Secure architecture for 3rd-party management of organizational application resources

A processing circuitry-based method of compromise-resistant configuration of an application, the method comprising:

• a) utilizing an authenticated secure communication channel to a configuration agent, the configuration agent having access to one or more secrets, associated with a first organization, usable for configuring respective applications of the first organization;
• b) receiving, from a first user, a request of configuration of an application, the request including a cryptographic signature of a first user of the first organization, the signature utilizing a key derivative of a mutual authentication between the first user and the configuration agent;
• c) deriving, from the received request of configuration of the first user, a one or more application configuration commands;
• d) transmitting, to the application configuration agent, via the authenticated secure communication channel, at least:
• i) at least part of the request of configuration of the first user, wherein the at least part of the request comprises the cryptographic signature, and
• ii) at least one of the derived application configuration commands;
• thereby providing an attestation of integrity to application configuration commands.

A computer program product comprising a computer readable non-transitory storage medium containing program instructions, which program instructions when read by a processor, cause the processing circuitry to perform a method of compromise-resistant configuration of an application, the method comprising:

• a) utilizing an authenticated secure communication channel to a configuration agent, the configuration agent having access to one or more secrets, associated with a first organization, usable for configuring respective applications of the first organization;
• b) receiving, from a first user, a request of configuration of an application, the request including a cryptographic signature of a first user of the first organization, the signature utilizing a key derivative of a mutual authentication between the first user and the configuration agent;
• c) deriving, from the received request of configuration of the first user, a one or more application configuration commands;
• d) transmitting, to the application configuration agent, via the authenticated secure communication channel, at least:
• i) at least part of the request of configuration of the first user, wherein the at least part of the request comprises the cryptographic signature, and
• ii) at least one of the derived application configuration commands;
• thereby providing an attestation of integrity to application configuration commands.

A system of compromise-resistant configuration of an application, the system comprising a processing circuitry configured to:

• a) maintain application-specific configuration secrets of a first organization, and utilize an authenticated secure communication channel to a manager;
• b) perform mutual authentication to establish a secure association with a first user of the first organization;
• c) receive, from the manager, at least:
• i) a request of the first user of application configuration, the request including a cryptographic signature of the first user, and
• ii) one or more commands of configuring a first application;
• d) responsive to:
• i) based on the secure association with the first user, cryptographically verifying the first user as the origin of the request, and verifying the message integrity of the request, and that the signature of the request is of the first user, and
• ii) verifying that the one or more commands of configuring are technically appropriate to performing the received request of the first user,
• utilize a secret specific to the first application to configure the first application, in accordance with the one or more commands.

A processing circuitry-based method of compromise-resistant configuration of an application, the method comprising:

• a) maintaining application-specific configuration secrets of a first organization, and utilizing an authenticated secure communication channel to a manager;
• b) performing mutual authentication to establish a secure association with a first user of the first organization;
• c) receiving, from the manager, at least:
• i) a request of the first user of application configuration, the request including a cryptographic signature of the first user, and
• ii) one or more commands of configuring a first application;
• d) responsive to:
• i) based on the secure association with the first user, cryptographically verifying the first user as the origin of the request, and verifying the message integrity of the request, and that the signature of the request is of the first user, and
• ii) verifying that the one or more commands of configuring are technically appropriate to performing the received request of the first user,
• utilizing a secret specific to the first application to configure the first application, in accordance with the one or more commands.

A computer program product comprising a computer readable non-transitory storage medium containing program instructions, which program instructions when read by a processor, cause the processing circuitry to perform a method of compromise-resistant configuration of an application, the method comprising:

• a) maintaining application-specific configuration secrets of a first organization, and utilizing an authenticated secure communication channel to a manager;
• b) performing mutual authentication to establish a secure association with a first user of the first organization;
• c) receiving, from the manager, at least:
• i) a request of the first user of application configuration, the request including a cryptographic signature of the first user, and
• ii) one or more commands of configuring a first application;
• d) responsive to:
• i) based on the secure association with the first user, cryptographically verifying the first user as the origin of the request, and verifying the message integrity of the request, and that the signature of the request is of the first user, and
• ii) verifying that the one or more commands of configuring are technically appropriate to performing the received request of the first user.
• utilizing a secret specific to the first application to configure the first application, in accordance with the one or more commands.