US 2022/0012351 A1 · REAL-TIME FEATURE LEVEL SOFTWARE SECURITY

Abstract

Systems and techniques for real-time feature level software security are described herein. A request may be received from a computing device for data from the feature of the software application. The request for data may include authorization information of a user of the computing device. It may be identified that the feature of the software application contains code containing a reference to a security configuration service. A security configuration may be determined for the feature of the software application by comparing a resource identifier and a feature identifier of the feature of the software application to a set of security configurations of the security configuration service. The security configuration may provide access rules for the feature of the software application. A response may be sent to the computing device based on a comparison of the received authorization information of the user of the computing device to the determined security configuration.

Claims20

Dependent claims

A system for providing security for a feature of a software application in real-time, the system comprising:

at least one processor;
and
a memory including instructions that, when executed by the at least one processor, cause the at least one processor to:
receive a request, from a computing device, for data from the feature of the software application, the feature of the software application including code containing a reference to a security configuration service;
determine a security configuration for the feature of the software application by comparing identifiers of the feature to a set of security configurations of the security configuration service, the security configuration providing access rules for the feature of the software application;
determine, using the security configuration, that a first data item identified in the request for data should be encrypted before transmission and a second data item identified in the request for data should be transmitted unencrypted;
encrypt the first data item using an encryption algorithm;
and
send a response including the encrypted first data item and the unencrypted second data item to the computing device based on the determined security configuration.

6 more elements

A non-transitory computer readable medium including instructions for providing security for a feature of a software application in real-time that, when executed by at least one processor, cause the at least one processor to:

receive a request, from a computing device, for data from the feature of the software application, the feature of the software application including code containing a reference to a security configuration service;
determine a security configuration for the feature of the software application by comparing identifiers of the feature to a set of security configurations of the security configuration service, the security configuration providing access rules for the feature of the software application;
determine, using the security configuration, that a first data item identified in the request for data should be encrypted before transmission and a second data item identified in the request for data should be transmitted unencrypted;
encrypt the first data item using an encryption algorithm;
and
send a response including the encrypted first data item and the unencrypted second data item to the computing device based on the determined security configuration.

3 more elements

Dependencies are inferred from the claim text.

Real-time feature level software security

Life of this patent

Real-time feature level software security

Life of this patent

Abstract

Claims20