Setting and synching preferred credentials in a disparate credential store environment

• US 20090077638A1
• Filed: 09/17/2007
• Published: 03/19/2009
• Est. Priority Date: 09/17/2007
• Status: Abandoned Application

• Current Assignee: EMC Corporation (Dell Technologies Inc.)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Ford, Karl E., Norman, James M., Mashayekhi, Cameron
• Application Number:
  US11/901,397
• Publication Number:
  US 20090077638A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

Apparatus and methods are described for using preferential credentials in an environment of multiple disparate credential stores. For at least two disparate credential stores, credential information is known, including a preferred credential indicated by a user. Upon indication of a desire to link another credential information to the preferred credential information, the two are mapped to one another. Users can sign-on, singularly, with the preferred credential information, and have access to both the disparate credential stores. A credential value can be shared by multiple credential ID'"'"'s or one credential ID can be associated with multiple credential values thereby giving users the ability to cross-reference secrets and credentials for most efficiency. Default credentials are also possible as are retrofits for existing SSO services. Policy applications, computer program products and computing network interaction are other noteworthy features.

Claims

1. In a computing system environment, a method of using preferential credentials in an environment of multiple disparate credential stores, comprising:

determining credential information for at least two said multiple disparate credential stores;

identifying one of the credential information as a preferred credential;

indicating a desire to link another credential information to the preferred credential information; and

mapping the preferred credential information to the another credential information.

2. The method of claim 1, wherein the mapping further includes identifying applications having said credential information.

3. The method of claim 1, wherein the mapping further includes establishing a default credential.

4. The method of claim 1, wherein the identifying the preferred credential further includes supplying the preferred credential in a lookup table.

5. The method of claim 1, further including commonly formatting the credential information for the at least two said multiple disparate credential stores.

6. The method of claim 1, wherein the determining credential information further includes conducting a user search.

7. The method of claim 1, further including launching a credential store utility providing a common interface with a common format for the credential information.

8. The method of claim 7, further including retrofitting an existing single-sign-on service with the credential store utility.

9. The method of claim 1, further including establishing a policy for the preferred credential.

10. The method of claim 1, further including determining whether a mapping of the preferred credential already exists.

11. In a computing system environment, a method of using preferential credentials in an environment of multiple disparate credential stores, comprising:

searching for credential information for at least two said multiple disparate credential stores;

receiving the requested credential information through a common interface in a common format;

mapping a preferred of the credential information to another of the credential information; and

upon signing-on with the preferred credential information, having access to both the at least two said multiple disparate credential stores.

12. The method of claim 11, wherein the mapping further includes establishing a default credential.

13. The method of claim 11, further including changing the mapping for the preferred credential information.

14. The method of claim 11, further including launching a credential store utility providing the common interface with the common format.

15. The method of claim 11, further including establishing a policy for the preferred credential.

16. A computer program product available as a download or on a computer readable medium having executable instructions for using preferential credentials in an environment of multiple disparate credential stores, comprising:

a first component for requesting and receiving credential information for at least two said multiple disparate credential stores;

a second component to commonly format the credential information; and

a third component to map a preferred of the credential information to another of the credential information.

17. The computer program product of claim 16, further including a fourth component causing display of a user interface module whereby users can said map the preferred credential information.

18. The computer program product of claim 16, further including a fourth component providing access to both the at least two said multiple disparate credential stores upon a user signing-on with the preferred credential information.

19. The computer program product of claim 16, wherein one or more of the components resides for retrofitting with an existing single-sign-on service.

20. A computing system for using preferential credentials in an environment of multiple disparate credential stores, comprising:

a user interface module for indicating a preferred credential information;

a single-sign-on service;

a synchronizing engine interfacing with the single-sign-on service and the user interface module; and

at least two credential stores having dissimilar credential information, wherein the synchronizing engine is configured to receive the preferred credential said indicated by a user via the user interface module and map another credential information thereto, the preferred credential information and the another credential information being one credential of the dissimilar credential information.