Wells Fargo Bank, N.a.

Catherine Li

Peter L Shen

Douglas S Pelton

Waeed Sherzai

Chandramouli Balasubramaniam

Ruven Schwartz

An administrator installs a key management agent on a previously approved client machine. The agent is started on the client machine, which posts requests for keys to a central key management service. The central key management service logs requests posted to it by clients, and checks for existing pre-approval records. If none are found, a message is typically sent to an approver for the requesting client machine. When a request is verified as approved, the request is flagged for further processing. The supported systems continuously or periodically look for records flagged for processing, use requests to generate keys and other appropriate elements for the requesting client machine, and post keys and other elements to the key management database. The key management agent polls the central key management service periodically until finding the expected key file, which it downloads and installs into a protected file location on the client machine. The key management agent periodically sends status messages to the central key management service, which tracks expected behavior of the client machine and/or key management agent.

Distributed cryptographic management for computer systems

Provided is software versioning that allows a set of features to be selectively enabled and/or disabled based on a value of a switch associated with each feature of the set of features. The software versioning includes an administrator component that receives a change to a switch associated with at least one application. A toggle component generates a configuration notice based on an indication of the change to the switch. A tool kit component facilitates implementation of the change at the application based on the configuration notice received from the toggle component.

Software versioning

A distributed cryptographic management system can include: a central key management service accessible through the network and having a database associated therewith; an approval module programmed to receive approval for any client machines connectable to the network and applications associated with the client machines, the database storing records for the client machines, and a key management domain being defined by all approved client machines and applications; and an agent module programmed to provide key management agents, wherein the key management agents are transferable and installable on any of the approved client machines and applications within the key management domain.

Growing community of inventors

Corte Madera, CA, United States of America

Catherine Li