Method and system for secure delivery of information to computing environments

    公开(公告)号:US10050997B2

    公开(公告)日:2018-08-14

    申请号:US15854571

    申请日:2017-12-26

    Applicant: Intuit Inc.

    Abstract: A method and system for protecting and repairing a current virtual asset from damage by potential security threats, according to one embodiment. The method and system include monitoring a current a current virtual asset for potential security threats, with a virtual asset agent, according to one embodiment. The method and system include determining a severity of the potential security threats that are identified by the virtual asset agent, according to one embodiment. The method and system include creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset, according to one embodiment. The system and method receiving, with the new virtual asset, secrets that are associated with the current virtual asset to enable the new virtual asset to continue operations of the current virtual asset, according to one embodiment.

    Method and system for distributing secrets
    2.
    发明授权
    Method and system for distributing secrets 有权
    分发秘密的方法和系统

    公开(公告)号:US09384362B2

    公开(公告)日:2016-07-05

    申请号:US14053488

    申请日:2013-10-14

    Applicant: Intuit Inc.

    Abstract: Secrets data representing one or more secrets required to access associated resources is provided along with secrets distribution policy data representing one or more secrets distribution factors used to control the distribution of the secrets. When a requesting virtual asset submits secrets request data, virtual asset profile data associated with the requesting virtual asset is obtained. The requesting virtual asset profile data is then analyzed using at least one of the secrets distribution factors to authenticate the requesting virtual asset. The requesting virtual asset profile data is then analyzed using one or more of secrets distribution factors to determine what secrets the requesting virtual asset legitimately needs. Authorized secrets data for the requesting virtual asset representing one or more authorized secrets is then generated. The requesting virtual asset is then provided access to the authorized secrets data.

    Abstract translation: 提供表示访问相关资源所需的一个或多个秘密的数据,以及代表用于控制秘密分布的一个或多个秘密分发因子的秘密分发策略数据。 当请求的虚拟资产提交秘密请求数据时,获得与请求的虚拟资产相关联的虚拟资产简档数据。 然后使用至少一个秘密分发因子来分析请求的虚拟资产简档数据,以验证请求的虚拟资产。 然后使用一个或多个秘密分布因子来分析请求的虚拟资产简档数据,以确定请求的虚拟资产合法需要什么秘密。 然后生成表示一个或多个授权秘密的请求虚拟资产的授权秘密数据。 然后,向请求的虚拟资产提供对授权秘密数据的访问。

    METHOD AND SYSTEM FOR ENSURING AN APPLICATION CONFORMS WITH SECURITY AND REGULATORY CONTROLS PRIOR TO DEPLOYMENT
    4.
    发明申请
    METHOD AND SYSTEM FOR ENSURING AN APPLICATION CONFORMS WITH SECURITY AND REGULATORY CONTROLS PRIOR TO DEPLOYMENT 有权
    在部署前确保安全和法规控制的应用程序一致性的方法和系统

    公开(公告)号:US20150312274A1

    公开(公告)日:2015-10-29

    申请号:US14261621

    申请日:2014-04-25

    Applicant: Intuit Inc.

    CPC classification number: H04L63/20 H04L41/5009 H04L41/5096

    Abstract: Asset security compliance data ensuring defined asset security policies are applied to the creation and/or operation of assets to be used to implement an application and application deployment security compliance data for ensuring compliance with one or more application deployment security policies associated with the deployment of assets used to implement the application is generated. The asset security compliance data is then used to ensure each asset used to implement the application is created and used in compliance with asset security policies and the application deployment security compliance data is used to ensure that each asset used to implement the application is deployed in compliance with the application deployment security policies.

