Method and system for secure container application framework

A method of generating a secure container to perform a software application on an edge device, comprising:

• receiving, by a security daemon operating on a processor of the edge device, a security policy for the software application from a secure container platform;
• retrieving, by the security daemon, a license associated with the software application;
• determining, by the security daemon, permissions of the software application based on the retrieved license;
• creating, by the security daemon, a user or group account and updating a system service access-control list (ACL) based on the received security policy and the determined permissions;
• obtaining, by the security daemon, one or more application images of the software application;
• obtaining, by the security daemon, one or more security images for the software application;
• generating, by the security daemon, a container package that includes the one or more application images and the one or more security images;
• generating and sending, by the security daemon, a policy ready message that includes the generated container package to the secure container platform in response to creating the user or group account and updating the system service ACL, the secure container platform generating a secure container and applying the security policy to the secure container based on information included in the policy ready message;
• assigning, by the security daemon, hardware resources and system resources to the secure container;
• and
• generating and sending, by the security daemon, a policy applied message to the secure container platform in response to assigning the hardware resources and the system resources to the secure container.

A non-transitory computer readable storage medium having stored thereon processor-executable software instructions configured to cause a processor in an edge device to perform operations for generating a secure container to perform a software application on the edge device, the operations comprising:

• receiving, by a security daemon, a security policy for the software application from a secure container platform;
• retrieving, by the security daemon, a license associated with the software application;
• determining, by the security daemon, permissions of the software application based on the retrieved license;
• creating, by the security daemon, a user or group account and updating a system service access-control list (ACL) based on the received security policy and the determined permissions;
• obtaining, by the security daemon, one or more application images of the software application;
• obtaining, by the security daemon, one or more security images for the software application;
• generating, by the security daemon, a container package that includes the one or more application images and the one or more security images;
• generating and sending, by the security daemon, a policy ready message that includes the generated container package to the secure container platform in response to creating the user or group account and updating the system service ACL, the secure container platform generating a secure container and applying the security policy to the secure container based on information included in the policy ready message;
• assigning, by the security daemon, hardware resources and system resources to the secure container;
• and
• generating and sending, by the security daemon, a policy applied message to the secure container platform in response to assigning the hardware resources and the system resources to the secure container.