EXTENSIBLE DEPLOYMENT SYSTEM

• US 20140317727A1
• Filed: 07/03/2014
• Published: 10/23/2014
• Est. Priority Date: 11/15/2012
• Status: Active Grant

• Current Assignee: Carefusion 303 Incorporated (Becton, Dickinson & Co)
• Original Assignee: Carefusion 303 Incorporated (Becton, Dickinson & Co)
• Inventors: NGUYEN, Nick T., MASSEY, Richard W., LAM, Willis, NGUYEN, Ryan, BARNEFIHER, Gerald E.
• Granted Patent: US 9,892,268 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 16/211 Schema design and management
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

An extensible deployment system is disclosed that provides for flexible deployment and centralized management of a scalable communication system. The scalable communication system may be segmented into multiple groups of services, e.g. multiple solutions, that may be deployed across one or more servers. The groups of services may each access separate databases in a single database instance that may allow for the groups of services to be deployed and upgraded independently. A management interface may be provided that allows for centralized management, and deployment, of all of the groups of services, irrespective of the independent upgrade paths of the groups of services. The management interface may include a local authentication system and may also be interoperable with one or more external authentication systems, such that users may use login credentials of an external authentication system to access the management interface.

Claims

1-15. -15. (canceled)

16. A system, comprising:

one or more processors; and

a memory including instructions that, when executed by the one or more processors, cause the one or more processors to;

receive a user authentication request for accessing a management interface, wherein the user authentication request comprises a user identifier and a password;

determine whether the user identifier exists in a local user database;

authenticate the user identifier and the password through a local authentication system if the user identifier exists in the local user database, otherwise authenticate the user identifier and password through an external authentication system; and

provide the management interface if the user identifier and the password are authenticated through either the local authentication system or the external authentication system, otherwise deny access to the management interface.

17. The system of claim 16, wherein the memory further includes instructions that, when executed by the one or more processors, cause the one or more processors to:

determine whether the user identifier is categorized as an external user identifier or an internal user identifier when the user identifier exists in the local user database; and

authenticate the user identifier and the password through the local authentication system if the user identifier exists in the local user database and the user identifier is categorized as the internal user identifier, otherwise authenticate the user identifier and password through an external authentication system.

18. The system of claim 16, wherein the management interface comprises a single interface for tracing a first plurality of messages transmitted by a first plurality of devices and translated into an internal messaging format by a first service and a second plurality of messages transmitted by a second plurality of devices and transmitted into the internal messaging format by a second service.

19. The system of claim 18, wherein the first service accesses a first database having a first schema and the second service accesses a second database having a second schema that is different than the first schema.

20. The system of claim 16, wherein the external authentication system comprises an active directory authentication system.

21. The system of claim 16, wherein the memory further includes instructions that, when executed by the one or more processors, cause the one or more processors to:

add the user identifier to the local user database as an external user identifier when the user identifier and password are authenticated through the external authentication system.

22. The system of claim 16, wherein the memory further includes instructions that, when executed by the one or more processors, cause the one or more processors to:

provide an authentication interface comprising a security certificate; and

receive the a user authentication request via the authentication interface.

23. The system of claim 22, wherein the security certificate is self-signed.

24-30. -30. (canceled)

31. A method for authenticating a user in a centralized communication system (CCS) for extensible deployment, the method comprising:

receiving an authentication request from a user in a first server, the first server comprising a management console application;

determining whether the user identifier exists in a local user database;

authenticating a user identifier and a user password through a local authentication system when the user identifier exists in the local user database, otherwise authenticating the user identifier and the user password through an external authentication system; and

providing access to the management console application when the user identifier and the user password are authenticated.

32. The method of claim 31, wherein authenticating the user credentials comprises transmitting a user identifier and a user password from the first server to the external authentication system when the user identifier is not in a local user database.

33. The method of claim 31, further comprising creating user profiles in the local user database when the user identifier and the password are identified by the external authentication system.

34. The method of claim 31, further comprising providing a user input interface to the user;

and, through the user input interface;

receiving an input to extend the CCS by a new service grouping;

extending the CCS by a new service; and

adding a CCS server hosting the new service.

35. A non-transitory computer readable medium storing commands which, when executed by a processor circuit, cause a server for use in an extensible deployment of a centralized communication system (CCS) to perform the steps of:

authenticating a user having login credentials;

granting the user access to the management console, the management console coupled to a management console database;

providing a user input interface for a management console in the server; and

, in response to the user input;

providing at least a portion of a first service to a user via an agent module in a CCS server coupled to the server; and

requesting a second service to a second CCS server.

36. The non-transitory computer readable medium of claim 35, wherein the user input further comprises extending the CCS to the second CCS server.

37. The non-transitory computer readable medium of claim 36, further comprising commands for deploying the first service in the CCS server and deploying the second service in the second CCS server.

38. The non-transitory computer readable medium of claim 35, further comprising commands for extending the CCS by a new service grouping.

39. The non-transitory computer readable medium of claim 38, further comprising commands for identifying a new server hosting at least one service of the new service grouping;

and retrieving a database script from the new server based on a new server identifier.

40. The non-transitory computer readable medium of claim 35, further comprising commands for extending the CCS by a new service.

41. The non-transitory computer readable medium of claim 40, further comprising commands for receiving a name, a type, and an address of a CCS server hosting the new service through the user input interface.

42. The non-transitory computer readable medium of claim 35, further comprising commands for displaying access tabs for a plurality of service grouping selectors in the user input interface;

and commands for at least one of modifying, deleting, or removing a selected service grouping.