Intuit, Inc.

Thomas Bishop

Luis Felipe Cabrera

M Shannon Lietz

Brett Weaver

Capen Brinkley

Ankur Jain

Elangovan Shanmugam

Javier Godinez

Oleg Gryb

Sabu Kuruvila Philip

Jinglei Whitehouse, Iii

Jeffrey M Wolfe

Troy D Otillio

Ramachandran Varadharajan

Jerome Labat

Wilson Lau

James Armitage

Jinglei Whitehouse

Edward K Lee

Gennadiy Ziskind

Christian Price

Mark Basler

Ameen Radwan

Mukulika Kapas

Grant L Hoffman

Jerome M Kuptz

Shannon M Lietz

Systems and methods for synchronizing cloud resources are disclosed. An example method may include receiving a first request to synchronize first target cloud resources to a first specified state defined in a configuration repository, generating one or more first configuration commands corresponding to the first request, the one or more first configuration commands associated with a first cloud provider and a first cloud configuration framework, and executing the one or more first configuration commands to set a state of the first target cloud resources to the first specified state.

Configuration management of cloud resources for multiple providers and frameworks

Big data analysis methods and machine learning based models are used to provide offer recommendations to consumers that are probabilistically determined to be relevant to a given consumer. Machine learning based matching of user attributes and offer attributes is first performed to identify potentially relevant offers for a given consumer. A de-duplication process is then used to identify and eliminate any offers represented in the offer data that the consumer has already seen, has historically shown no interest in, has already accepted, that are directed to product or service types the user/consumer already owns, for which the user does not qualify, or that are otherwise deemed to be irrelevant to the consumer.

Replacing a potentially threatening virtual asset

A method and system include identifying a virtual asset creation template associated with virtual assets to be verified. A test virtual asset is generated using the virtual asset creation template and deployed in a testing environment. The test virtual asset is then analyzed in the testing environment to identify any vulnerabilities. If a vulnerability is identified in the designated test virtual asset, a remedy to the vulnerability is applied to the virtual asset creation template which is used to create a virtual asset in a production environment. The method and system further include monitoring the production environment virtual asset for potential security threats, with a virtual asset agent, and determining a severity of identified security threats. and potentially creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset as a result.

Method and system for creating and deploying virtual assets

A method and system for protecting and repairing a current virtual asset from damage by potential security threats, according to one embodiment. The method and system include monitoring a current a current virtual asset for potential security threats, with a virtual asset agent, according to one embodiment. The method and system include determining a severity of the potential security threats that are identified by the virtual asset agent, according to one embodiment. The method and system include creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset, according to one embodiment. The system and method receiving, with the new virtual asset, secrets that are associated with the current virtual asset to enable the new virtual asset to continue operations of the current virtual asset, according to one embodiment.

Method and system for secure delivery of information to computing environments

A secure secrets proxy is instantiated in a first computing environment and includes secure secrets proxy authentication data for identifying itself to a secrets distribution management system in a second computing environment as a trusted virtual asset to receive and cache secrets data in a secure secrets cache outside the second computing environment. A virtual asset requests one or more secrets, triggering a process to authenticate the requesting virtual asset, gathering authorized secrets data representing secrets the virtual asset is allowed to have. The secure secrets proxy is provided data representing the requested secrets and stores that secrets data in the secure secrets cache of the proxy.

Method and system for providing a secure secrets proxy and distributing secrets

An application is implemented in the production environment in which the application will be used. Two or more backend systems are used to implement different versions of the application using the production environment in which the application will actually be used and accessed. Actual user data is received. A first portion of the actual user data is routed and processed in the production environment using a first version of the application and a first backend system of the two or more backend systems. A second portion of the actual user data is also routed and processed in the production environment but using a second version of the application and a second backend system of the two or more backend systems. The results data is then analyzed to evaluate the various versions of the application in the production environment.

Method and system for comparing different versions of a cloud based application in a production environment using segregated backend systems

Virtual asset creation data used to create a virtual asset is generated through a virtual asset creation system that includes primary virtual asset data. Secondary authentication data is also generated. When the virtual asset is launched, the secondary authentication data is passed to the virtual asset from the virtual asset creation system. The primary virtual asset data and secondary authentication data from the virtual asset creation system and the virtual asset, and/or one or more other sources associated with the virtual asset, are then sent to a virtual asset validation system through different communication channels. If the primary virtual asset data and secondary authentication data from the two sources match, or have a defined threshold level of similarity, the status of the virtual asset is transformed to the status of validated virtual asset eligible to receive sensitive data.

Method and system for validating a virtual asset

Secrets data representing one or more secrets required to access associated resources is provided along with secrets distribution policy data representing one or more secrets distribution factors used to control the distribution of the secrets. When a requesting virtual asset submits secrets request data, virtual asset profile data associated with the requesting virtual asset is obtained. The requesting virtual asset profile data is then analyzed using at least one of the secrets distribution factors to authenticate the requesting virtual asset. The requesting virtual asset profile data is then analyzed using one or more of secrets distribution factors to determine what secrets the requesting virtual asset legitimately needs. Authorized secrets data for the requesting virtual asset representing one or more authorized secrets is then generated. The requesting virtual asset is then provided access to the authorized secrets data.

Method and system for distributing secrets

Asset security compliance data ensuring defined asset security policies are applied to the creation and/or operation of assets to be used to implement an application and application deployment security compliance data for ensuring compliance with one or more application deployment security policies associated with the deployment of assets used to implement the application is generated. The asset security compliance data is then used to ensure each asset used to implement the application is created and used in compliance with asset security policies and the application deployment security compliance data is used to ensure that each asset used to implement the application is deployed in compliance with the application deployment security policies.

Method and system for ensuring an application conforms with security and regulatory controls prior to deployment

The disclosed embodiments provide a system that facilitates the deployment and execution of a software offering. During operation, the system obtains a service definition of the software offering and a resource definition of resources available for use by the software offering. Next, the system creates a multidimensional model of the software offering by mapping a first set of elements from the service definition to a second set of elements from the resource definition. Finally, the system uses the multidimensional model to manage the deployment and execution of the software offering without requiring manual configuration of the resources by a user.

Multidimensional modeling of software offerings

The disclosed embodiments provide a system that facilitates the deployment and execution of a software offering. During operation, the system obtains a service definition of the software offering. Next, the system creates a work-breakdown structure based on a set of policies from the service definition. Finally, the system uses the work-breakdown structure to automatically provision a set of resources for use by the software offering without requiring manual configuration of the resources by a user.

Growing community of inventors

San Diego, CA, United States of America

Thomas Bishop