Granted Patent B2

US 10,936,333 · App. 15/907,658 · Granted Mar 2, 2021

Inventors: Tuomo Mickelsson (Helsinki, FI); Kari Nurmela (Helsinki, FI); Marko Niiranen (Helsinki, FI)

Assignee: FORCEPOINT LLC

G06F9/44505G06F8/30G06F8/71H04L41/0813H04L41/22

Abstract

Claims (70)

1. A system for managing application specific configuration data of a computing device, comprising:

a storage resource;

a processor communicatively coupled to the storage resource, wherein the processor executes application code instruction that are stored in the storage resource to cause the system to:

generate a plurality of standardized configuration objects at a local management server based on application specific configuration data according to a system wide metadata specification for an update package for each of a plurality of independent applications;

receive, at a configuration engine, at least one of the plurality of standardized configuration objects for at least one configurable entity associated with only one of the update packages for the plurality of independent applications; and

generate at least one configuration object file for each standardized configuration object received.

2. The system of claim 1 further comprising application code instruction to cause the system to write a modified configuration object file to a shared memory object structure associated with a configuration file of one of the plurality of independent applications as a function of system wide metadata for a plurality of different configuration files, each associated with different configurable entities.

3. The system of claim 1 wherein the standardized configuration object is a JSON based configuration object and a secure configure engine is configured to generate a custom configurations to interface with a configurable entity from components of a plurality of the JSON based configuration object.

4. The system of claim 1 further comprises application code instruction to cause the system to:

create the configuration object file for one of the plurality of independent applications from the received standardized configuration object using a secure configuration engine; and

wherein the configuration object file comprises at least one of a C and C++ data structure and the local management engine uses the secure configuration engine through a protocol over a stream type UNIX domain socket.

5. The system of claim 1 further comprises application code instruction to cause the system to generate an HTML UI to access the standard configuration object for one of the plurality of independent applications using a secure configuration engine.

6. The system of claim 1 further comprising application code instruction to cause the system to:

deactivate the configurable entity prior to writing the configuration object using a secure configuration engine; and

activate the configurable entity after writing the configuration object for one of the plurality of independent applications;

wherein deactivating and activating occurs over a control channel;

wherein activating the configurable entity causes the configuration file to be loaded.

7. The system of claim 1 further comprising application code instruction to cause the system to:

receive, at a local management server, the at least one standardized configuration object from a central management server;

compare the standardized configuration object with a stored standardized configuration object in the storage resource to generate a custom configuration data based on a difference between the standardized configuration object and the stored standardized configuration object; and

launch the configuration engine causing the configuration engine to read the custom configuration data for one of the plurality of independent applications.

8. The system of claim 7 further comprising application code instruction to cause the system to:

permit read access to a secure configuration engine to the at least one standardized configuration object for one of the plurality of independent applications; and

permit read and write access to the management server to the at least one standardized configuration object;

wherein the local management server executes in a virtual container.

9. A computer aided method of a system for managing application specific configuration data of a computing device, the method comprising:

generating at least one standardized configuration object based on application specific configuration data according to a system wide metadata specification;

receiving, at a configuration engine, at least one standardized configuration object for at least one configurable entity;

generating at least one configuration object file for each standardized configuration object received;

receiving, at a local management server, the at least one standardized configuration object for a specific application;

comparing the standardized configuration object with a stored standardized configuration object in a storage facility to generate a custom configuration data based on a difference between the standardized configuration object and the stored standardized configuration object; and

launching the configuration engine causing configuration engine to read the custom configuration data.

10. The computer aided method of claim 9 wherein the standardized configuration object is a JSON based configuration object for a specific application.

11. The computer aided method of claim 9 further comprises:

creating the configuration object file from the received standardized configuration object; and

wherein the configuration object file comprises at least one of a C and C++ data structure and is for a specific application.

12. The computer aided method of claim 11 further comprises generating an HTML UI to edit the standard configuration object for a specific application.

13. The computer aided method of claim 9 further comprises:

deactivating the configurable entity for a specific application prior to writing the configuration object; and

activating the configurable entity after writing the configuration object;

wherein deactivating and activating occurs over a control channel;

wherein activating the configurable entity causes the configuration file to be loaded.

14. The computer aided method of claim 9 further comprises:

permitting read access to the configuration engine to the at least one standardized configuration object for a specific application; and

permitting read and write access to the management server to the at least one standardized configuration object;

wherein the local management server executes in a virtual container.

15. A non-transitory computer readable medium containing computer readable instructions for instructing a computing machine to manage application specific configuration data of a computing device, the computer-readable instructions comprising instructions for causing the computing machine to:

receive, at a configuration engine from a local management server, at least one standardized configuration object of at least one configurable entity associated with an update package for only one of a plurality of independent applications;

generate at least one configuration object file for each standardized configuration object received; and

write each configuration object file to a shared memory object structure associated with a configuration file of a configurable entity.

16. The non-transitory computer readable medium of claim 15 wherein the standardized configuration object is a JSON configuration object for one of the plurality of independent applications.

17. The non-transitory computer readable medium of claim 15 further includes computer readable instruction to cause the computing machine to:

create the configuration object file for one of the plurality of independent applications from the received standardized configuration object; and

wherein the configuration object file comprises at least one of a C and C++ data structure.

18. The non-transitory computer readable medium of claim 17 further includes computer readable instruction to cause the computing machine to generate an HTML UI to access the standard configuration object for one of the plurality of independent applications.

19. The non-transitory computer readable medium of claim 15 further includes computer readable instruction to cause the computing machine to perform one or more of:

(1) deactivate the configurable entity prior to writing the configuration object, if the configurable entity is activated; and

activate the configurable entity after writing the configuration object; or

(2) receive, at a local management server, the at least one standardized configuration object from a central management server; and

compare the standardized configuration object with a stored standardized configuration object in a storage facility to generate custom configuration data based on a difference between the standardized configuration object and the stored standardized configuration object; or

(3) launch the configuration engine causing the configuration engine to read the custom configuration data; or

(4) permit read access to the configuration engine to the at least one standardized configuration object; or

(5) permit read and write access to the management server to the at least one standardized configuration object; or

(6) deactivate the configurable entity prior to writing the configuration object, if the configurable entity is activated; and

activate the configurable entity after writing the configuration object;

wherein deactivating and activating occurs over a control channel;

wherein activating the configurable entity causes the configuration file to be loaded;

wherein the local management server executes in a virtual container;

wherein deactivating and activating occurs over a control channel; and

wherein activating the configurable entity causes the configuration file to be loaded.

Assignments (10)