Automatic elevation of system security

• US 10,097,359 B2
• Filed: 04/24/2017
• Issued: 10/09/2018
• Est. Priority Date: 09/23/2013
• Status: Active Grant

• Current Assignee: EMC Corporation (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Rao, Raghavendra Anantha
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US15/495,778
• Publication Number:
  US 20170244569A1
• Time in Patent Office: 533 Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A system for automatic setting of system security comprises an input interface and a processor. The input interface is configured to receive an indication to set a secure mode. The processor is configured to: determine whether the indication to set the secure mode comprises an indication to set a certificate mode; in the event that the indication to set the secure mode comprises an indication to set a certificate mode: 1) detect one or more connected systems for which to set the certificate mode; 2) select one or more certificates for the certificate mode; 3) update initialization files for the certificate mode; and 4) reinitialize local and one or more connected systems.

Claims

1. A system, comprising:

one or more processors configured to;

determine to set communication with the system to a secure mode;

in response to determining to set the communication with the system to the secure mode,

detect one or more connected systems for which to set to the secure mode;

select one or more certificates to use for communication with the one or more connected systems in connection with the secure mode; and

set the communication between the system and the one or more connected systems to the secure mode based at least in part on the one or more selected certificates; and

one or more memories coupled to the one or more processors and configured to provide the one or more processors with instructions.

2. The system of claim 1, wherein the one or more processors are further configured to reinitialize at least one of the one or more connected systems in response to the communication with the one or more connected system being set to the secure mode.

3. The system of claim 1, wherein the one or more processors are further configured to determine whether the one or more certificates have been received for the one or more connected systems.

4. The system of claim 1, wherein to set the communication with the one or more connected systems to the secure mode comprises updating one or more initialization files associated with at least one of the one or more connected systems.

5. The system of claim 4, wherein updating the one or more initialization files comprises changing at least one of the one or more initialization files to indicate a path to at least one of the one or more selected certificates.

6. The system of claim 1, wherein to set the communication with the one or more connected systems to the secure mode comprises setting a certificate-based authentication between the system and the one or more connected systems.

7. The system of claim 1, wherein to set the communication with the one or more connected systems to the secure mode comprises providing at least one of the one or more connected systems with at least one of the one or more selected certificates.

8. The system of claim 1, wherein one or more of the one or more connected systems comprise docbrokers.

9. The system of claim 1, wherein one or more of the one or more connected systems comprise content servers.

10. The system of claim 1, wherein to select the one or more certificates comprises receiving one or more of the one or more certificates.

11. The system of claim 1, wherein to select the one or more certificates comprises generating one or more of the one or more certificates.

12. The system of claim 1, wherein the one or more processors are further configured to create a trust store.

13. The system of claim 1, wherein the one or more processors are further configured to create a key store.

14. The system of claim 1, wherein the one or more processors are further configured to, in response to a determination to set communication with one or more connected systems to a secure mode comprises an indication to not set a certificate mode:

detect at least one of the one or more connected systems for which to set to the anonymous mode;

update initialization files for the anonymous mode; and

reinitialize local and at least one of the one or more connected systems.

15. The system of claim 1, wherein the one or more processors are further configured to determine whether at least one of the one or more selected certificates has been previously created, and in response to a determination that the at least one of the one or more selected certificates has not been previously created, creating the at least one of the one or more certificates.

16. A method for automatic setting of system security, comprising:

determining to set communication with the system to a secure mode; and

in response to determining to set the communication with the system to the secure mode,

detecting one or more connected systems for which to set to the secure mode;

selecting one or more certificates to use for communication with the one or more connected systems in connection with the secure mode; and

setting the communication between the system and the one or more connected systems to the secure mode based at least in part on the one or more selected certificates.

17. The method of claim 16, further comprising:

reinitializing at least one of the one or more connected systems in response to the communication with the one or more connected system being set to the secure mode.

18. The method of claim 16, further comprising:

determining whether the one or more certificates have been received for the one or more connected systems.

19. The method of claim 16, further comprising:

updating one or more initialization files associated with at least one of the one or more connected systems.

20. The method of claim 19, wherein updating the one or more initialization files comprises changing at least one of the one or more initialization files to indicate a path to at least one of the one or more selected certificates.

21. The method of claim 16, wherein setting the communication with the one or more connected systems to the secure mode comprises setting a certificate-based authentication between the system and the one or more connected systems.

22. The method of claim 16, wherein setting the communication with the one or more connected systems to the secure mode comprises providing at least one of the one or more connected systems with at least one of the one or more selected certificates.

23. A computer program product for automatic setting of system security, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

determining to set communication with the system to a secure mode; and

in response to determining to set the communication with the system to the secure mode,

detecting one or more connected systems for which to set to the secure mode;

selecting one or more certificates to use for communication with the one or more connected systems in connection with the secure mode; and

setting the communication between the system and the one or more connected systems to the secure mode based at least in part on the one or more selected certificates.