US 12,189,757 B2
System, method, and computer program for smart secret rotator
Kumar Rao Krishnagi, Powell, OH (US); and Vijay Kumar Perla, Westerville, OH (US)
Assigned to JPMORGAN CHASE BANK, N.A., New York, NY (US)
Filed by JPMorgan Chase Bank, N.A., New York, NY (US)
Filed on Nov. 9, 2022, as Appl. No. 17/983,781.
Prior Publication US 2024/0152598 A1, May 9, 2024
Int. Cl. G06F 21/45 (2013.01); G06F 21/41 (2013.01)
CPC G06F 21/45 (2013.01) [G06F 21/41 (2013.01)] 20 Claims
OG exemplary drawing
 
9. A system for implementing a smart secret rotator module configured to programmatically generate and rotate secrets or credentials for applications to read them to connect to various services, the system comprising:
a processor; and
a memory operatively connected to the processor via a communication interface, the memory storing computer readable instructions, when executed, causes the processor to:
establish a communication link between a plurality of service providers and one or more processors embedded within the smart secret rotator module via a communication interface, wherein each of said plurality of service providers generates corresponding secret or credential to be utilized by an application for connecting to said service;
run the smart secret rotator module in a preconfigured time interval to determine whether the secret or the credential corresponding to each service provider has been changed during the preconfigured time interval;
call, by the smart secret rotator module, a first application programming interface (API), in response to determining that the secret or the credential corresponding to each service provider has been changed, to retrieve the changed secret or the credential from the corresponding service provider;
store the changed secret or the credential to a corresponding predefined location;
call, by the application, a second API to retrieve the changed secret or the credential from the corresponding predefined location; and
automatically establish a connection between the application and the corresponding service provider based on a determination that the changed secret or the credential retrieved from the predefined location matches with the changed secret or the credential retrieved from the corresponding service provider during the preconfigured time interval.