Security system and method

Patent metadata

Field	Value
Publication number	US-11301561-B2
Application number	US-201916245671-A
Country	US
Kind code	B2
Filing date	Jan 11, 2019
Priority date	Apr 3, 2018
Publication date	Apr 12, 2022
Grant date	Apr 12, 2022

Abstract

A method performed by one or more processors, and an apparatus is disclosed. The method may comprise identifying a request from a custom computer program within a sandbox to perform an operation not permitted within the sandbox, and receiving a first indication of security privileges associated with a provider of the custom computer program. The method may also comprise selectively causing the operation to be performed based on the first indication of security privileges.

First claim

What is claimed is:

1. A method performed by one or more processors, the method comprising:
requesting a custom computer program by a user having a user privilege level;
receiving, in response to the request, the custom computer program including source code comprising a plurality of operations, the source code of the custom computer program being authored and provided by a developer;
loading the custom computer program into an iframe sandbox to limit which of the plurality of operations that the custom computer program is able to perform;
executing the custom computer program within the iframe sandbox;
initiating, by the executing custom computer program, a request for performance of an operation of the plurality of operations by the iframe sandbox;
in response to the iframe sandbox not permitting the requested operation, receiving the requested operation at a secure request forwarder;
identifying the requested operation;
using the identified operation, request a first indication of security privileges and a second indication of security privileges from a security server;
wherein the first indication of security privileges is specific to the developer and the second indication of security privileges is specific to the custom computer program; and
wherein the first indication includes a first privilege level specific to the identified operation and the second indication includes a second privilege level specific to the identified operation
receiving the first indication of security privileges and the second indication of security privileges from the security server; and
in response to determining that the first privilege level indicates that the custom computer program is permitted to perform the identified operation and the second privilege level indicates that the custom computer program is permitted to perform the identified operation, causing the identified operation to be performed;
wherein when the operation is not permitted by the iframe sandbox, the secure request forwarder may cause the unpermitted operation to be performed outside of the iframe sandbox if the first privilege level and the second privilege level indicate the unpermitted operation should be permitted.

2. The method of claim 1 , further comprising:
in response to the first indication indicating that the developer is not permitted to perform the identified operation, generating an alert based on the request from the custom computer program and causing the alert to be at least one of stored or transmitted.

3. The method of claim 1 , further comprising:
in response to the second privilege level indicating the custom computer program is not permitted to perform the identified operation, generating an alert based on the request from the custom computer program and causing the alert to be at least one of stored or transmitted.

4. The method of claim 1 , wherein the custom computer program comprises code executable by a web browser.

5. The method of claim 4 , wherein the iframe sandbox is provided by the web browser.

6. The method of claim 1 , wherein the iframe sandbox is implemented using mandatory access control.

7. The method of claim 1 , wherein the identified operation comprises retrieving data, the method further comprising:
communicating a response comprising at least a portion of the retrieved data to the custom computer program.

8. A computing system comprising:
a hardware computer processor;
a non-transitory computer readable medium having software instructions stored thereon,
the software instructions executable by the hardware computer processor to cause the computing system to perform operations comprising:
requesting a custom computer program by a user having a user privilege level;
receiving, in response to the request, the custom computer program including source code comprising a plurality of operations, the source code of the custom computer program being authored and provided by a developer;
loading the custom computer program into an iframe sandbox to limit which of the plurality of operations that the custom computer program is able to perform;
executing the custom computer program within the iframe sandbox;
initiating, by the executing custom computer program, a request for performance of an operation of the plurality of operations by the iframe sandbox;
in response to the iframe sandbox not permitting the requested operation, receiving the requested operation at a secure request forwarder;
identifying the requested operation;
using the identified operation, request a first indication of security privileges and a second indication of security privileges from a security server;
wherein the first indication of security privileges is specific to the developer and the second indication of security privileges is specific to the custom computer program; and
wherein the first indication includes a first privilege level specific to the identified operation and the second indication includes a second privilege level specific to the identified operation
receiving the first indication of security privileges and the second indication of security privileges from the security server; and
in response to determining that the first privilege level indicates that the custom computer program is permitted to perform the identified operation and the second privilege level indicates that the custom computer program is permitted to perform the identified operation, causing the identified operation to be performed;
wherein when the operation is not permitted by the iframe sandbox, the secure request forwarder may cause the unpermitted operation to be performed outside of the iframe sandbox if the first privilege level and the second privilege level indicate the unpermitted operation should be permitted.

9. A non-transitory computer readable medium having software instructions stored thereon, the software instructions executable by a hardware computer processor to cause a computing system to perform operations comprising:
requesting a custom computer program by a user having a user privilege level;
receiving, in response to the request, the custom computer program including source code comprising a plurality of operations, the source code of the custom computer program being authored and provided by a developer;
loading the custom computer program into an iframe sandbox to limit which of the plurality of operations that the custom computer program is able to perform;
executing the custom computer program within the iframe sandbox;
initiating, by the executing custom computer program, a request for performance of an operation of the plurality of operations by the iframe sandbox;
in response to the iframe sandbox not permitting the requested operation, receiving the requested operation at a secure request forwarder;
identifying the requested operation;
using the identified operation, request a first indication of security privileges and a second indication of security privileges from a security server;
wherein the first indication of security privileges is specific to the developer and the second indication of security privileges is specific to the custom computer program; and
wherein the first indication includes a first privilege level specific to the identified operation and the second indication includes a second privilege level specific to the identified operation
receiving the first indication of security privileges and the second indication of security privileges from the security server; and
in response to determining that the first privilege level indicates that the custom computer program is permitted to perform the identified operation and the second privilege level indicates that the custom computer program

Assignees

• Palantir Technologies Inc

Inventors

• Powell Thomas
• Patron Kyle
• Elliot Mark

Classifications

• G06F21/6281

  at program execution time, where the protection is within the operating system · CPC title

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• G06F21/566

  Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title