Asymmetric session credentials
    12.
    发明授权

    公开(公告)号:US10680827B2

    公开(公告)日:2020-06-09

    申请号:US15875995

    申请日:2018-01-19

    Abstract: Techniques for using short-term credentials using asymmetric session keys are described herein. A request for a short-term credential is received that is digitally signed with a different credential. In response to the request, short-term credential data is generated and populated with a public session key corresponding to a private session key. The short-term credential data is then encrypted with a session encryption key to produce the short-term credential token, which can then be used by the requester as a short-term credential for subsequent requests.

    Directory schema deployment with pipelines

    公开(公告)号:US10678528B1

    公开(公告)日:2020-06-09

    申请号:US15819170

    申请日:2017-11-21

    Abstract: A system such as a service of a computing resource service provider, a directory service, a directory server, or any suitable system includes executable code that, if executed by one or more processors, causes the system to perform a first stage of a multi-stage deployment of a first directory schema by at least providing a second directory schema to a first computer system, wherein the first computer system is associated with a directory configured according to the first directory schema and causing the first computer system to reconfigure the directory according to the second directory schema The system may also determine, based on a result of reconfiguring the directory, whether to proceed to a second stage of the multi-stage deployment of the first directory schema. The system may be utilized as part of a directory schema update process wherein a multi-stage deployment pipeline is utilized.

    Personalizing global session identifiers

    公开(公告)号:US10182044B1

    公开(公告)日:2019-01-15

    申请号:US14958892

    申请日:2015-12-03

    Abstract: Techniques for personalizing short-term session credentials are described herein. A global session key is provided to a plurality of regions of a computing resource service provider and an account key is also provided to one or more of the plurality of regions based at least in part on those regions being trusted by a customer of the computing resource service provider. When a request for short-term session credentials is received at the trusted region by that customer, a session token is generated and encrypted with a combination of the global session key and the account key, thereby creating a session token that can be uniquely associated with the customer and that may only be used in regions that that customer has designated as trusted regions.

Patent Agency Ranking