Systems and methods for integrating with a native component using a network interface
Embodiments as disclosed herein may provide systems and methods for component integration and security. In particular, in one embodiment, a native component that presents a network based interface may be on a device, where that native component may expose a network based interface for access by other components. This native component can then be accessed through the network based interface. To address security concerns and other issues, the native component may be configured to determine if a received request is associated with the same user space and only respond to requests originating from the same user space.
1. A system, comprising:
a processor device;
a native component presenting a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) based network accessible interface configured to allow functionality of the native component to be accessed through the network accessible interface, wherein the native component comprises instructions executing on the system to:
receive a request issued from a requesting component executing on the system, wherein the request is received through the network accessible interface of the native component;
determine a first identifier associated with a first user space of the system in which the native component is executing by determining a first session identifier associated with the execution of the native component on the system;
determine a second identifier associated with a second user space of the system in which the requesting component is executing by determining a second session identifier with:
determining a port of a connection associated with the request,
determining a process identifier associated with the execution of the requesting component on the system based on the port of the connection associated with the request, and
determining the second session identifier associated with the process identifier and the execution of the requesting component on the system;
determine if the first user space of the native component and the second user space of the requesting component are the same user space by comparing the first identifier to the second identifier; and
if the first identifier matches the second identifier, allowing the request, and if the first identifier does not match the second identifier, denying the request.
2. The system of claim 1 , wherein the requesting component and the native component are part of a cloud based managed file transfer (MFT) system.
3. The system of claim 2 , wherein the native component is a transfer manager in the managed file transfer system.
4. A system, comprising:
a processor device;
a native component presenting a network accessible interface configured to allow functionality of the native component to be accessed through the network accessible interface, wherein the native component comprises instructions executing on the system to:
receive a request issued from a requesting component executing on the system, wherein the request is received through the network accessible interface of the native component;
determine a first identifier associated with a first user space of the system in which the native component is executing by determining a first session identifier, the first identifier associated with the execution of the native component on the system;
determine a second identifier associated with a second user space of the system in which the requesting component is executing by determining a second session identifier with:
determining a port of a connection associated with the request,
determining a process identifier associated with the execution of the requesting component on the system based on the port of the connection associated with the request, and
determining the second session identifier associated with the process identifier and the execution of the requesting component on the system;
determine if the first user space of the native component and the second user space of the requesting component are the same user space by comparing the first identifier to the second identifier; and
if the first identifier matches the second identifier, allowing the request, and if the first identifier does not match the second identifier, denying the request.
5. The system of claim 4 , wherein the network accessible interface is a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) based interface.
6. The system of claim 5 , wherein the network accessible interface is a REpresentation State Transfer (REST) interface, a Simple Object Access Protocol (SOAP) interface or a Hyper Text Transfer Protocol (HTTP) based interface.
7. The system of claim 4 , wherein determining the process identifier associated with the requesting component comprises:
accessing a Transmission Control Protocol (TCP) table; and
determining the process identifier associated with the port of the request in the TCP table.
8. The system of claim 7 , wherein the port is a remote port associated with the request and the port of the request in the TCP table is a local port.
9. The system of claim 4 , wherein the request utilizes Secure Sockets Layer (SSL) and a connection is established with the requesting component using a certificate associated with the requesting component.
10. The system of claim 9 , wherein the certificate is associated with a user associated with the second user space and is stored in a registry of the user on the system.
11. A method, comprising:
receiving, at a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) based network accessible interface of a native component on a computing device, a request issued from a requesting component executing on the computing device, wherein the request is received through the network accessible interface of the native component;
determining, at the native component, a first identifier associated with a first user space of the system in which the native component is executing by determining a first session identifier associated with the execution of the native component on the computing device;
determining, at the native component, a second identifier associated with a second user space of the system in which the requesting component is executing by determining a second session identifier with:
determining a port of a connection associated with the request,
determining a process identifier associated with the execution of the requesting component on the computing device based on the port of the connection associated with the request, and
determining the second session identifier associated with process identifier and the execution of the requesting component on the computing device;
determining, at the native component, if the first user space of the native component and the second user space of the requesting component are the same user space by comparing the first identifier to the second identifier; and
if the first identifier matches the second identifier, responding to the request, and if the first identifier does not match the second identifier, denying the request.
12. The method of claim 11 , wherein the requesting component and the native component are part of a cloud based managed file transfer (MFT) system.
13. The method of claim 12 , wherein the native component is a transfer manager in the managed file transfer system.
14. A method, comprising:
receiving, at a network accessible interface of a native component on a computing device, a request issued to the network accessible interface from a requesting component executing on the computing device;
determining, at the native component, a first identifier associated with a first user space of the system in which the native component is executing by determining a first session identifier, the first identifier associated with the execution of the native component on the computing device;
determining, at the native component, a second identifier associated with a second user space of the computing device in which the requesting component is executing by determining a second session identifier with:
determining a port of a connection associated with the request,
determining a process identifier associated with the execution of the requesting component on the system based on the port of the connection associated with the request, and
determining the second session identifier associated with the process identifier and the execution of the requesting component on the system;
determining, at the native component, if the first user space of the native component and the second user space of the requesting component are the same user space by comparing the first identifier to the second identifier; and
if the first identifier matches the second identifier, allowing the request, and if the first identifier does not match the second identifier, denying the request.
15. The method of claim 14 , wherein the network accessible interface is a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) based interface.
16. The method of claim 15 , wherein the network accessible interface is a REpresentation State Transfer (REST) interface, a Simple Object Access Protocol (SOAP) interface or a Hyper Text Transfer Protocol (HTTP) based interface.
17. The method of claim 14 , wherein determining the process identifier associated with the requesting component comprises:
accessing a Transmission Control Protocol (TCP) table; and
determining the process identifier associated with the port of the request in the TCP table.
18. The method of claim 17 , wherein the port is a remote port associated with the request and the port of the request in the TCP table is a local port.
19. The method of claim 14 , wherein the request utilizes Secure Sockets Layer (SSL) and a connection is established with the requesting component using a certificate associated with the requesting component.
20. The method of claim 19 , wherein the certificate is associated with a user associated with the second user space and is stored in a registry of the user on the system.