Mobile development platform in a cloud based architecture

• US 10,120,775 B2
• Filed: 06/21/2017
• Issued: 11/06/2018
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Parse, Inc. (Meta Platforms, Inc. (f/k/a Facebook, Inc.))
• Inventors: Jayaraman, Shyamsundar, Adams, Henele Litaka, Klimt, Jr., Bryan Jay, Lacker, Kevin David, Majors, Charity Hope, Poll, David Eitan, Sukhar, Ilya, Yu, James Jacob
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US15/628,673
• Publication Number:
  US 20170286256A1
• Time in Patent Office: 503 Days
• Field of Search: 726 22
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/3604 Software analysis for verifying properties of programs byte-code verification G06F9/44589
• CPC Class Codes: G06F 11/3688 for test execution, e.g. scheduling of test suites
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 8/30 Creation or generation of source code
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

Embodiments are directed towards mobile application development in a cloud-based architecture. Mobile applications may be designed to communicate with a cloud platform over a network. Mobile application developers may be enabled to submit cloud code to cloud platforms for use by mobile applications. If cloud code is provided to a cloud platform, the cloud platform may perform one or more actions to authenticate the cloud code, such as, ensuring that that the user providing the cloud code is authorized to provide the cloud code. If the cloud code is authenticated the cloud platform may perform one or more actions to validate the cloud code. If validated, the cloud code may be activated for use by mobile applications and/or mobile application developers. Activation of the cloud code may include associating the cloud code with one or more function calls and/or with one or more trigger points.

Claims

1. A computer-implemented method, comprising:

receiving from a client device a first cloud code module at a cloud platform device;

associating the first cloud code module with at least one function call and one or more timeout values, wherein the function call is directed to one or more services provided by the cloud platform device;

monitoring an execution of the first cloud code module associated with the function call in a sandbox and cancelling the execution of the first cloud code module when upon expiration of at least one of the timeout values;

receiving a second cloud code module for validation;

estimating that a probability of the second cloud code module will time out before completion is greater than a threshold probability, the probability determined based on a similarity between the first cloud code module and the second cloud code module without executing the second cloud code module in the sandbox; and

repairing or rejecting the second cloud code module by the cloud platform device when the probability that the second cloud code module will time out is greater than the threshold probability.

2. The method of claim 1, wherein the timeout values comprise a function call timeout value and a sandbox timeout value that is shorter than the function call timeout value.

3. The method of claim 1, wherein the timeout values comprise a function call timeout value, a cloud code platform device timeout value that is shorter than the function call timeout value, and a sandbox timeout value that is shorter than the cloud code platform device timeout value.

4. The method of claim 3, wherein cancelling the execution of the first cloud code module comprises detecting that the sandbox timeout value has been exceeded and generating a report from the sandbox to the cloud code platform device.

5. The method of claim 3, wherein the function call timeout value represents a high hierarchical level of code execution, the cloud code platform device timeout value represents an intermediate hierarchical level of code execution, and the sandbox timeout value represents a low hierarchical level of code execution, and further comprising detecting a defect in the execution of the first cloud code module at a relatively lower hierarchical level prior to expiration of a relatively higher hierarchical level'"'"'s timeout, and attempting to cure the defect at the relatively lower hierarchical level using time remaining at the relatively higher hierarchical level.

6. The method of claim 1, further comprising:

scanning the second cloud code module, the scanning comprising comparing one or more source code patterns in the second cloud code module to one or more source code patterns in the first cloud code module that has previously timed out;

detecting that the one or more source code patterns in the second cloud code module match the one or more source code patterns in the first cloud code module; and

rejecting the second cloud code module based at least in part on the determining.

7. A non-transitory computer-readable medium storing instructions, the instructions comprising:

instructions configured to cause a computing device to receive from a client device a first cloud code module at a cloud platform device;

instructions configured to cause the computing device to associate the first cloud code module with at least one function call and one or more timeout values, wherein the function call is directed to one or more services provided by the cloud platform device;

instructions configured to cause the computing device to monitor an execution of the first cloud code module associated with the function call in a sandbox and

to cancel the execution of the cloud code module when a time taken to execute the first cloud code module upon expiration of at least one of the timeout values;

instructions configured to cause the computing device to receive a second cloud code module for validation;

instructions configured to cause the computing device to estimate that a probability of the second cloud code module will time out before completion is greater than a threshold probability, the probability determined based on a similarity between the first cloud code module and the second cloud code module without executing the second cloud code module in the sandbox; and

instructions configured to cause the computing device to repair or reject the second cloud code module by the cloud platform device when the probability that the second cloud code module will time out is greater than the threshold probability.

