Method and apparatus for secure application framework and platform
A security platform architecture is described herein. The security platform architecture includes multiple layers and utilizes a combination of encryption and other security features to generate a secure environment.
1. A method comprising:
storing code within a secure vault, wherein the code is accessible based on identification proofing which includes a trust score based on user behavior analysis, wherein the user behavior analysis includes determining whether a mobile device is secure and has not been compromised based on actions, behavior and usage patterns detected by the mobile device, wherein the actions are detected based on an accelerometer within the mobile device including detecting that the mobile device was put down;
forming one or more building blocks using the code stored in the secure vault;
accessing the one or more building block modules; and
controlling access to the one or more building block modules with an orchestrator.
2. The method of claim 1 wherein the user behavior analysis includes matching physical performance attribute.
3. The method of claim 1 wherein the code comprises executables, dynamic link libraries, configuration information, data or a combination thereof.
4. The method of claim 1 further comprising implementing a data at rest encryption scheme within the secure vault.
5. The method of claim 1 wherein the code is encrypted using white noise encryption.
6. The method of claim 1 wherein the code is signed.
7. The method of claim 1 further comprising forming an application with the one or more building block modules.
8. The method of claim 1 wherein the one or more building block modules communicate using encrypted communications.
9. The method of claim 1 further comprising wrapping the one or more building block modules in one or more application programming interfaces.
10. The method of claim 1 further comprising:
deploying services,
utilizing one or more keys to access the code,
controlling one or more policies, and
organizing the one or more building block modules.
11. A system comprising:
hardware for implementing a secure vault configured for storing code, wherein the code is accessible based on identification proofing which includes a trust score based on user behavior analysis, wherein the user behavior analysis includes determining whether a mobile device is secure and has not been compromised based on actions, behavior and usage patterns detected by the mobile device, wherein the actions are detected based on an accelerometer within the mobile device including detecting that the mobile device was put down;
one or more building block modules, wherein the one or more building block modules are formed using the code stored in the secure vault; and
an orchestrator configured for controlling access to the one or more building block modules.
12. The system of claim 11 wherein the user behavior analysis includes matching physical performance attribute.
13. The system of claim 11 wherein the code comprises executables, dynamic link libraries, configuration information, data or a combination thereof.
14. The system of claim 11 wherein the secure vault is configured for implementing a data at rest encryption scheme.
15. The system of claim 11 wherein the code is encrypted using white noise encryption.
16. The system of claim 11 wherein the code is signed.
17. The system of claim 11 wherein the one or more building block modules form an application.
18. The system of claim 11 wherein the one or more building block modules communicate using encrypted communications.
19. The system of claim 11 wherein the one or more building block modules are each wrapped in one or more application programming interfaces.
20. The system of claim 11 wherein the orchestrator is configured to:
deploy services,
utilize one or more keys to access the code,
control one or more policies, and
organize the one or more building block modules.
21. An apparatus comprising:
a non-transitory memory and a processor coupled to the memory, the processor configured for implementing:
maintaining a secure vault, wherein the secure vault is configured for storing code, wherein the code is accessible based on identification proofing which includes a trust score based on user behavior analysis, wherein the user behavior analysis includes determining whether a mobile device is secure and has not been compromised based on actions, behavior and usage patterns detected by the mobile device, wherein the actions are detected based on an accelerometer within the mobile device including detecting that the mobile device was put down;
accessing one or more building block modules, wherein the one or more building block modules are formed using the code stored in the secure vault; and
implementing an orchestrator, wherein the orchestrator is configured to control access to the one or more building block modules.
22. The apparatus of claim 21 wherein the user behavior analysis includes matching physical performance attribute.
23. The apparatus of claim 21 wherein the code comprises executables, dynamic link libraries, configuration information, data or a combination thereof.
24. The apparatus of claim 21 wherein the secure vault is configured for implementing a data at rest encryption scheme.
25. The apparatus of claim 21 wherein the code is encrypted using white noise encryption.
26. The apparatus of claim 21 wherein the code is signed.
27. The apparatus of claim 21 wherein the one or more building block modules form an application.
28. The apparatus of claim 21 wherein the one or more building block modules communicate using encrypted communications.
29. The apparatus of claim 21 wherein the one or more building block modules are each wrapped in one or more application programming interfaces.
30. The apparatus of claim 21 wherein the orchestrator is configured to:
deploy services,
utilize one or more keys to access the code,
control one or more policies, and
organize the one or more building block modules.