Classifying user-provided code

• US 9,818,139 B1
• Filed: 12/02/2013
• Issued: 11/14/2017
• Est. Priority Date: 12/02/2013
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Shekhar, Shashank, Austgen, Cameron Dailey, Raju, Gurinder, Eerpini, Satish Kumar, Pistolet, Oleg Oleg, Kinast, Seth Bradon, Lau, Teresa Shuk Kwan, Crosley, Jay Austin
• Primary Examiner(s): Goyea, Olusegun
• Application Number:
  US14/094,396
• Time in Patent Office: 1,443 Days
• Field of Search: 709217-228, 709203-206, 726 6, 726 23, 705 2642, 705 35
• CPC Class Codes: G06F 11/00 Error detection; Error correction; Monitoring error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: G06F 15/17 using an input/output type connection, e.g. channel, I/O port
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 40/166 Editing, e.g. inserting or deleting
• CPC Class Codes: G06F 7/00 Methods or arrangements for processing data by operating upon the order or content of the data handled logic circuits H03K19/00
• CPC Class Codes: G06F 9/44 Arrangements for executing specific programs
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/0617 Representative agent

Abstract

Processes for classifying, and dynamically adjusting, tiers for web services are described. Depending on the classification of the web service, support resources (e.g. servers, storage, bandwidth or other communications resources, etc.) may be configured in different ways, such as, for example, sharing resources among one or more of the web services, or isolating the resources for particular web services from those of other web services. Various electronic storefronts may be provided by a service provider to merchants/customers of the service provider. The service provider may classify each of the electronic storefronts for the merchants to a plurality of tiers. Such classifying may be performed, for example, during an enrollment of the merchant with the service provider, and/or during operation of the electronic storefront.

Claims

1. A computer-implemented method, comprising:

providing, by a computer system of a service provider, an electronic storefront to a merchant;

analyzing implementation code included in the electronic storefront to detect one or more characteristics of the implementation code;

classifying the electronic storefront for the merchant to at least one of a plurality of tiers based at least in part on the one or more characteristics of the implementation code, wherein the classifying is performed at least during an enrollment of the merchant with the service provider or during operation of the electronic storefront, and wherein the plurality of tiers includes at least;

a first tier for the electronic storefront encompassing first services including first code provided by the service provider;

a second tier for the electronic storefront encompassing second services including second code provided by the service provider and an authorized solution provider other than the service provider; and

a third tier for the electronic storefront encompassing third services including third code provided by a source other than the service provider and the authorized solution provider;

providing, by the computer system, at least a subset of web resources associated with the service provider to the based at least in part on the classification of the electronic storefront associated with the merchant; and

updating the at least a subset of web resources provided to the merchant by changing a particular web resource of the at least a subset of web resources based at least in part on change in the classification of the electronic storefront-associated with the merchant.

2. The computer-implemented method of claim 1, wherein the third code provided by the source other than the service provider and the authorized solution provider includes modified code based at least in part on the second code provided by the service provider and the authorized solution provider.

3. The computer-implemented method of claim 1, wherein the classifying is performed at least during an enrollment of the merchant with the service provider, and includes receiving a selection from the merchant regarding a particular tier of the plurality of tiers that the electronic storefront will be assigned to.

4. The computer-implemented method of claim 1, wherein the analyzing of the implementation code includes the service provider performing an automated scan of the implementation code to detect whether the implementation code is different from authentic code provided by the service provider.

5. The computer-implemented method of claim 1, wherein the analyzing of the implementation code includes the service provider performing an automated scan to detect malicious code.

6. A system, comprising:

a memory that stores computer-executable instructions; and

a processor configured to access the memory and execute the computer-executable instructions to collectively at least;

provide web services associated with a service provider on behalf of a plurality of entities;

analyze code included in the web services to detect one or more characteristics of the code;

classify at least one of the web services to at least one of a plurality of tiers based at least in part on the one or more characteristics of the code, wherein the plurality of tiers includes at least two of;

a first tier encompassing at least a subset of the web services including first code provided by the service provider;

a second tier encompassing at least a second subset of the web services including second code provided by the service provider and an authorized solution provider other than the service provider; and

a third tier encompassing at least a third subset of the web services including third code provided by a source other than the service provider and the authorized solution provider; and

provide at least a subset of web resources to a particular entity based at least in part on the classification of the web services.

