
- after decrypting the first credential with the private key of the first user, encrypting the decrypted first credential with a public key of the second user;
- and
- making the encrypted credential available to the second user.
16 more elements
Dependencies are inferred from the claim text.