Security system for computing resources pre-releases

A user computer system comprising:

• a processor;
• a communication interface accessible by the processor for communicating with a remote computer system for downloading a software pre-release associated with a privilege set, the privilege set including a set of user computer systems and the pre-release computing resource, and the privilege set having a security risk level of the software pre-release indicating an operational layer of the user computer system which the pre-release computing resource changes;
• and
• a memory accessible by the processor, the memory storing software for programming the processor to obtain a privilege set identifier from the remote computer system and store the identifier in the memory and for storing the downloaded software pre-release;
• the privilege set identifier indicating a membership of the user computer system in the privilege set, the membership granting permission to run the software pre-release;
• the memory storing the software pre-release for programming the processor to verify the user computer system has membership in the privilege set associated with the downloaded software pre-release based on a match of the privilege set identifier and a resource privilege set identifier included in the downloaded software pre-release responsive to a request for execution of the software pre-release, and stopping execution of the software pre-release responsive to the user computer system lacking membership.

A method for automatic provisioning of privilege sets comprising:

• associating a first pre-release computing resource with a first privilege set in a hierarchy of privilege sets by generating a resource privilege set identifier for the first pre-release computing resource, each privilege set in the hierarchy including a set of user computer systems and one or more pre-release computing resources having a security risk level defined for the level of each privilege set in the hierarchy, each security risk level indicating an operational layer of a respective computer system in the respective set of user computer systems which the respective one or more pre-release computing resources of the respective privilege set changes;
• generating a privilege set identifier indicating membership in the first privilege set for each user computer system which satisfies membership criteria for the first privilege set;
• distributing the privilege set identifier and the first pre-release computing resource to each user computer system which satisfies the membership criteria for the first privilege set;
• determining whether the privilege set identifier matches the resource privilege set identifier for the first pre-release computing resource;
• and
• responsive to the privilege set identifier matching the resource privilege set identifier for the first pre-release computing resource, executing the first pre-release computing resource.