Novell, Inc.

Micro Focus Software Inc.

Digicert, Inc.

Other

Oracle International Corporation

Emc Corporation

Novell Intellectual Property Holdings, Inc.

Jason Allen Sabin

Jeremy Ray Brown

Lloyd Leon Burch

Nathaniel Brent Kranendonk

Kal A Larsen

Michael John Jorgensen

Michael Fairbanks

Stephen R Carter

Daniel Robert Timpson

Thomas Larry Biggs

Matthew Holt

Wade Johnathon Choules

Darin Scott Andrew

Ricky Eldon Roos

Chad Buttars

Carolyn Bennion McClain

Douglas Garry Earl

Vernon Roger Holm

Avesta Hojjati

Richard Jeremy Rowley

Paul Tiemann

Ryan Brown

Leon Brown

Systems and methods for automated repositioning of secrets to a secure location include, responsive to detection of one or more secrets and corresponding storage locations of the one or more secrets, analyzing the corresponding storage locations with respect to policy for the one or more secrets; and, responsive to any of the one or more secrets being stored in a less secure location than the policy, automatically repositioning the any of the one or more secrets to a secure location and reconfiguring any service utilizing the any of the one or more secrets to update to the secure location. The one or more secrets include any of a password, a private key, an Application Programming Interface (API) key, a Secure Shell (SSH) key, a token, a certificate, and a credential.

Automated secret secure repositioning

Features are disclosed for a security seal indicating a security of an application. A computing device can receive a request to implement a security seal for an application. The computing device can identify dynamic authentication information and inject the dynamic authentication information into a security seal based on validating a relationship between the application and an entity. The computing device can communicate the security seal to a client device for association with an application. When implemented, the security seal may display a plurality of faces. A face of the plurality of faces may be injected with the dynamic authentication information.

Authentication of security seals using dynamic authentication information

Features are disclosed for a dynamic security seal indicating a security of an application. A computing device can receive a request to implement a dynamic security seal for an application. The computing device can validate a relationship between an entity and the application and between an image and the application. Based on validating these relationships, the computing device can generate a dynamic security seal. When implemented, the dynamic security seal may display a plurality of faces. A face of the plurality of faces may be the image. The dynamic security seal can sequentially display the plurality of faces based on various criteria.

Dynamic security seal

A system and method for digitally signing an object. An object signing agent sends a signing request for an object to a remote signing server, which, in response to receiving the request, generates a virtual machine executing code for signing the object. The object is signed within the virtual machine and returned to the object signing agent.

Object signing within a cloud-based architecture

A method, system and apparatus for requesting a plurality of credentials from a trusted entity. A local validation device (LVD) receives a credential request or an identifier from each of a plurality of user devices. The LVD generates or compiles a bundle of credential requests corresponding to the plurality of user devices. The LVD transmits the bundle of credentials requests to the MVD. The MVD receives the bundle of request and performs a validation for each request in the bundle and then communicates the credentials and/or the results of the validations to the LVD. The LVD communicates credentials to each of the plurality of user devices. In some cases, the LVD performs the validation for each credential request. For instance, the LVD can receive a local enforcement policy from the MVD, which can provide instructions or guidance to the LVD as to how to perform the validations.

Remote processing of credential requests

Techniques for authentication via a mobile device are provided. A mobile device is pre-registered for website authentication services. A user encounters a website displaying an embedded code as an image alongside a normal login process for that website. The image is identified by the mobile device, encrypted and signed by the mobile device and sent to a proxy. The proxy authenticates the code and associates it with the website. Credentials for the user are provided to the website to automatically authenticate the user for access to the website bypassing the normal login process associated with the website.

Techniques for authentication via a mobile device

The system and method for determining fuzzy cause and effect relationships in an intelligent workload management system described herein may combine potential causes and effects captured from various different sources associated with an information technology infrastructure with substantially instantaneous feedback mechanisms and other knowledge sources. As such, fuzzy correlation logic may then be applied to the combined information to determine potential cause and effect relationships and thereby diagnose problems and otherwise manage interactions that occur in the infrastructure. For example, information describing potential causes and potential effects associated with an operational state of the infrastructure may be captured and combined, and any patterns among the information that describes the multiple potential causes and effects may then be identified. As such, fuzzy logic may the be applied to any such patterns to determine possible relationships among the potential causes and the potential effects associated with the infrastructure operational state.

System and method for determining fuzzy cause and effect relationships in an intelligent workload management system

Techniques for security auditing of cloud resources are provided. A virtual machine (VM) is captured and isolated when a session indicates that a session with the VM has terminated. Security checks are executed against the VM in the isolated environment. Results from the security checks are then reported.

Techniques for security auditing of cloud resources

File mapping and converting for dynamic disk personalization for multiple platforms are provided. A volatile file operation is detected in a first platform. The file supported by the first platform. A determination is made that the file is sharable with a second platform. The volatile operation is performed on the file in the first platform and the modified file is converted to a second file supported by the second platform. The modified file and second file are stored in a personalized disk for a user. The personalized disk is used to modify base images for VMs of the user when the user accesses the first platform or second platform. The modified file is available within the first platform and the second file is available within the second platform.

File mapping and converting for dynamic disk personalization for multiple platforms

Cloud protection techniques are provided. A security breach is detected in a source cloud environment. An enterprise system processing in the source cloud environment is immediately locked down and is dynamically migrated to a target cloud environment. While the enterprise system is migrating, the source cloud environment creates a fake environment with fake resources within the source cloud environment to dupe an intruder having access as a result of the security breach. Metrics and logs are gathered with respect to activities of the intruder within the source cloud environment.

Cloud protection techniques

Techniques for preventing information disclosure via dynamic secure cloud resources are provided. Data (information) remotely housed on a particular cloud resource of a particular cloud is periodically, randomly, and dynamically changed to a different cloud resource within the same cloud or to a different cloud resource within an entirely different cloud. A requesting principal for the data is dynamically authenticated and a current location for the data is dynamically resolved and the principal is securely and dynamically connected to the current cloud resource and current cloud hosting the data for access.

Growing community of inventors

Lehi, UT, United States of America

Jason Allen Sabin