Azero trust access controller

A method of securing data in a computer network, the method comprising:

• receiving a request for a file-directed action, the request including an identifier of a user associated with the request, an identifier of a file for the file-directed action, and at least one indication of a mode of access of the file;
• determining a process-type entity for computer executable action code representing the file-directed action based on the at least one indication of the mode of access of the file;
• determining a data-type entity representing the file based on the identifier of the file;
• generating a mediated covenant of association among a user-type entity representing the user based on the identifier of the user and the process-type entity representing the file-directed action, the covenant produced by node-by-node informatic convolution of a hierarchy of informational nodes present in profiles and in ancillary data of each of the user-type entity and the process-type entity, wherein the covenant expresses settings for executing the action code on behalf of the user;
• producing a computer security event-specific computing object for constraining the file-directed action, the constraining based at least in part on the settings expressed by the covenant and a set of file access constraints from a profile of the data-type entity, wherein the profile of the data-type entity is decrypted and the set of file access constraints are identified in the decrypted profile based on the at least one indication of the mode of access of the file;
• and
• facilitating an instance of access by the user to the file via the action code for a set of privileges that are consistent among the settings expressed by the covenant and the set of file access constraints, wherein constraints on execution of the action code are enforceable based on the computer security event-specific computing object.

A method of securing a computing resource in a computer network, the method comprising:

• receiving a request for a computing resource-directed action, the request including an identifier of a user, an identifier of a computing resource, and at least one indication of an access mode;
• determining a process-type entity for computer executable action code representing the computing resource-directed action based on the at least one indication of the access mode;
• determining a data-type entity representing the computing resource based on the identifier of the computing resource;
• generating a mediated covenant of association among a user-type entity representing the user based on the identifier of the user, the process-type entity, and the data-type entity, the covenant produced by informatic convolution of informational nodes present in profiles of each of the user-type entity, the process-type entity, and the data-type entity, wherein the covenant expresses settings for executing an instance of the computing resource-directed action on behalf of the user;
• producing an event-specific computing object for constraining the computing resource-directed action, the constraining based at least in part on the settings expressed by the covenant and a set of ancillary data associated with the data-type entity;
• and
• facilitating access by the user to the computing resource via the access mode for a set of privileges that are consistent among the settings of the covenant and the set of ancillary data, wherein constraints on execution of the computing resource-directed action are enforceable based on the event-specific computing object.

A method by which proof code secures a computing resource, the method comprising:

• receiving a request for taking one or more actions upon data accessible over a computing network, the request identifying a user of the computing network and the data;
• determining a process-type entity for computer executable action code representing the one or more actions of the request;
• determining a data-type entity representing the data based on the request;
• producing an instance of proof code for constraining taking the one or more actions, the instance of proof code performing informatic convolution of one or more portions of a profile of each of a user-type entity of the user, the data-type entity, and the process-type entity, wherein the portion of the profile of data-type entity is determined by data access functions of the executable action code;
• and
• facilitating access by the computer executable action code on behalf of the user to the data such that an impact by the one or more actions on the data is constrained by the proof code.