US 12,107,953 B2
System and method for a distributed keystore
Chen He, Redwood City, CA (US); Satish Panchumarthy, Redwood City, CA (US); and Geoffrey Stewart, Redwood City, CA (US)
Assigned to ORACLE INTERNATIONAL CORPORATION
Filed by ORACLE INTERNATIONAL CORPORATION, Redwood Shores, CA (US)
Filed on Apr. 28, 2022, as Appl. No. 17/732,357.
Application 17/732,357 is a continuation of application No. 16/370,304, filed on Mar. 29, 2019, granted, now 11,349,655.
Claims priority of provisional application 62/748,994, filed on Oct. 22, 2018.
Claims priority of provisional application 62/748,020, filed on Oct. 19, 2018.
Claims priority of provisional application 62/741,737, filed on Oct. 5, 2018.
Prior Publication US 2022/0255738 A1, Aug. 11, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/08 (2006.01); G06F 21/60 (2013.01)
CPC H04L 9/0894 (2013.01) [G06F 21/602 (2013.01)] 12 Claims
OG exemplary drawing
 
1. A system for supporting a distributed keystore comprising:
a computer comprising a microprocessor;
a synchronization service at the computer; and
a platform keystore structure at the computer;
wherein the synchronization service performs a library function for the platform keystore structure;
wherein the platform keystore structure comprises a tree structure of nodes, each node storing one of credential data and metadata associated with the credential data;
wherein the credential data is store at nodes at a first level within the tree structure;
wherein the metadata associated with the credential data is stored at nodes at a second level within the tree structure;
wherein a request to write new credential data and associated new metadata to the platform key structure is received at the platform key structure;
wherein, upon attempting to write the new credential data to a node at the first level within the tree structure, an exception is thrown indicating the node is beyond a preset storage threshold level;
wherein, upon receiving the exception, the platform key structure automatically creates one or more new nodes at the first level; and
wherein the new credential data is stored at the one or more new nodes at the first level.