Security model for live applications in a cloud collaboration platform

US12242834B2 · kind B2 · utility

Assignee

• Salesforce, Inc. · US

Inventors

• Julie Tung · Los Altos, US
• Rajeev Nayak · San Francisco, US
• Kevin A. Gibbs · San Francisco, US
• Bret Steven Taylor · Los Gatos, US
• Yang Su · San Francisco, US
• Nate Botwick · San Francisco, US
• Pedram Razavi · San Francisco, US
• Scott Goodfriend · Berkeley, US
• Nikrad Mahdi · San Francisco, US
• Andy Chung · Berkeley, US
• Drew W. Hamlin · San Francisco, US
• Patrick Linehan · San Francisco, US
• Sophia Westwood · Mountain View, US
• Lindsey Simon · San Francisco, US
• Shrey Banga · San Francisco, US
• Diana Berlin · San Francisco, US

Key dates

• Filing date: Jul 5, 2022
• Grant date: Mar 4, 2025
• Expiry date: Jul 25, 2042

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L67/02
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Disclosed herein are system, method, and computer program product embodiments for providing a security model to customizable live applications in a cloud collaboration platform. The security approach may dedicate a frame to each live application, serving the frame from a different domain than a document in which the live application is embedded. This approach ensures that more stringent security requirements may be required of the live application and allows the data presented to the live application to be narrowly tailored. The security model may further leverage sandbox attributes and content-security policies to restrict the behavior of sandboxed and non-sandboxed live applications in accordance with best security practices.