Automatic parameter value generation

• US 10,242,205 B2
• Filed: 08/23/2016
• Issued: 03/26/2019
• Est. Priority Date: 08/23/2016
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: McPherson, Daniel, Parees, Benjamin M., Coleman, Clayton P.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Wyszynski, Aubrey H
• Application Number:
  US15/244,652
• Publication Number:
  US 20180060592A1
• Time in Patent Office: 945 Days
• Field of Search: 726 1
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Automatic parameter value generation is disclosed. It is determined that a parameter value generation trigger associated with a parameter has occurred. A parameter value in accordance with a format of the parameter value is obtained. At least one location associated with a first component to which the parameter value is to be communicated is determined. The parameter value is communicated to the at least one location, and a parameter value refresh policy associated with the first component is determined.

Claims

1. A method of automatic parameter value generation, comprising:

determining, by a computing device comprising a processor device, that a parameter value generation trigger associated with a parameter has occurred;

accessing configuration information comprising a plurality of parameter records, each parameter record identifying;

a set of components, and a parameter format that identifies a format of a parameter value to be generated for the set of components, each set of components comprising at least one component;

selecting a particular parameter record in response to the occurrence of the parameter value generation trigger;

obtaining a parameter value in accordance with the format of the parameter value;

determining at least one location associated with a first component of the set of components identified in the particular parameter record to which the parameter value is to be communicated;

communicating the parameter value to the at least one location; and

based on the particular parameter record, determining a parameter value refresh policy associated with the first component.

2. The method of claim 1 wherein determining that the parameter value generation trigger associated with the parameter has occurred comprises:

receiving a request to generate the parameter value.

3. The method of claim 2 wherein receiving the request to generate the parameter value comprises receiving, from the first component, the request to generate the parameter value.

4. The method of claim 1 wherein determining that the parameter value generation trigger associated with the parameter has occurred comprises:

accessing the particular parameter record;

determining that the configuration information identifies a time interval; and

determining that the time interval has elapsed since a previous parameter value of the parameter was generated.

5. The method of claim 1

wherein obtaining the parameter value in accordance with the format of the parameter value comprises generating the parameter value in accordance with the format of the parameter value.

6. The method of claim 5 wherein the format identifies a parameter value length and a parameter value syntax, and wherein generating the parameter value in accordance with the format comprises:

generating the parameter value to have the parameter value length; and

generating the parameter value to comply with the parameter value syntax.

7. The method of claim 6 wherein the parameter value syntax identifies a parameter value numeric portion having a parameter value numeric portion length and a parameter value alphabetic portion having a parameter value alphabetic portion length, and wherein generating the parameter value to comply with the parameter value syntax further comprises generating one of a random number and a pseudo-random number having the parameter value numeric portion length and generating one of a random alphabetic string and a pseudo-random alphabetic string having the parameter value alphabetic portion length, and generating the parameter value based on the one of the random number and the pseudo-random number and the one of the random alphabetic string and the pseudo-random alphabetic string.

8. The method of claim 1 wherein determining the at least one location associated with the first component to which the parameter value is to be communicated further comprises:

accessing the particular parameter record to determine the at least one location.

9. The method of claim 8 wherein accessing the particular parameter record to determine the at least one location further comprises accessing the particular parameter record to determine the at least one location and a second location, and wherein communicating the parameter value to the at least one location further comprises communicating the parameter value to the at least one location and the second location.

10. The method of claim 1 wherein determining the at least one location associated with the first component to which the parameter value is to be communicated further comprises determining a plurality of locations associated with the set of components, the set of components being components of a same distributed system;

and

wherein communicating the parameter value to the at least one location further comprises communicating the parameter value to the plurality of locations.

11. The method of claim 1 wherein the parameter value refresh policy indicates the first component is to be restarted, and further comprising:

causing the first component to restart.

12. The method of claim 1 wherein the parameter value refresh policy indicates the first component and a second component are to be restarted, and further comprising:

causing the first component to restart; and

causing the second component to restart.

13. The method of claim 12 wherein the particular parameter record further identifies a restart order that indicates the first component is to be restarted prior to the second component, and, wherein causing the first component to restart and causing the second component to restart further comprises causing the first component to restart prior to causing the second component to restart based on the restart order.

14. The method of claim 1 wherein obtaining the parameter value in accordance with the format of the parameter value comprises:

requesting the parameter value from a parameter value generating component; and

receiving the parameter value.

15. A computing device for automatic parameter value generation, comprising:

a memory;

a processor device coupled to the memory to;

determine that a parameter value generation trigger associated with a parameter has occurred;

access configuration data comprising a plurality of parameter records, each parameter record identifying;

a set of components, and a parameter format that identifies a format of a parameter value to be generated for the set of components, each set of components comprising at least one component;

select a particular parameter record in response to the occurrence of the parameter value generation trigger;

obtain a parameter value in accordance with the format of the parameter value;

determine at least one location associated with a first component of the set of components identified in the particular parameter record to which the parameter value is to be communicated;

communicate the parameter value to the at least one location; and

based on the particular parameter record, determine a parameter value refresh policy associated with the first component.

16. The computing device of claim 15 wherein to determine the parameter value refresh policy associated with the first component the processor device is further to access configuration information that indicates the first component is to be restarted, and wherein the processor device is further to cause the first component to restart.

17. The computing device of claim 15 wherein the parameter value refresh policy indicates the first component and a second component are to be restarted, and wherein the processor device is further to:

cause the first component to restart; and

cause the second component to restart.

18. The computing device of claim 17 wherein the particular parameter record further identifies a restart order that indicates the first component is to be restarted prior to the second component, and, wherein to cause the first component to restart and cause the second component to restart the processor is further to cause the first component to restart prior to cause the second component to restart based on the restart order.

19. A non-transitory computer program product for automatic parameter value generation, the computer program product stored on a non-transitory computer-readable storage medium and including instructions configured to cause a processor device to:

determine that a parameter value generation trigger associated with a parameter has occurred;

access configuration data comprising a plurality of parameter records, each parameter record identifying;

a set of components, and a parameter format that identifies a format of a parameter value to be generated for the set of components, each set of components comprising at least one component;

select a particular parameter record in response to the occurrence of the parameter value generation trigger;

obtain a parameter value in accordance with the format of the parameter value;

determine at least one location associated with a first component of the set of components identified in the particular parameter record to which the parameter value is to be communicated;

communicate the parameter value to the at least one location; and

based on the particular parameter record, determine a parameter value refresh policy associated with the first component.

20. The non-transitory computer program product of claim 19 wherein the parameter value refresh policy indicates the first component is to be restarted, and wherein the instructions are further configured to cause the processor device to cause the first component to restart.

21. The non-transitory computer program product of claim 19 wherein the parameter value refresh policy indicates the first component and a second component are to be restarted, and wherein the instructions are further configured to cause the processor device to:

cause the first component to restart; and

cause the second component to restart.