PROVIDING PASSWORD SECURITY IN NON-FEDERATED COMPUTING ARRANGEMENTS

Number: 20240111856
Published: 2024-04-04
Filed: 2022-09-30
Assignee: DISNEY ENTERPRISES, INC.
Inventors: Zaidi; Abutalib
CPC: G06F21/46
Verdict: Set aside password security, IT, unrelated
Source: Google Patents · FreePatentsOnline

Abstract

One embodiment of a computer-implemented method for automatically generating warnings in a cloud computing arrangement comprises identifying a plurality of queries residing on a non-federated cloud storage service, at least two queries of the plurality of queries directed to disparate data sources; executing a first query of the at least two queries to produce first extracted information and executing a second query of the at least two queries to produce second extracted information, wherein the second extracted information augments the first extracted information; causing the first extracted information and the second extracted information to be stored in an aggregation table; triggering a processing of the aggregation table to identify a password expiration alert; and causing a generating of a notification associated with the password expiration alert for modification of a password corresponding to a service account.

Background

BACKGROUND Field of the Various Embodiments

Embodiments of the present disclosure relate generally to techniques for providing password security in non-federated computing arrangements. Description of the Related Art

With the rise of cloud based computing, sensitive corporate information is often stored in databases within cloud storage systems. The stored information includes customer information, financial information, passwords, anti-piracy data, and the like. Access to such a database requires that a user account be created on the database. Some types of user accounts are part of a federated network of interconnected digital business networks with the ability to transparently send data and messages between parties, such that all the networks function as one network and require only a single user authentication. Other user accounts, such as service accounts, are not part of a federated network and are used by software programs to programmatically access the database. Service accounts are also password protected, to limit access to the database and the sensitive information stored therein.

One issue encountered with using a database provided by a cloud platform is maintaining password discipline. As a specific example, corporations often impose policies requiring password rotation on a periodic basis to prevent intrusions and also mitigate intrusions that have gone undetected. However, imposing password rotation requirements on user accounts that are no

Claims

1. A computer-implemented method for automatically generating warnings in a cloud computing arrangement, the method comprising: identifying a plurality of queries residing on a non-federated cloud storage platform, at least two queries of the plurality of queries directed to disparate data sources; executing a first query of the at least two queries to produce first extracted information and executing a second query of the at least two queries to produce second extracted information, wherein the second extracted information augments the first extracted information; causing the first extracted information and the second extracted information to be stored in an aggregation table; triggering a processing of the aggregation table to identify a password expiration alert; and causing a generating of a notification associated with the password expiration alert for modification of a password corresponding to a service account. || 11. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of: identifying a plurality of queries residing on a non-federated cloud storage platform, at least two queries of the plurality of queries directed to disparate data sources; executing a first query of the at least two queries to produce first extracted information and executing a second query of the at least two queries to produce second extracted information, wherein the second extracted information augments the first extracted information; causing the first extracted information and the second extracted information to be stored in an aggregation table; triggering a processing of the aggregation table to identify a password expiration alert; and causing a generating of a notification associated with the password expiration alert for modification of a password corresponding to a service account. || 20. A system comprising: a memory storing a design application; and a processor coupled to the memory that executes an alert module to perform the steps of: identifying a plurality of queries residing on a non-federated cloud storage platform, at least two queries of the plurality of queries directed to disparate data sources; executing a first query of the at least two queries to produce first extracted information and executing a second query of the at least two queries to produce second extracted information, wherein the second extracted information augments the first extracted information; causing the first extracted information and the second extracted information to be stored in an aggregation table; triggering a processing of the aggregation table to identify a password expiration alert; and causing a generating of a notification associated with the password expiration alert for modification of a password corresponding to a service account.