IP Library Granted Patent US 11,683,318
Granted Patent B2
US 11,683,318 · App. 17/238,906 · Granted Jun 20, 2023

Dynamic deployment of access controls anchored on request actions

Inventors: Sean Tubbs (San Francisco, CA); Julien Sobrier (Saratoga, CA); Matthew Mang Fu Wong (Castro Valley, CA)
Assignee: Salesforce, Inc.
H04L63/102H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,683,318
App. No.
17/238,906
Granted
Jun 20, 2023
Kind
B2
Abstract

Techniques and structures to provide dynamic deployment of access controls in an on-demand environment. A host electronic device may comprise one or more processors coupled with the at least one physical memory device, the one or more processors configurable to receive, via a user interface, request to access one or more resources managed by the electronic device in the multi-user, on demand computing environment, the request comprising one or more request elements, determine whether a virtual access rule logic comprises one or more virtual access check rules which are anchored to the one or more request elements, and in response to a determination that the virtual access rule logic comprises one or more virtual access check rules which are anchored to the one or more request elements, apply the one or more virtual access check rules to the request. Additional subject matter may be described and claimed.

Claims (35)

1. An electronic device configured to implement dynamic deployment of access controls anchored on request actions in a multi-user, on-demand computing environment, comprising:

at least one physical memory device capable to store one or more multi-user on demand databases; and

one or more processors coupled with the at least one physical memory device, the one or more processors configurable to:

receive, via a user interface, a request to access one or more resources managed by the electronic device in the multi-user, on demand computing environment, the request comprising one or more request elements;

determine that the request matches one or more anchorless rules that lack dependency on resources engaged during a lifetime of the request;

apply the one or more anchorless rules matched by the request; and

responsive to the one or more anchorless rules lacking a blocking rule for the request, apply one or more virtual access check rules to the request, wherein the one or more virtual access check rules are anchored to specific request actions of the one or more request elements of the request.

2. The electronic device of claim 1 wherein the one or more processors are configurable to block the request responsive to the one or more of the anchorless rules comprising the blocking rule for the request.

3. The electronic device of claim 1 wherein the one or more processors are configurable to apply one or more anchored rules to the request.

4. The electronic device of claim 3 , wherein the anchored rule is anchored to at least one of a user permission or an entity operation associated with the request.

5. The electronic device of claim 4 , wherein the one or more processors are configurable to block the request when the one or more of the anchored rules comprises a blocking rule for the request.

6. The electronic device of claim 1 , wherein the one or more anchorless rules are dependent on resources available directly in the request.

7. The electronic device of claim 1 , wherein the one or more anchorless rules are to block POST requests to a uniform resource identifier (URI) pattern in the request.

8. A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, are configurable to cause the one or more processors to:

receive, via a user interface, a request to access one or more resources managed by the one or more processors of an electronic device in a multi-user, on demand computing environment, the request comprising one or more request elements;

determine that the request matches one or more anchorless rules that lack dependency on resources engaged during a lifetime of the request;

apply the one or more anchorless rules matched by the request; and

responsive to the one or more anchorless rules lacking a blocking rule for the request, apply one or more virtual access check rules to the request, wherein the one or more virtual access check rules are anchored to specific request actions of the one or more request elements of the request.

9. The non-transitory computer-readable medium of claim 8 , further comprising instructions that, when executed by the one or more processors, are configurable to cause the one or more processors to block the request responsive to the one or more of the anchorless rules comprising the blocking rule for the request.

10. The non-transitory computer-readable medium of claim 8 , further comprising instructions that, when executed by the one or more processors, are configurable to cause the one or more processors to apply one or more anchored rules to the request.

11. The non-transitory computer-readable medium of claim 10 , wherein the anchored rule is anchored to at least one of a user permission or an entity operation associated with the request.

12. The non-transitory computer-readable medium of claim 11 , further comprising instructions that, when executed by the one or more processors, are configurable to cause the one or more processors to:

block the request when the one or more of the anchored rules comprises a blocking rule for the request.

13. The non-transitory computer-readable medium of claim 8 , wherein the one or more anchorless rules are dependent on resources available directly in the request.

14. The non-transitory computer-readable medium of claim 8 , wherein the one or more anchorless rules are to block POST requests to a uniform resource identifier (URI) pattern in the request.

15. A method to implement secure data transfer between entities in a multi-user, on-demand computing environment:

receiving, via a user interface, a request to access one or more resources managed by an electronic device in the multi-user, on demand computing environment, the request comprising one or more request elements;

determining that the request matches one or more anchorless rules that lack dependency on resources engaged during a lifetime of the request;

applying the one or more anchorless rules matched by the request; and

responsive to the one or more anchorless rules lacking a blocking rule for the request, applying one or more virtual access check rules to the request, wherein the one or more virtual access check rules are anchored to specific request actions of the one or more request elements of the request.

16. The method of claim 15 , further comprising blocking the request responsive to the one or more of the anchorless rules comprising the blocking rule for the request.

17. The method of claim 15 , further comprising applying one or more anchored rules to the request.

18. The method of claim 17 , wherein the anchored rule is anchored to at least one of a user permission or an entity operation associated with the request.

19. The method of claim 18 , further comprising blocking the request when the one or more of the anchored rules comprises a blocking rule for the request.

20. The method of claim 15 , wherein the one or more anchorless rules are dependent on resources available directly in the request.

Assignments (2)
CHANGE OF NAME Recorded Dec 18, 2024
From: SALESFORCE.COM, INC.
To: SALESFORCE, INC.
Reel/Frame 069717/0529 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 1, 2023
From: TUBBS, SEAN; SOBRIER, JULIEN; WONG, MATTHEW MANG FU
To: SALESFORCE.COM, INC.
Reel/Frame 062848/0108 →
Continuity (2)
Continuation 16175308 · Oct 30, 2018
Related Publication 20210243197A1 · Aug 5, 2021