# US 2021/0279350 A1 · Optimizing allocation of access control identifiers to a container

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0279350 A1
- Document ID: US20210279350A1
- Status: Published application
- Kind: A1
- Application number: 16/808,498
- Filed: 2020-03-04
- Published: 2021-09-09
- Earliest claimed: 2020-03-04
- Assignees: Red Hat, Inc.
- Applicants: Red Hat, Inc.
- Inventors: Daniel Walsh; Giuseppe Scrivano
- Web page: https://patentgrep.com/patent/US20210279350A1

## CPC

- G06F 16/192: {Implementing virtual folder structures}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- G06F 16/254: {Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses}
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Allocation of access control identifiers to a container can be optimized. For example, a system can determine a largest value for a particular type of access control identifier (ACID) associated with a container image by analyzing content of the container image, the container image being for deploying a container. Next, the system can determine an amount of the particular type of ACID to allocate to the container based on the largest value. The system can then allocate the amount of the particular type of ACID to the container.

## Claims

### Claim 1

A computer-implemented method comprising:
determining a largest value for a particular type of access control identifier (ACID) associated with a container image by analyzing content of the container image, the container image being for deploying a container;
determining an amount of the particular type of ACID to allocate to the container based on the largest value; and
allocating the amount of the particular type of ACID to the container.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein the particular type of ACID is a user identifier.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1, wherein the particular type of ACID is a group identifier.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, wherein the content is within a file included in the container image, and wherein determining the largest value comprises:
extracting data from the file;
parsing the data into entries;
determining a plurality of ACIDs of the particular type by analyzing the entries, each of the entries including a respective ACID of the particular type; and
determining the largest value for the particular type of ACID by comparing the plurality of ACIDs to one another.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein determining the largest value comprises:
analyzing attributes of a plurality of files within the container image to determine a plurality of ACIDs of the particular type assigned to the plurality of files, wherein each file among the plurality of files is assigned a respective ACID of the particular type; and
determining the largest value from among the plurality of ACIDs.

### Claim 6 (depends on 1)

The computer-implemented method of claim 1, further comprising:
determining the amount of the particular type of ACID by multiplying the largest value by a scaling factor.

### Claim 7 (depends on 1)

The computer-implemented method of claim 1, further comprising:
determining a minimum number of the particular type of ACID to be allocated to the container;
determining that the amount is less than the minimum number; and
based on determining that the amount is less than the minimum number, increasing the amount to be greater than or equal to the minimum number.

### Claim 8

A system comprising:
a processor; and
a memory comprising instructions that are executable by the processor for causing the processor to:
determine a largest value for a particular type of access control identifier (ACID) associated with a container image by analyzing content of the container image, the container image being for deploying a container;
determine an amount of the particular type of ACID to allocate to the container based on the largest value; and
allocate the amount of the particular type of ACID to the container.

### Claim 9 (depends on 8)

The system of claim 8, wherein the particular type of ACID is a user identifier.

### Claim 10 (depends on 8)

The system of claim 8, wherein the particular type of ACID is a group identifier.

### Claim 11 (depends on 8)

The system of claim 8, wherein the content is within a file included in the container image, and wherein the memory further includes instructions that are executable by the processor for causing the processor to determine the largest value by:
extracting data from the file;
parsing the data into entries;
determining a plurality of ACIDs of the particular type by analyzing the entries, each of the entries including a respective ACID of the particular type; and
determining the largest value for the particular type of ACID by comparing the plurality of ACIDs to one another.

### Claim 12 (depends on 8)

The system of claim 8, wherein the memory further includes instructions that are executable by the processor for causing the processor to determine the largest value by:
analyzing attributes of a plurality of files within the container image to determine a plurality of ACIDs of the particular type assigned to the plurality of files, wherein each file among the plurality of files is assigned a respective ACID of the particular type; and
determining the largest value from among the plurality of ACIDs.

### Claim 13 (depends on 8)

The system of claim 8, wherein the memory further includes instructions that are executable by the processor for causing the processor to:
determine the amount of the particular type of ACID by multiplying the largest value by a scaling factor.

### Claim 14 (depends on 8)

The system of claim 8, wherein the memory further includes instructions that are executable by the processor for causing the processor to:
determine a minimum number of the particular type of ACID to be allocated to the container;
determine that the amount is less than the minimum number; and
based on determining that the amount is less than the minimum number, increase the amount to be greater than or equal to the minimum number.

### Claim 15

A non-transitory computer-readable medium including program code that is executable by a processor for causing the processor to:
determine a largest value for a particular type of access control identifier (ACID) associated with a container image by analyzing content of the container image, the container image being for deploying a container;
determine an amount of the particular type of ACID to allocate to the container based on the largest value; and
allocate the amount of the particular type of ACID to the container.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the particular type of ACID is a user identifier.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the particular type of ACID is a group identifier.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the content is within a file included in the container image, and further comprising program code that is by the processor for causing the processor to determine the largest value by:
extracting data from the file;
parsing the data into entries;
determining a plurality of ACIDs of the particular type by analyzing the entries, each of the entries including a respective ACID of the particular type; and
determining the largest value for the particular type of ACID by comparing the plurality of ACIDs to one another.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, further comprising program code that is executable by the processor for causing the processor to determine the largest value by:
analyzing attributes of a plurality of files within the container image to determine a plurality of ACIDs of the particular type assigned to the plurality of files, wherein each file among the plurality of files is assigned a respective ACID of the particular type; and
determining the largest value from among the plurality of ACIDs.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, further comprising program code that is executable by the processor for causing the processor to:
determine the amount of the particular type of ACID by multiplying the largest value by a scaling factor.