Patent ID: 8392587
Filing Date: 2013-03-05
Classification: G06F

Abstract:
1. A method for using a framework within a computer system to manage credentials associated with a plurality of applications, comprising: receiving a request from one of the plurality of applications to modify a credential stored in a credential store that manages storing and sharing of the credentials, wherein the request to modify a credential does not initiate a change in the credential store until after a determination has been made with regard to acceptability of the modification proposed by the application making the request to modify the credential, wherein the modification of the credential includes one of any modification of the credential itself and a modification of labels or properties attached to the credential; determining if the application making the request to modify the credential has declared rights to manage the credential; aborting the modification of the credential with an error in response to determining that the application making the request to modify the credential has no declared rights to manage the credential; determining which of the plurality of applications may have an interest in the credential if modified by the application making the request to modify the credential in response to determining that the application making the request to modify the credential has the declared rights to manage the credential, wherein an application has an interest in the modification of the credential if the application is affected by how the credential is managed and used; notifying each of the interested plurality of applications of the request for modification of the credential; and enabling each of the interested plurality of applications to issue a control action relating to the request for modification of the credential, wherein the control action is an action that comprises one of approving the request for modification, vetoing the request for modification, taking a recovery action and issuing a warning panel, and wherein the control action relating to the request for modification of the credential occurs subsequent to the request to modify the credential.