Method and apparatus for secure application framework and platform
A security platform architecture is described herein. The security platform architecture includes multiple layers and utilizes a combination of encryption and other security features to generate a secure environment. A method, system and apparatus include/are configured for maintaining a secure vault, accessing building block modules and implementing an orchestrator. The vault stores code. The building block modules are formed using the code stored in the secure vault. The orchestrator controls access to the building block modules.
1. A method comprising:
storing code within a secure vault, wherein the code is accessible based on identification proofing which includes a trust score based on user behavior analysis, wherein the user behavior analysis includes matching stride and matching typing performance;
forming one or more building blocks using the code stored in the secure vault;
accessing the one or more building block modules; and
controlling access to the one or more building block modules with an orchestrator.
2. The method of claim 1 wherein the code comprises executables, dynamic link libraries, configuration information, data or a combination thereof.
3. The method of claim 1 further comprising implementing a data at rest encryption scheme within the secure vault.
4. The method of claim 1 wherein the code is encrypted using white noise encryption.
5. The method of claim 1 wherein the code is signed.
6. The method of claim 1 further comprising forming an application with the one or more building block modules.
7. The method of claim 1 wherein the one or more building block modules communicate using encrypted communications.
8. The method of claim 1 further comprising wrapping the one or more building block modules in one or more application programming interfaces.
9. The method of claim 1 further comprising:
deploying services,
utilizing one or more keys to access the code,
controlling one or more policies, and
organizing the one or more building block modules.
10. A system comprising:
a secure vault configured for storing code, wherein the code is accessible based on identification proofing which includes a trust score based on user behavior analysis, wherein the user behavior analysis includes matching stride and matching typing performance;
one or more building block modules, wherein the one or more building block modules are formed using the code stored in the secure vault; and
an orchestrator configured for controlling access to the one or more building block modules.
11. The system of claim 10 wherein the code comprises executables, dynamic link libraries, configuration information, data or a combination thereof.
12. The system of claim 10 wherein the secure vault is configured for implementing a data at rest encryption scheme.
13. The system of claim 10 wherein the code is encrypted using white noise encryption.
14. The system of claim 10 wherein the code is signed.
15. The system of claim 10 wherein the one or more building block modules form an application.
16. The system of claim 10 wherein the one or more building block modules communicate using encrypted communications.
17. The system of claim 10 wherein the one or more building block modules are each wrapped in one or more application programming interfaces.
18. The system of claim 10 wherein the orchestrator is configured to:
deploy services,
utilize one or more keys to access the code,
control one or more policies, and
organize the one or more building block modules.
19. An apparatus comprising:
a non-transitory memory and a processor coupled to the memory, the processor configured for implementing:
maintaining a secure vault, wherein the secure vault is configured for storing code, wherein the code is accessible based on identification proofing which includes a trust score based on user behavior analysis, wherein the user behavior analysis includes matching stride and matching typing performance;
accessing one or more building block modules, wherein the one or more building block modules are formed using the code stored in the secure vault; and
implementing an orchestrator, wherein the orchestrator is configured to control access to the one or more building block modules.
20. The apparatus of claim 19 wherein the code comprises executables, dynamic link libraries, configuration information, data or a combination thereof.
21. The apparatus of claim 19 wherein the secure vault is configured for implementing a data at rest encryption scheme.
22. The apparatus of claim 19 wherein the code is encrypted using white noise encryption.
23. The apparatus of claim 19 wherein the code is signed.
24. The apparatus of claim 19 wherein the one or more building block modules form an application.
25. The apparatus of claim 19 wherein the one or more building block modules communicate using encrypted communications.
26. The apparatus of claim 19 wherein the one or more building block modules are each wrapped in one or more application programming interfaces.
27. The apparatus of claim 19 wherein the orchestrator is configured to:
deploy services,
utilize one or more keys to access the code,
control one or more policies, and
organize the one or more building block modules.