知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

510 records (took 0.039 seconds)

    Delayed data access
    131.
    发明授权
    Delayed data access 有权

    公开(公告)号：US10121017B2

    公开(公告)日：2018-11-06

    申请号：US13765239

    申请日：2013-02-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: G06F11/30 ,  G06F21/62 ,  H04L9/08 ,  H04L29/06 ,  G06F21/00

    Abstract: A system uses information submitted in connection with a request to determine if and how to process the request. The information may be electronically signed by a requestor using a key such that the system processing the request can verify that the requestor has the key and that the information is authentic. The information may include information that identifies a holder of a key needed for processing the request, where the holder of the key can be the system or another, possibly third party, system. Requests to decrypt data may be processed to ensure that a certain amount of time passes before access to the decrypted data is provided, thereby providing an opportunity to cancel such requests and/or otherwise mitigate potential security breaches.

    Managing private use of program execution capacity
    132.
    发明授权
    Managing private use of program execution capacity 有权

    公开(公告)号：US10114668B2

    公开(公告)日：2018-10-30

    申请号：US14584808

    申请日：2014-12-29

    Applicant: Amazon Technologies, Inc.

    Inventor： Eric Jason Brandwine ,  James Alfred Gordon Greenfield

    IPC: G06F9/50 ,  G06F9/46 ,  G06Q20/08

    Abstract: Techniques are described for managing execution of programs, including using excess program execution capacity of one or more computing systems. For example, a private pool of excess computing capacity may be maintained for a user based on unused dedicated program execution capacity allocated for that user, with the private pool of excess capacity being available for priority use by that user. Such private excess capacity pools may further in some embodiments be provided in addition to a general, non-private excess computing capacity pool that is available for use by multiple users, optionally including users who are associated with the private excess capacity pools. In some such situations, excess computing capacity may be made available to execute programs on a temporary basis, such that the programs executing using the excess capacity may be terminated at any time if other preferred use for the excess capacity arises.

    Managing computing resource usage for standards compliance
    133.
    发明授权
    Managing computing resource usage for standards compliance 有权

    公开(公告)号：US10104127B2

    公开(公告)日：2018-10-16

    申请号：US15479168

    申请日：2017-04-04

    Applicant: Amazon Technologies, Inc.

    Inventor： Stephen E. Schmidt ,  Eric Jason Brandwine ,  Luis Felipe Cabrera

    IPC: H04L29/06 ,  H04L12/24 ,  H04L9/32 ,  G06F21/53

    Abstract: Systems and methods are provided for configuring and monitoring computing resources of an entity for compliance with one or more standards. In one implementation, a server receives one or more identifiers of one or more standards and determines a plurality of configuration settings for the computing resources of the entity, based on the received one or more identifiers. The plurality of configuration settings comply with the one or more standards. The computing resources of the entity are configured according to the plurality of configuration settings. The server detects an event related to the computing resources. The detected event and the plurality of configuration settings are evaluated for compliance with the one or more standards. A determination is made whether the entity is compliant with the one or more standards, based on the evaluation, and an action is taken, based on the determination.

    MULTIPLE AUTHORITY KEY DERIVATION
    134.
    发明申请
    MULTIPLE AUTHORITY KEY DERIVATION 审中-公开

    公开(公告)号：US20180270051A1

    公开(公告)日：2018-09-20

    申请号：US15984198

    申请日：2018-05-18

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory B. Roth ,  Marc R. Barbour ,  Bradley Jeffrey Behm ,  Cristian M. Ilac ,  Eric Jason Brandwine

    IPC: H04L9/08 ,  H04L9/14

    Abstract: Systems and methods for authentication generate keys from secret credentials shared between authenticating parties and authenticators. Generation of the keys may involve utilizing specialized information in the form of parameters that are used to specialize keys. Keys and/or information derived from keys held by multiple authorities may be used to generate other keys such that signatures requiring such keys and/or information can be verified without access to the keys. Keys may also be derived to form a hierarchy of keys that are distributed such that a key holder's ability to decrypt data depends on the key's position in the hierarchy relative to the position of a key used to encrypt the data. Key hierarchies may also be used to distribute key sets to content processing devices to enable the devices to decrypt content such that sources or potential sources of unauthorized content are identifiable from the decrypted content.

    Securing service layer on third party hardware
    135.
    发明授权
    Securing service layer on third party hardware 有权

    公开(公告)号：US10079681B1

    公开(公告)日：2018-09-18

    申请号：US14476533

    申请日：2014-09-03

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Aaron Douglas Dokey ,  Eric Jason Brandwine ,  Nathan Bartholomew Thomas

    IPC: H04L9/32 ,  H04L29/08 ,  H04L12/911 ,  H04L29/06

    Abstract: Techniques for securely instantiating applications associated with computing resource service provider services on hardware that is controlled by third parties and/or customers of the computing resource service provider are described herein. A request to instantiate an application is received and fulfilled by selecting a computer system from computer systems that are controlled by a third party and/or a customer of the computing resource service provider. The computer system is selected based at least in part on the hardware capabilities of the computer system associated with instantiating a secure execution environment. The application is then instantiated within a secure execution environment operating on the computer system.

    AUTHENTICATION IN A MULTI-TENANT ENVIRONMENT
    136.
    发明申请
    AUTHENTICATION IN A MULTI-TENANT ENVIRONMENT 审中-公开

    公开(公告)号：US20180262485A1

    公开(公告)日：2018-09-13

    申请号：US15977069

    申请日：2018-05-11

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Eric Jason Brandwine ,  Bradley Jeffrey Behm

    IPC: H04L29/06

    CPC classification number: H04L63/0807 ,  H04L63/083

    Abstract: Techniques are described for enabling a Kerberos-based authentication system to provide a client with access to a plurality of unmodifiable components that require plain text passwords. Such an approach enables a user to sign into a distributed computer system using a single password, and access multiple components that require different passwords without the need to enter a second password. By using Kerberos based authentication, passwords are not unnecessarily sent throughout distributed computing system where they may be vulnerable. A proxy key distribution center can be used to manage passwords or other credentials on behalf of various clients, which can be used with various processes discussed herein.

Patent Agency Ranking