Marchel M Cohn

US Patent:

20060200665, Sep 7, 2006

Filed:

Mar 3, 2005

Appl. No.:

11/072733

Inventors:

Erik Olson - Sammamish WA, US
Manu Vasandani - Bellevue WA, US
Marchel Cohn - Shoreline WA, US

Assignee:

Microsoft Corporation - Redmond WA

International Classification:

H04L 9/00
G06F 12/14
H04L 9/32
G06F 11/30

US Classification:

713167000, 713193000

Abstract:

System and methods for protecting sensitive data stored in a text-based configuration file. In a web server application, data associated with sensitive information such as connection information for a remote database may be stored within a configuration file and accessed whenever a request for information from that database is received. To prevent unwanted access to remote database, the portion of the configuration file with sensitive information is encrypted. A decryption provider selected by the requesting server or client application decrypts the sensitive data using the decryption key, retrieves protected data from the remote database, and the configuration server provides a response based on the sensitive data protecting access to the remote database. The encryption/decryption process is transparent to the web server application consuming the configuration.