公开(公告)号：US11514175B2

公开(公告)日：2022-11-29

申请号：US17187472

申请日：2021-02-26

Applicant: Amazon Technologies, Inc.

Inventor： Frank Paterra ,  Firat Basarir

IPC: G06F21/60 ,  G06F21/80 ,  G06F21/44 ,  H04L9/08 ,  H04L9/40 ,  G06Q10/08 ,  H04L9/32 ,  G06Q10/00 ,  G06Q10/06

Abstract: When a client requests a data import job, a remote storage service provider provisions a shippable storage device that will be used to transfer client data from the client to the service provider for import. The service provider generates security information for the data import job, provisions the shippable storage device with the security information, and sends the shippable storage device to the client. The service provider also sends client-keys to the client, separate from the shippable storage device (e.g., via a network). The client receives the device, encrypts the client data and keys, transfers the encrypted data and keys onto the device, and ships it back to the service provider. The remote storage service provider authenticates the storage device, decrypts client-generated keys using the client-keys stored at the storage service provider, decrypts the data using the decrypted client-side generated keys, and imports the decrypted data.

公开(公告)号：US10810157B1

公开(公告)日：2020-10-20

申请号：US15279225

申请日：2016-09-28

Applicant: Amazon Technologies, Inc.

Inventor： Frank Charles Paterra ,  Eric Neilsen ,  Firat Basarir ,  Andrew Portnoy

IPC: G06F16/20 ,  G06F16/13 ,  G06F9/54 ,  G06F16/11 ,  G06F16/16 ,  G06F16/182 ,  G06F16/242 ,  G06F16/14

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

公开(公告)号：US20180225464A1

公开(公告)日：2018-08-09

申请号：US15943627

申请日：2018-04-02

Applicant: Amazon Technologies, Inc.

Inventor： Frank Paterra ,  Firat Basarir

IPC: G06F21/60 ,  H04L29/06 ,  H04L9/08 ,  G06F21/44 ,  G06F21/80

CPC classification number: G06F21/606 ,  G06F21/44 ,  G06F21/80 ,  G06Q10/00 ,  G06Q10/06 ,  G06Q10/06314 ,  G06Q10/08 ,  G06Q10/083 ,  H04L9/0822 ,  H04L9/0897 ,  H04L9/3263 ,  H04L63/0428

Abstract: When a client requests a data import job, a remote storage service provider provisions a shippable storage device that will be used to transfer client data from the client to the service provider for import. The service provider generates security information for the data import job, provisions the shippable storage device with the security information, and sends the shippable storage device to the client. The service provider also sends client-keys to the client, separate from the shippable storage device (e.g., via a network). The client receives the device, encrypts the client data and keys, transfers the encrypted data and keys onto the device, and ships it back to the service provider. The remote storage service provider authenticates the storage device, decrypts client-generated keys using the client-keys stored at the storage service provider, decrypts the data using the decrypted client-side generated keys, and imports the decrypted data.

公开(公告)号：US09934389B2

公开(公告)日：2018-04-03

申请号：US14975363

申请日：2015-12-18

Applicant: Amazon Technologies, Inc.

Inventor： Frank Paterra ,  Firat Basarir

IPC: G06F21/60 ,  G06F21/80 ,  G06F21/44 ,  H04L9/08 ,  H04L29/06

CPC classification number: G06F21/606 ,  G06F21/44 ,  G06F21/80 ,  G06Q10/083 ,  H04L9/0822 ,  H04L9/0897 ,  H04L9/3263 ,  H04L63/0428

Abstract: When a client requests a data import job, a remote storage service provider provisions a shippable storage device that will be used to transfer client data from the client to the service provider for import. The service provider generates security information for the data import job, provisions the shippable storage device with the security information, and sends the shippable storage device to the client. The service provider also sends client-keys to the client, separate from the shippable storage device (e.g., via a network). The client receives the device, encrypts the client data and keys, transfers the encrypted data and keys onto the device, and ships it back to the service provider. The remote storage service provider authenticates the storage device, decrypts client-generated keys using the client-keys stored at the storage service provider, decrypts the data using the decrypted client-side generated keys, and imports the decrypted data.