Cloud Application Platform Segregating User and Developer Accounts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud computing platforms lack effective segregation of user data from developer access and source code access from users, compromising data security and management of web applications.
Innovation Solution
Implementing a distributed application execution system that segregates user and developer accounts, allowing web applications to be developed and distributed while preventing unauthorized access to user data and source code, through authentication mechanisms and a centralized online store for installation and management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If web applications are distributed through a shared area accessible by user accounts, then application distribution and installation convenience are improved, but user data security and source code protection are worsened due to potential unauthorized access
Solution Approach 1:
The system segments access rights by creating distinct developer accounts and user accounts with separated permissions. Developer accounts can transfer applications to a shared area but cannot access user data, while user accounts can install applications but cannot access source code. This segmentation resolves the contradiction by allowing convenient distribution while maintaining security through account isolation.
Solution Approach 2:
The shared area acts as an intermediary mechanism between developers and users. Applications are transferred from developer accounts to the shared area, where they become accessible to user accounts for installation. This intermediary structure enables convenient distribution while the underlying account segregation maintains security boundaries, preventing direct access between developers and user data.
2Productivity
If developers can transfer web applications to a shared area for distribution, then application distribution efficiency is improved, but control over source code access is worsened due to potential user access to source code
Solution Approach 1:
The system segments source code storage and access control by maintaining source code within the developer account context while allowing the compiled application to be transferred to the shared area. User accounts can install and execute applications from the shared area but cannot access the underlying source code in the developer account. This segmentation enables efficient distribution while maintaining source code protection.
3Ease of operation
If user data is stored in user accounts for application execution, then data accessibility for applications is improved, but developer access to user data is worsened due to security restrictions
Solution Approach 1:
The system segments data access permissions by allowing user accounts to store and access their own data for application execution, while simultaneously preventing developer accounts from accessing this data. The authentication mechanism automatically enforces these segmented permissions, enabling data accessibility for users while maintaining security without requiring complex manual access control management.
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining distributing web applications. One of the methods includes associating at least one user account and at least one developer account with an application execution system, the at least one user account including user data. A web application is transferred from the developer account into a shared area accessible by the at least one user account. A request is received to associate the web application with the user account from the shared area. The web application is associated with the user account, wherein the web application is configured to access the user data of the user account, and wherein access to the user data of the user account is based on authentication associated with the user account. The installed web application is executed using the user data to create user results based on the user data.