SECURING COMPUTING RESOURCES

• US 20170366532A1
• Filed: 06/20/2016
• Published: 12/21/2017
• Est. Priority Date: 06/20/2016
• Status: Active Grant

• Current Assignee: Princeton Scitech, LLC
• Original Assignee: Princeton Scitech, LLC
• Inventors: Garfinkle, Richard, Garfinkle, Norton
• Granted Patent: US 10,129,244 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Various examples are directed to systems and methods for providing access to computing resources. A resource system may receive an access request from a first user. The access request may comprise resource data describing a computing resource and function data describing a requested function to be performed on the computing resource. The resource system may determine that credential data provided by the first user is valid. The resource system may identify secondary data for the access request and generate an access object based at least in part on access object fragment data and the secondary data. The resource system may execute the access object to enable performance of the requested function on the computing resource.

Claims

1. A method for providing access to computing resources, comprising:

receiving, by a resource system, an access request from a first user, wherein the access request comprises resource data describing a computing resource, and function data describing a requested function to be performed on the computing resource, wherein the resource system comprises at least one processor and memory in communication with the at least one processor;

determining, by the resource system, that credential data provided by the first user is valid;

identifying, by the resource system, secondary data for the access request;

generating, by the resource system, an access object based at least in part on access object fragment data and the secondary data; and

executing the access object, by the resource system, to enable performance of the requested function on the computing resource.

2. The method of claim 1, wherein the access request is received via a first user computing device, and wherein identifying the secondary data comprises querying the first user computing device.

3. The method of claim 1, wherein the access request also includes the secondary data.

4. The method of claim 1, wherein the secondary data comprises a replacement string, and wherein generating the access object comprises:

identifying in the access object fragment data a placeholder string;

replacing the placeholder string with the replacement string to generate source code for the access object; and

generating object code for the access object based at least in part on the source code for the access object.

5. The method of claim 4, wherein the replacement string includes text describing a plurality of data files to be readable by the first user, and wherein executing the access object to perform the requested function on the computing resource comprises reading a first data file of the plurality of data files.

6. The method of claim 1, wherein the secondary data comprises a decryption key, and wherein executing the access object to perform the requested function on the computing resource comprises decrypting the computing resource based at least in part on the decryption key.

7. The method of claim 1, further comprising:

generating a user interface page comprising an indication of the computing resource and a selectable indication of the requested function; and

before executing the access object to perform the requested function on the computing resource, determining that the first user has selected the selectable indication of the requested function.

8. The method of claim 1, further comprising:

receiving a second resource access request from the first user, the second resource access request comprising second credential data for the first user;

determining that the second credential data is valid;

identifying second secondary data for the second resource access request; and

executing the access object to generate a second access object based at least in part on second access object fragment data and the second secondary data.

9. The method of claim 8, wherein the second resource access request also comprises second function data describing a second requested function to be performed on the computing resource, further comprising executing the second access object to perform the second requested function on the computing resource.

10. The method of claim 8, wherein the second resource access request also comprises second resource data describing a second computing resource, further comprising executing the second access object to act upon the second computing resource.

11. The method of claim 8, further comprising:

executing the access object to generate a user interface comprising a credential field; and

receiving the second secondary data via the credential field.

12. The method of claim 1, further comprising receiving the secondary data from a third computing system.

13. A system for securing computing resources comprising:

a computing device comprising at least one processor and a memory in communication with the at least one processor, wherein the computing device is programmed to;

receive an access request from a first user, wherein the access request comprises resource data describing a computing resource, function data describing a requested function to be performed on the computing resource;

determine that credential data provided by the first user is valid;

determine secondary data for the access request;

generate an access object based at least in part on access object fragment data and the secondary data; and

execute the access object to enable performance of the requested function on the computing resource.

14. The system of claim 13, wherein the access request is received via a first user computing device, and wherein identifying the secondary data comprises querying the first user computing device.

15. The system of claim 13, wherein the access request also includes the secondary data.

16. The system of claim 13, wherein the secondary data comprises a replacement string, and wherein generating the access object comprises:

identifying in the access object fragment a placeholder string;

replacing the placeholder string with the replacement string to generate source code for the access object; and

generating object code for the access object based at least in part on the source code for the access object.

17. The system of claim 16, wherein the replacement string includes text describing a plurality of data files to be readable by the first user, and wherein executing the access object to perform the requested function on the computing resource comprises reading a first data file of the plurality of data files.

18. The system of claim 13, wherein the secondary data comprises a decryption key, and wherein executing the access object to perform the requested function on the computing resource comprises decrypting the computing resource based at least in part on the decryption key.

19. The system of claim 13, wherein the computing device is further programmed to:

generate a user interface page comprising an indication of the computing resource and a selectable indication of the requested function; and

before executing the access object to perform the requested function on the computing resource, determine that the first user has selected the selectable indication of the requested function.

20. The system of claim 13, wherein the computing device is further programmed to:

receive a second resource access request from the first user, the second resource access request comprising second credential data for the first user;

determine that the second credential data is valid;

identify second secondary data for the second resource access request; and

execute the access object to generate a second access object based at least in part on second access object fragment data and the second secondary data.

21. The system of claim 20, further comprising:

executing the access object to generate a user interface comprising a credential field; and

receiving the second secondary data via the credential field.