Application Configuration via Resource Identifier for Cloud Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Customizing features of a cloud-computing application for multiple entities with different use cases is resource-intensive and exposes service providers to intellectual property theft, as users require access to sensitive systems and source code.
Innovation Solution
A method and system that configure an application based on a resource identifier, allowing for the identification of a defined configuration, determination of specific features, and generation of an application instance with those features, while maintaining control over access to sensitive systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the service provider modifies the application according to each user's desired features, then the user gets customized features, but the service provider consumes excessive resources and time
Solution Approach 1:
The application is segmented into multiple independent modules or features that can be selectively activated. Each feature operates as an independent unit that can be enabled or disabled based on user configuration, allowing customization without modifying the core application codebase.
Solution Approach 2:
A single application instance is designed to support multiple feature configurations universally. The application can adapt its functionality based on which features are enabled, serving different user needs without requiring separate customized versions for each user.
2Adaptability or versatility
If the service provider provides users with access to sensitive systems and source code for customization, then the user can adapt the application, but the service provider exposes intellectual property to theft
Solution Approach 1:
The customization capability is extracted from the core application codebase and implemented as external configuration parameters or settings. Users can enable or disable features through configuration files or user interfaces without accessing the underlying source code, separating the customization function from the proprietary code.
Solution Approach 2:
An intermediary configuration layer is introduced between the user and the application codebase. This configuration layer allows users to control feature visibility and accessibility without exposing the underlying source code or sensitive systems, acting as a protective barrier that maintains security while enabling customization.
3Adaptability or versatility
If the service provider requires users to procure or redirect valuable computer scientists for customization, then the user can understand and adapt the application, but the service provider loses valuable skilled personnel
Solution Approach 1:
The application enables users to perform customization themselves through intuitive configuration interfaces or configuration files. Users can enable or disable features based on their needs without requiring assistance from skilled computer scientists, making the customization process self-service oriented.
Solution Approach 2:
Customization is achieved by changing configuration parameters rather than modifying code structure. The system provides predefined parameters that control feature visibility and behavior, allowing users to adapt the application by adjusting these parameters without needing to understand the underlying complex codebase.
Data Source
AI summary
Systems, methods, and techniques for implementing a defined configuration for an application. A request is received to provision an instance of an application for a external entity. A resource identifier is obtained based on the request. A defined configuration of a plurality of defined configurations for the application is identified based on the resource identifier. A set of features is determined that are specified in the defined configuration. The instance of the application is generated having the set of features. A connection is established with an application resource of a plurality of application resources of the application based on the resource identifier. The instance having the set of features is provisioned over one or more networks to the external entity.