Patent ID: 11907229
Assignee: GM CRUISE HOLDINGS LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. One or more non-transitory computer-readable media having stored thereon instructions, the instructions when executed to instruct one or more processors to:
receive, at a binding arbiter, a platform-independent access binding (PIAB) data structure, the PIAB data structure comprising a first permission for a subject class to perform a first verb on a first object on a first target platform, and a second permission for the subject class to perform a second verb on a second object on a second target platform;
map, by the binding arbiter, the first verb to a first platform action permission specific to the first target platform;
map, by the binding arbiter, the second verb to a second platform action permission specific to the second target platform;
receive, from a user at the binding arbiter, a request to execute a first task of a software build pipeline on the first target platform and to execute a second task of the software build pipeline on the second target platform, the first task comprising setting up a container by downloading an operating system image and a development environment image, the second task comprising deploying a microservice on the container by pulling and compiling source files;
authenticate, by the binding arbiter, the user;
determine, by the binding arbiter, that the user is associated with the subject class;
authenticate, by the binding arbiter, with the first target platform to obtain the first platform action permission;
authenticate, by the binding arbiter, with the second target platform to obtain the second platform action permission;
execute, by the user, the first task and the second task of the pipeline on the first target platform and the second target platform respectively;
after the first task is executed on the first target platform, revoke, by the binding arbiter, authentication with the first target platform; and
after the second task is executed on the second target platform, revoke, by the binding arbiter, authentication with the second target platform.