Patent ID: 9319392
Filing Date: 2016-04-19
CPC Classification: H04L,H04W

Claim Text:
1. A computer implemented method, comprising: at a credential management system including at least one processor and memory, the memory communicatively coupled to the processor and storing instructions, the at least one processor executing the instructions to perform the operations of: identifying a set of credentials, each credential of the set of credentials capable of being used to authenticate a corresponding user of the credential against one or more computer-based authentication systems in order to access one or more first computing resources in a distributed computing environment; detecting that a suspect credential to be rotated was not rotated within a determined period of time; temporarily disabling the suspect credential; monitoring, while the suspect credential is disabled, an availability of one or more second computing resources related to the suspect credential; re-enabling the suspect credential, using the at least one processor of the credential management system, in response to at least one of the availability remaining substantially unchanged or an expiration of a first time interval; disabling the suspect credential for a second time interval that is longer than the first time interval in response to determining that the availability of the one or more second computing resources remained at least at a minimum threshold while the suspect credential was temporarily disabled; detecting that the availability of the one or more second computing resources decreased under the minimum threshold during at least one of the first time interval or the second time interval; and re-enabling the suspect credential.