US 11,907,229 B2Granted

System and method for platform-independent access bindings

AssigneeGM Cruise Holdings LLC

InventorsStephen James Day, Seth Alexander Bunce, Matthew John Landis, Jonathan Langefeld, Jason Vrablik, Cheng Pan

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system may include one or more tangible, non-transitory computer-readable media having stored thereon instructions, the instructions when executed to instruct one or more processors to: receive a platform-independent access binding data structure (a PIAB data structure), the PIAB data structure comprising a platform-independent representation of a subject class, a verb, an object, and a binding comprising a permission for the subject class to perform the verb on the object; convert the PIAB data structure to a first platform-specific binding for a first target platform; and cause the first platform-specific binding to be implemented on the first target platform.

Claims20

Dependent claims

One or more non-transitory computer-readable media having stored thereon instructions, the instructions when executed to instruct one or more processors to:

receive, at a binding arbiter, a platform-independent access binding (PIAB) data structure, the PIAB data structure comprising a first permission for a subject class to perform a first verb on a first object on a first target platform, and a second permission for the subject class to perform a second verb on a second object on a second target platform;
map, by the binding arbiter, the first verb to a first platform action permission specific to the first target platform;
map, by the binding arbiter, the second verb to a second platform action permission specific to the second target platform;
receive, from a user at the binding arbiter, a request to execute a first task of a software build pipeline on the first target platform and to execute a second task of the software build pipeline on the second target platform, the first task comprising setting up a container by downloading an operating system image and a development environment image, the second task comprising deploying a microservice on the container by pulling and compiling source files;
authenticate, by the binding arbiter, the user;
determine, by the binding arbiter, that the user is associated with the subject class;
authenticate, by the binding arbiter, with the first target platform to obtain the first platform action permission;
authenticate, by the binding arbiter, with the second target platform to obtain the second platform action permission;
execute, by the user, the first task and the second task of the pipeline on the first target platform and the second target platform respectively;
after the first task is executed on the first target platform, revoke, by the binding arbiter, authentication with the first target platform;
and
after the second task is executed on the second target platform, revoke, by the binding arbiter, authentication with the second target platform.

9 more elements

A binding arbiter, comprising:

a processor circuit and a memory;
and
instructions encoded within the memory to instruct the processor circuit to:
receive a platform-independent access binding (PIAB) data structure, the PIAB data structure comprising a first permission for a subject class to perform a first verb on a first object on a first target platform, and a second permission for the subject class to perform a second verb on a second object on a second target platform;
receive, from a user a request to execute a first task of a software build pipeline on the first target platform and to execute a second task of the software build pipeline on the second target platform, the first task comprising setting up a container by downloading an operating system image and a development environment image, the second task comprising deploying a microservice on the container by pulling and compiling source files;
authenticate the user;
determine that the user is associated with the subject class;
authenticate with the first target platform to obtain the first permission;
authenticate with the second target platform to obtain the second permission;
after the first task is executed on the first target platform, revoke authentication with the first target platform;
and
after the second task is executed on the second target platform, revoke authentication with the second target platform.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/710,310Filed 31 Mar 2022
Published: US 2023/0315739 A15 Oct 2023
Granted: 20 Feb 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 16/2457
Query processing: with adaptation to user needs
G06F 21/45
Authentication, i.e. establishing the identity or authorisation of security principals: structures or tools for the administration of authentication
G06F 16/2291
Indexing; Data structures therefor; Storage structures: user-Defined Types; Storage management thereof
G06F 16/24524
Query translation: access plan code generation and invalidation; Reuse of access plans

Family

US 2023/0315739 A1Pre-grant publication · published 5 Oct 2023
US 11,907,229 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key