7. The system of claim 6, wherein at least one of the web services is an electronic storefront service of an electronic marketplace.

8. The system of claim 6, wherein the classifying is performed at least during an enrollment of the entity with the service provider or during operation of at least one of the web services.

9. The system of claim 6, wherein the classification of the web services is updated at least during operation of at least one of the web services.

10. The system of claim 6, wherein:

the code is implementation code included in at least one of the web services; and

analyzing the code includes the service provider performing an automated scan of the implementation code, the automated scan configured to identify if the implementation code is different from authentic code provided by the service provider.

11. The system of claim 6, wherein:

the code is implementation code included in at least one of the web services; and

analyzing the code includes the service provider performing an automated scan of the implementation code that detects malicious code.

12. The system of claim 6, wherein the third code is validated by the service provider based at least in part on at least one of an author identification, a designated pipeline through which the third code is received, or an encryption technique applied to the third code.

13. The system of claim 6, wherein particular web resources associated with the third tier are isolated from other web resources associated with the first tier and the second tier.

14. The system of claim 6, wherein the web resources associated with the second tier are assigned to shared resources based at least in part on the service provider.

15. The system of claim 6, further comprising changing a classification of at least one of the web services based at least in part on a detected change in the code for the at least one of the web services.

16. The system of claim 6, further comprising reclassifying the web services to another tier based at least in part on one or more of a detected security feature included in the code for the web service, a detected vulnerability included in the code for the web service, an agreement by the entity to allow periodic scanning of the code for the web service, or a refusal by the entity to allow periodic scanning of the code for the web service.

17. A system, comprising:

a memory that stores computer-executable instructions;

a plurality of servers; and

a processor configured to access the memory and execute the computer-executable instructions to collectively at least;

host web services supported by a service provider;

analyze code included in the web services to detect one or more characteristics of the code;

classify at least one web service of the web services to at least one tier of a plurality of tiers based at least in part on the one or more characteristics of the code; and

provide the at least one web service to an entity based at least in part on the classification of the at least one web service,

wherein first web services classified in a first tier of the plurality of tiers are mutually supported by a first subset of the plurality of servers, and

wherein other web services classified in another tier of the plurality of tiers are supported individually by designated servers in a second subset of the plurality of servers and isolated from the first subset of the plurality of servers and other servers in the second subset of the plurality of servers.

18. The system of claim 17, wherein the computer-executable instructions are further executed to collectively at least classify the web services for the entity to a tier based at least in part on the web services including code provided by an authorized solution provider other than the service provider.

19. The system of claim 18, wherein the web services classified to a tier based at least in part on the web services including code provided by the authorized solution provider are mutually supported by another subset of the plurality of the servers that is exclusive of the first and second subset of the plurality of servers.

20. The system of claim 19, wherein the computer-executable instructions are further executed to collectively at least validate the code provided by the solution provider based at least in part on at least one of an author identification, a designated pipeline through which the code is received, or an encryption technique applied to the code.

21. A computer-readable storage device storing computer-executable instructions that, when executed by one or more computer systems, configure the one or more computer systems to perform operations comprising:

hosting web services supported by a service provider;

analyzing code included in the web services to detect one or more characteristics of the code;

classifying each of the web services to a plurality of tiers based at least in part on the one or more characteristics; and

providing at least a subset of the web services to an entity based at least in part on the classification of the web services, wherein the plurality of tiers includes;

a first tier encompassing first services comprising code provided by the service provider;

a second tier encompassing second services comprising code provided by the service provider and an authorized solution provider other than the service provider; and

a third tier encompassing third services comprising code provided by a source other than the service provider and an authorized solution provider.

22. The computer-readable storage device of claim 21, further comprising instructions that, when executed by the one or more computer systems, further configure the one or more computer systems to perform operations comprising isolating the web services in the third tier from resources of all of the other web services.

23. The computer-readable storage device of claim 21, further comprising instructions that, when executed by the one or more computer systems, further configure the one or more computer systems to perform operations comprising assigning the web services in the second tier to shared resources based at least in part on the solution provider.

24. The computer-readable storage device of claim 21, further comprising instructions that, when executed by the one or more computer systems, further configure the one or more computer systems to perform operations comprising changing a classification of at least one of the web services based at least in part on a detected change in the code for the at least one of the web services.