SECURITY MODEL FOR LIVE APPLICATIONS IN A CLOUD COLLABORATION PLATFORM

• US 20200133650A1
• Filed: 01/31/2019
• Published: 04/30/2020
• Est. Priority Date: 10/26/2018
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: TUNG, Julie, NAYAK, Rajeev, GIBBS, Kevin, TAYLOR, Bret, SU, Yang, BOTWICK, Nate, RAZAVI, Pedram, GOODFRIEND, Scott, MAHDI, Nikrad, CHUNG, Andy, HAMLIN, Drew, LINEHAN, Patrick, WESTWOOD, Sophia, SIMON, Lindsey, BANGA, Shrey, BERLIN, Diana
• Granted Patent: US 10,809,991 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 12/0871 Allocation or management of cache space
• CPC Class Codes: G06F 16/172 Caching, prefetching or hoarding of files
• CPC Class Codes: G06F 16/1734 Details of monitoring file system events, e.g. by the use of hooks, filter drivers, logs
• CPC Class Codes: G06F 16/1774 Locking methods, e.g. locking methods for file systems allowing shared and concurrent access to files
• CPC Class Codes: G06F 16/252 between a Database Management System and a front-end application
• CPC Class Codes: G06F 16/901 Indexing; Data structures therefor; Storage structures for retrieval from the web G06F16/951
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/563 by source code analysis
• CPC Class Codes: G06F 40/166 Editing, e.g. inserting or deleting
• CPC Class Codes: G06F 8/34 Graphical or visual programming
• CPC Class Codes: G06F 8/36 Software reuse
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/451 Execution arrangements for user interfaces
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 63/168 : above the transport layer
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/4015 : where at least one of the additional parallel sessions is real time or time sensitive, e.g. white board sharing, collaboration or spawning of a subconference
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Disclosed herein are system, method, and computer program product embodiments for providing a security model to customizable live applications in a cloud collaboration platform. The security approach may dedicate a frame to each live application, serving the frame from a different domain than a document in which the live application is embedded. This approach ensures that more stringent security requirements may be required of the live application and allows the data presented to the live application to be narrowly tailored. The security model may further leverage sandbox attributes and content-security policies to restrict the behavior of sandboxed and non-sandboxed live applications in accordance with best security practices.

Claims

1. A computer-implemented method, comprising:

instantiating, by a cloud collaboration platform, a live application comprising a type and a developer in a document in the cloud collaboration platform within a frame;

associating, by the cloud collaboration platform, the live application with a subdomain based on the type and the developer; and

serving, by the cloud collaboration platform, the frame from a different domain than the document, wherein the different domain includes the subdomain;

wherein the instantiating, associating, and serving are performed by one or more computers.

2. The method of claim 1, further comprising:

applying, by the cloud collaboration platform, a sandbox attribute in the frame, wherein the sandbox attribute limits actions performable by the live application within the frame.

3. The method of claim 1, further comprising:

applying, by the cloud collaboration platform, a content-security policy to the frame, wherein the content-security policy limits content outside of the cloud collaboration platform that the live application can access.

4. The method of claim 1, further comprising:

employing, by the cloud collaboration platform, a bridge application programming interface to facilitate communication between the frame and the document.

5. The method of claim 1, further comprising:

receiving, by the cloud collaboration platform, an input in the live application in the frame;

processing, by the cloud collaboration platform, the input to determine auto-complete values; and

rendering, by the cloud collaboration platform, a response to the input in the frame including the auto-complete values.

6. The method of claim 1, further comprising:

sharing, by the cloud collaboration platform, account information and document information with the live application; and

restricting, by the cloud collaboration platform, access to other data used by the cloud collaboration platform.

7. The method of claim 1, further comprising:

receiving, by the cloud collaboration platform, an exception for an external resource for the live application;

adding, by the cloud collaboration platform, the exception to a content-security policy applied to the frame; and

accessing, by the cloud collaboration platform, the external resource to retrieve the resource.

8. A system, comprising:

a memory; and

at least one processor coupled to the memory and configured to;

instantiate a live application comprising a type and a developer in a document in a cloud collaboration platform within a frame;

associate the live application with a subdomain based on the type and the developer; and

serve the frame from a different domain than the document, wherein the different domain includes the subdomain.

9. The system of claim 8, the at least one processor further configured to:

apply a sandbox attribute in the frame, wherein the sandbox attribute limits actions performable by the live application within the frame.

10. The system of claim 8, the at least one processor further configured to:

apply a content-security policy to the frame, wherein the content-security policy limits content outside of the cloud collaboration platform that the live application can access.

11. The system of claim 8, the at least one processor further configured to:

employ a bridge application programming interface to facilitate communication between the frame and the document.

12. The system of claim 8, the at least one processor further configured to:

receive an input in the live application in the frame;

process the input to determine auto-complete values; and

render a response to the input in the frame including the auto-complete values.

13. The system of claim 8, the at least one processor further configured to:

receive an input in the live application in the frame;

process the input to determine auto-complete values; and

render a response to the input in the frame including the auto-complete values.

14. The system of claim 8, the at least one processor further configured to:

receive an exception for an external resource for the live application;

add the exception to a content-security policy applied to the frame; and

access the external resource to retrieve the resource.

15. A non-transitory computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:

instantiating a live application comprising a type and a developer in a document in a cloud collaboration platform within a frame;

associating the live application with a subdomain based on the type and the developer; and

serving the frame from a different domain than the document, wherein the different domain includes the subdomain.

16. The non-transitory computer-readable device of claim 15, the operations further comprising:

applying a sandbox attribute in the frame, wherein the sandbox attribute limits actions performable by the live application within the frame.

17. The non-transitory computer-readable device of claim 15, the operations further comprising:

applying a content-security policy to the frame, wherein the content-security policy limits content outside of the cloud collaboration platform that the live application can access.

18. The non-transitory computer-readable device of claim 15, the operations further comprising:

employing a bridge application programming interface to facilitate communication between the frame and the document.

19. The non-transitory computer-readable device of claim 15, the operations further comprising:

receiving an input in the live application in the frame;

processing the input to determine auto-complete values; and

rendering a response to the input in the frame including the auto-complete values.

20. The non-transitory computer-readable device of claim 15, the operations further comprising:

receiving an input in the live application in the frame;

processing the input to determine auto-complete values; and

rendering a response to the input in the frame including the auto-complete values.