CONTAINERIZED APPLICATIONS WITH SECURITY LAYERS

• US 20150379287A1
• Filed: 10/22/2014
• Published: 12/31/2015
• Est. Priority Date: 06/25/2014
• Status: Abandoned Application

• Current Assignee: Defend7, Inc.
• Original Assignee: Defend7, Inc.
• Inventors: Mathur, Gaurav, Sreekanti, Vibhav
• Application Number:
  US14/520,544
• Publication Number:
  US 20150379287A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Systems, methods, and software described herein provision secure application containers. In one example, a method of operating a provisioning system to provision secure application containers includes identifying an application to provision. The method further includes, in response to identifying the application, provisioning a secure application container for the application, the secure application container comprising a security layer for the application and the application.

Claims

1. A method of operating a provisioning system to provision secure application containers, the method comprising:

identifying an application to provision;

in response to identifying the application, provisioning a secure application container for the application, the secure application container comprising a security layer for the application and the application.

2. The method of claim 1 wherein the security layer for the application comprises an intermediary security layer configured to act as a data intermediary between the application and at least one process, device, or storage system external to the secure application container.

3. The method of claim 1 further comprising:

identifying a second application to provision;

in response to identifying the second application, provisioning a second secure application container for the second application, the second secure application container comprising a second security layer for the second application and the second application.

4. The method of claim 1 further comprising:

transferring the secure application container to a host computing device.

5. The method of claim 1 further comprising:

storing the secure application container in a storage repository, the storage repository accessible by one or more host computing devices.

6. The method of claim 1 wherein the application comprises a front-end application.

7. The method of claim 1 wherein the application comprises a back-end application.

8. The method of claim 1 wherein the security layer comprises one or more security modules configured for the application.

9. The method of claim 8 wherein the one or more security modules comprise at least encryption, firewall, and storage interface modules for the application.

10. A computer apparatus to provision secure application containers, the computer apparatus comprising:

processing instructions that direct a provisioning computing system, when executed by the provisioning computing system, to;

identify an application to provision; and

in response to identifying the application, provision the secure application container for the application, the secure application container comprising a security layer for the application and the application; and

one or more non-transitory computer readable media that store the processing instructions.

11. The computer apparatus of claim 10 wherein the security layer for the application comprises an intermediary security layer configured to act as a data intermediary between the application and at least one process, device, or storage system external to the secure application container.

12. The computer apparatus of claim 10 wherein the processing instructions further direct the provisioning computing system to:

identify a second application to provision; and

in response to identifying the second application, provision a second secure application container for the second application, the second secure application container comprising a second security layer for the second application and the second application.

13. The computer apparatus of claim 10 wherein the processing instructions further direct the provisioning computing system to transfer the secure application container to a host computing device.

14. The computer apparatus of claim 10 wherein the processing instructions further direct the provisioning computing system to store the secure application container in a storage repository, the storage repository accessible by one or more host computing devices.

15. The computer apparatus of claim 10 wherein the application comprises a front-end application.

16. The computer apparatus of claim 10 wherein the application comprises a back-end application.

17. The computer apparatus of claim 10 wherein the security layer comprises one or more security modules configured for the application.

18. The computer apparatus of claim 10 wherein the one or more security modules comprise at least encryption, firewall, and storage interface modules for the application.