The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 08, 2013

Filed:

Dec. 23, 2009
Applicants:

Gregory W. Lazar, Upton, MA (US);

Greg Mogavero, Needham, MA (US);

Michael Hamel, Milford, MA (US);

Yidong Wang, Upton, MA (US);

Prakash Chanderia, Shrewsbury, MA (US);

Feng Zhou, Framingham, MA (US);

Ashwin Ramkrishna Tidke, Navi Mumbai, IN;

Inventors:

Gregory W. Lazar, Upton, MA (US);

Greg Mogavero, Needham, MA (US);

Michael Hamel, Milford, MA (US);

Yidong Wang, Upton, MA (US);

Prakash Chanderia, Shrewsbury, MA (US);

Feng Zhou, Framingham, MA (US);

Ashwin Ramkrishna Tidke, Navi Mumbai, IN;

Assignee:

EMC Corporation, Hopkinton, MA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 12/14 (2006.01); G06F 7/04 (2006.01); G06F 15/16 (2006.01); G06F 21/31 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/31 (2013.01); H04L 63/083 (2013.01);
Abstract

A technique provides secure access to a set of credentials within a data storage system. The technique involves obtaining a unique identifier (e.g., a hostname which is unique to the system) and a set of stable values (e.g., machine-generated codes which are random to users of the system); and, in response to a storage request from a client application, storing a set of credentials of the client application within a data security mechanism of the data storage system. The set of credentials is in encrypted form when stored within the data security mechanism of the data storage system. The technique further involves configuring the data security mechanism of the data storage system to provide the set of credentials in non-encrypted form in response to new fingerprints matching a system fingerprint which is formed at least in part from the unique identifier and the set of stable values.


Find Patent Forward Citations

Loading…