Roger R Lucas

US Patent:

20220255941, Aug 11, 2022

Filed:

Feb 4, 2022

Appl. No.:

17/592667

Inventors:

- New York NY, US
Roger LUCAS - New York NY, US
Perry WINTNER - New York NY, US
Nick JELBERT - New York NY, US
Clint SMITH - New York NY, US

International Classification:

H04L 9/40
H04L 67/1097
G06F 11/14

Abstract:

An edge device may be configured to generate a secure container to perform a software application on the edge device. A security daemon operating on a processor of the edge device may receive a configure host request message from a container manager. In response, the security daemon may determine integrity of metadata, extract licenses from the metadata, determine image permissions, create a user or group account, and update one or more system service access-control lists (ACLs). The security daemon may generate and send a configure host response message to the container manager, which may create and/or start the container.

US Patent:

20220255966, Aug 11, 2022

Filed:

Feb 4, 2022

Appl. No.:

17/592632

Inventors:

- New York NY, US
Roger LUCAS - New York NY, US
Perry WINTNER - New York NY, US
Nick JELBERT - New York NY, US
Clint SMITH - New York NY, US

International Classification:

H04L 9/40
G06F 21/10

Abstract:

An edge device may be configured to generate a secure container to perform a software application on the edge device. A security daemon operating on a processor of the edge device may receive a security policy for the software application from a secure container platform, retrieve a license associated with the software application, and determine permissions of the software application based on the retrieved license. The edge device may create a user or group account and updating a system service access-control list (ACL) based on the received security policy and the determined permissions, and generate and send a policy ready message to the secure container platform in response to creating the user or group account and updating the system service ACL.