US 12,014,171 B2
Managing security approval of services deployed in cloud platform using an extensible platform as a service
Mayank Kumar, Fremont, CA (US)
Assigned to Salesforce, Inc., San Francisco, CA (US)
Filed by salesforce.com, inc., San Francisco, CA (US)
Filed on Jan. 31, 2022, as Appl. No. 17/589,497.
Claims priority of provisional application 63/256,046, filed on Oct. 15, 2021.
Prior Publication US 2023/0123835 A1, Apr. 20, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 8/71 (2018.01); G06F 8/65 (2018.01); G06F 9/54 (2006.01); G06F 11/36 (2006.01); G06F 21/57 (2013.01); G06F 21/62 (2013.01)
CPC G06F 8/71 (2013.01) [G06F 8/65 (2013.01); G06F 9/54 (2013.01); G06F 11/3684 (2013.01); G06F 11/3688 (2013.01); G06F 11/3692 (2013.01); G06F 21/577 (2013.01); G06F 21/6218 (2013.01); G06F 2221/033 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A computer-implemented method for managing security of applications, the method comprising:
storing a plurality of software bundles, wherein a software bundle includes a plurality of software modules, wherein at least a subset of the software modules of the software bundle have security approval;
receiving, from a user, a criteria for selecting configuration of a potential application;
providing a first software bundle matching the received criteria;
receiving a configuration of the application based on one or more software modules of the first software bundle;
monitoring software development life cycle (SDLC) processes of the application, the monitoring comprising determining whether one or more software modules included in the first software bundle have been customized;
responsive to determining that none of the software modules included in the first software bundle have been customized, automatically granting security approval to the application;
responsive to determining that the one or more software modules included in the first software bundle have been customized, generating a request for security approval based on the one or more software modules included in the first software bundle that have been customized; and
sending the generated request for security approval.