8. The medium of claim 7, wherein the timeout values comprise a function call timeout value and a sandbox timeout value that is shorter than the function call timeout value.

9. The medium of claim 7, wherein the timeout values comprise a function call timeout value, a cloud code platform device timeout value that is shorter than the function call timeout value, and a sandbox timeout value that is shorter than the cloud code platform device timeout value.

10. The medium of claim 9, wherein cancelling the execution of the first cloud code module comprises detecting that the sandbox timeout value has been exceeded and generating a report from the sandbox to the cloud code platform device.

11. The medium of claim 9, wherein the function call timeout value represents a high hierarchical level of code execution, the cloud code platform device timeout value represents an intermediate hierarchical level of code execution, and the sandbox timeout value represents a low hierarchical level of code execution, and further storing instructions configured to cause the computing device to detect a defect in the execution of the first cloud code module at a relatively lower hierarchical level prior to expiration of a relatively higher hierarchical level'"'"'s timeout, and attempt to cure the defect at the relatively lower hierarchical level using time remaining at the relatively higher hierarchical level.

12. The medium of claim 7, further instructions configured to cause the computing device to:

scan the second cloud code module, the scanning comprising comparing one or more source code patterns in the second cloud code module to one or more source code patterns in the first cloud code module that has previously timed out;

detect that the one or more source code patterns in the second cloud code module match the one or more source code patterns in the first cloud code module; and

reject the second cloud code module based at least in part on the determining.

13. An apparatus comprising:

a network interface configured to receive from a client device a first cloud code module at a cloud platform device;

a processor circuit for the cloud platform device;

association logic executable on the processor circuit and configured to associate the first cloud code module with at least one function call and one or more timeout values, wherein the function call is directed to one or more services provided by the cloud platform device;

monitoring logic executable on the processor circuit and configured to monitor an execution of the first cloud code module associated with the function call in a sandbox;

execution logic executable on the processor circuit and configured to cancel the execution of the first cloud code module upon expiration of at least one of the timeout values;

wherein

the network interface is further configured to receive a second cloud code module for validation; and

the processor circuit is further configured to estimate that a probability of the second cloud code module will time out before completion is greater than a threshold probability, the probability determined based on a similarity between the first cloud code module and the second cloud code module without executing the second cloud code module in the sandbox, and to repair or reject the second cloud code module by the cloud platform device when the probability that the second cloud code module will time out is greater than the threshold probability.

14. The apparatus of claim 13, wherein the timeout values comprise a function call timeout value and a sandbox timeout value that is shorter than the function call timeout value.

15. The apparatus of claim 13, wherein the timeout values comprise a function call timeout value, a cloud code platform device timeout value that is shorter than the function call timeout value, and a sandbox timeout value that is shorter than the cloud code platform device timeout value.

16. The apparatus of claim 15, wherein the function call timeout value represents a high hierarchical level of code execution, the cloud code platform device timeout value represents an intermediate hierarchical level of code execution, and the sandbox timeout value represents a low hierarchical level of code execution, and further comprising detection logic configured to detect a defect in the execution of the first cloud code module at a relatively lower hierarchical level prior to expiration of a relatively higher hierarchical level'"'"'s timeout, and repair logic configured to attempt to cure the defect at the relatively lower hierarchical level using time remaining at the relatively higher hierarchical level.

17. The apparatus of claim 13, wherein

apparatus further comprises scanning logic configured to scan the second cloud code module;

the scanning comprising comparing one or more source code patterns in the second cloud code module to one or more source code patterns in the first cloud code module that has previously timed out, detection logic configured to detect that the one or more source code patterns in the second cloud code module match the one or more source code patterns in the first cloud code module, and rejection logic configured to reject the second cloud code module based at least in part on the determining.