Access control management for systems
AssigneeDell Products L.P.
InventorsNISAN HAIMOV, BORIS SHPILYUCK, IGOR DUBROVSKY, MAXIM BALIN
Life of this patent
Estimating the term…
Abstract
Methods and systems for managing the operation of data processing systems are disclosed. To manage the operation of the data processing systems, access control standards for software may be enforced during development and/or deployment of software. The access control standards may indicate the extent of access controls for data that are to be in place for various pieces of software. The access control standards may also indicate a level of consistency in the sources of truth for permissions enforced by the access controls.
Claims20
A method for securing a deployment comprising data processing systems, the method comprising:
- identifying software for deployment to a data processing system of the data processing systems;
- based on the identifying of the software:
- identifying at least one certificate for the software;
- making a determination regarding whether the at least one certificate establishes that the software meets access control standards for the data processing system;
- in a first instance of the determination where the at least one certificate establishes that the software meets the access control standards for the data processing system:
- deploying the software to the data processing system, and
- providing computer implemented services with the data processing system using the software;
- and
- in a second instance of the determination where the at least one certificate does not establish that the software meets the access control standards for the data processing system:
- rejecting the software for deployment, and
- providing computer implemented services using the data processing system without the software.
A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause operations for securing a deployment comprising data processing systems to be performed, the operations comprising:
- identifying software for deployment to a data processing system of the data processing systems;
- based on the identifying of the software:
- identifying at least one certificate for the software;
- making a determination regarding whether the at least one certificate establishes that the software meets access control standards for the data processing system;
- in a first instance of the determination where the at least one certificate establishes that the software meets the access control standards for the data processing system:
- deploying the software to the data processing system, and
- providing computer implemented services with the data processing system using the software;
- and
- in a second instance of the determination where the at least one certificate does not establish that the software meets the access control standards for the data processing system:
- rejecting the software for deployment, and
- providing computer implemented services using the data processing system without the software.
A management system, comprising:
- a processor;
- and
- a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations securing software architectures, the operations comprising:
- identifying software for deployment to a data processing system of the data processing systems;
- based on the identifying of the software:
- identifying at least one certificate for the software;
- making a determination regarding whether the at least one certificate establishes that the software meets access control standards for the data processing system;
- in a first instance of the determination where the at least one certificate establishes that the software meets the access control standards for the data processing system:
- deploying the software to the data processing system, and
- providing computer implemented services with the data processing system using the software;
- and
- in a second instance of the determination where the at least one certificate does not establish that the software meets the access control standards for the data processing system:
- rejecting the software for deployment, and
- providing computer implemented services using the data processing system without the software.
Dependencies are inferred from the claim text.