Password Maintanance
•Als PPT, PDF herunterladen•
0 gefällt mir•784 views
My recent presentation for a big auto major in their CoP seminar that how effectively we can maintain user id & password in an application
![Key takeways and Uncovered area ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Empfohlen
Weitere ähnliche Inhalte
Andere mochten auch
Ähnlich wie Password Maintanance
Ähnlich wie Password Maintanance (20)
Password Maintanance
- 1. Userid & Password Management By Dynaprop Presented by: Subhajit Ghosh November 17, 2009
- 3. What is Dynaprop Dynaprop (The Dynamic Property Manager Admin Console )allows an application team to securely and dynamically administer application properties that are stored in an Oracle, DB2 or SQL Server database through a web interface.
- 6. Using CredentialsContext – Step 1a
- 7. Using CredentialsContext – Step 1b
- 8. Using CredentialsContext – Step 1d
- 9. Using CredentialsContext – Step 1f
Hinweis der Redaktion
- Symmetric Crypt w/ RC4 – wasn’t written or intended to be a reusable FW Property Manager – one of JCOE first FW’s. Written at the same time as eSpoke to support eSpoke configuration Integrated Symmetric Crypt & Property Manager – for password decryption. Uses a system property for key configuration Dynamic Property Manager developed to allow for property changes w/o having to re-deploy application and provide higher security. This includes the DynaProp Admin console and ‘Highly dynamic’ properties. HD properties will be retrieved from the DB with each access if necessary FJF Asymmetric encryption/decryption included in DynaProp using FJFConfig keys. FJFConfig has a different key for each environment. Note there are no tools outside of DynaProp Admin console to encrypt with FJF Asymmetric Crypt Controls Compliance guide describes all the controls necessary for all the different encryption/decryption components and processes com.ford.it.context.RequestContext developed to support the Thread Local pattern Property Credentials utility – Allows you to define ‘Highly Dynamic’ namespaces that contain a id & password w/o taking the hit of a DB trip with every access. Symmetric Crypt was changed to only generate AES and Triple DES keys. RC4 keys are for backward compatibility only.