    Abstract translation: 确保定义的资产安全策略的资产安全合规性数据应用于用于实施应用程序和应用程序部署安全合规性数据的资产的创建和/或操作,以确保符合与部署资产相关联的一个或多个应用程序部署安全策略 用于实现应用程序生成。 然后使用资产安全合规性数据确保用于实施应用程序的每个资产都是按照资产安全策略创建和使用的,并且应用程序部署安全合规性数据用于确保用于实施应用程序的每个资产都按照规定进行部署 与应用部署安全策略。

    METHOD AND SYSTEM FOR TESTING CLOUD BASED APPLICATIONS AND SERVICES IN A PRODUCTION ENVIRONMENT USING SEGREGATED BACKEND SYSTEMS
    5.
    发明申请
    METHOD AND SYSTEM FOR TESTING CLOUD BASED APPLICATIONS AND SERVICES IN A PRODUCTION ENVIRONMENT USING SEGREGATED BACKEND SYSTEMS 审中-公开
    使用分离式后端系统在生产环境中测试基于云的应用和服务的方法和系统

    公开(公告)号:US20150278523A1

    公开(公告)日:2015-10-01

    申请号:US14231253

    申请日:2014-03-31

    Applicant: Intuit Inc.

    CPC classification number: G06F11/3664

    Abstract: An application is implemented in the production environment in which the application will be used. Two or more backend systems are provided. Actual user data is received. The actual user data is routed and processed in the production environment using a first backend system of the two or more backend systems. Fabricated user data is generated, routed, and also processed in the production environment but using a second backend system of the two or more backend systems. Results data from the processing of the fabricated user data is then analyzed to evaluate the production environment and/or operation of the application in the production environment.

    Abstract translation: 在应用程序将在其中使用的生产环境中实现应用程序。 提供两个或更多个后端系统。 收到实际的用户数据。 使用两个或更多个后端系统的第一后端系统在生产环境中路由和处理实际的用户数据。 制造的用户数据在生产环境中生成,路由和处理,但使用两个或更多后端系统的第二后端系统。 然后分析来自处理制造的用户数据的结果数据,以评估生产环境中的生产环境和/或应用的操作。

    METHOD AND SYSTEM FOR DISTRIBUTING SECRETS
    6.
    发明申请
    METHOD AND SYSTEM FOR DISTRIBUTING SECRETS 有权
    分配秘密的方法和系统

    公开(公告)号:US20150106869A1

    公开(公告)日:2015-04-16

    申请号:US14053488

    申请日:2013-10-14

    Applicant: Intuit Inc.

    Abstract: Secrets data representing one or more secrets required to access associated resources is provided along with secrets distribution policy data representing one or more secrets distribution factors used to control the distribution of the secrets. When a requesting virtual asset submits secrets request data, virtual asset profile data associated with the requesting virtual asset is obtained. The requesting virtual asset profile data is then analyzed using at least one of the secrets distribution factors to authenticate the requesting virtual asset. The requesting virtual asset profile data is then analyzed using one or more of secrets distribution factors to determine what secrets the requesting virtual asset legitimately needs. Authorized secrets data for the requesting virtual asset representing one or more authorized secrets is then generated. The requesting virtual asset is then provided access to the authorized secrets data.

    Abstract translation: 提供表示访问相关资源所需的一个或多个秘密的数据,以及代表用于控制秘密分布的一个或多个秘密分发因子的秘密分发策略数据。 当请求的虚拟资产提交秘密请求数据时,获得与请求的虚拟资产相关联的虚拟资产简档数据。 然后使用至少一个秘密分发因子来分析请求的虚拟资产简档数据,以验证请求的虚拟资产。 然后使用一个或多个秘密分布因子来分析请求的虚拟资产简档数据,以确定请求的虚拟资产合法需要什么秘密。 然后生成表示一个或多个授权秘密的请求虚拟资产的授权秘密数据。 然后,向请求的虚拟资产提供对授权秘密数据的访问。

    Method and system for creating and deploying virtual assets

    公开(公告)号:US10757133B2

    公开(公告)日:2020-08-25

    申请号:US15881400

    申请日:2018-01-26

    Applicant: Intuit Inc.

    Abstract: A method and system include identifying a virtual asset creation template associated with virtual assets to be verified. A test virtual asset is generated using the virtual asset creation template and deployed in a testing environment. The test virtual asset is then analyzed in the testing environment to identify any vulnerabilities. If a vulnerability is identified in the designated test virtual asset, a remedy to the vulnerability is applied to the virtual asset creation template which is used to create a virtual asset in a production environment. The method and system further include monitoring the production environment virtual asset for potential security threats, with a virtual asset agent, and determining a severity of identified security threats. and potentially creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset as a result.

Patent Agency Ranking