知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

385 records (took 0.044 seconds)

    Data security using request-supplied keys
    33.
    发明授权
    Data security using request-supplied keys 有权

    公开(公告)号：US10037428B2

    公开(公告)日：2018-07-31

    申请号：US15090315

    申请日：2016-04-04

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Eric Jason Brandwine

    IPC: H04L9/08 ,  G06F21/60 ,  G06F21/62 ,  H04L29/06 ,  H04L9/32

    Abstract: Requests are submitted to a request processing entity where the requests include a cryptographic key to be used in fulfilling the request. The request processing entity, upon receipt of the request, extracts the key from the request and uses the key to perform one or more cryptographic operations to fulfill the request. The one or more cryptographic operations may include encryption/decryption of data that to be/is stored, in encrypted form, by a subsystem of the request processing entity. Upon fulfillment of the request, the request processing entity may perform one or more operations to lose access to the key in the request, thereby losing the ability to use the key.

    REVOCABLE SHREDDING OF SECURITY CREDENTIALS
    34.
    发明申请
    REVOCABLE SHREDDING OF SECURITY CREDENTIALS 审中-公开

    公开(公告)号：US20180167381A1

    公开(公告)日：2018-06-14

    申请号：US15878957

    申请日：2018-01-24

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine

    IPC: H04L29/06 ,  H04L9/08

    CPC classification number: H04L63/0823 ,  H04L9/0822 ,  H04L9/0891 ,  H04L9/0894 ,  H04L63/06 ,  H04L63/061 ,  H04L2463/062

    Abstract: Customers accessing resources and/or data in a multi-tenant environment can obtain assurance that a provider of that environment will honor only requests associated with the customer. A multi-tenant cryptographic service can be used to manage cryptographic key material and/or other security resources in the multi-tenant environment. The cryptographic service can provide a mechanism in which the service can receive requests to use the cryptographic key material to access encrypted customer data, export key material out of the cryptographic service, destroy key material managed by the cryptographic service, among others. Such an approach can enable a customer to manage key material without exposing the key material outside a secure environment.

    Token based one-time password security
    38.
    发明授权
    Token based one-time password security 有权

    公开(公告)号：US09954856B2

    公开(公告)日：2018-04-24

    申请号：US14976398

    申请日：2015-12-21

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Graeme David Baer ,  Brian Irl Pratt

    IPC: G06F21/34 ,  H04L29/06

    CPC classification number: H04L63/0838 ,  G06F21/34

    Abstract: A one-time password (OTP) based security scheme is described, where a provider pre-generates a number of verification codes (e.g., OTP codes) which will be valid for a predetermined interval. The provider then encodes the verification codes (e.g., by hashing each code with a time value), and stores the verification codes into a data structure. The data structure can be provided to a verification system that can use the set of pre-generated OTP codes to authenticate requests received from users having personal security tokens.

    SESSION NEGOTIATIONS
    39.
    发明申请
    SESSION NEGOTIATIONS 审中-公开

    公开(公告)号：US20180083929A1

    公开(公告)日：2018-03-22

    申请号：US15823450

    申请日：2017-11-27

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: H04L29/06 ,  H04L9/32

    Abstract: A plurality of devices are each operable to provide information that is usable for to prove authorization with any of the other devices. The devices may have common access to a cryptographic key. A device may use the cryptographic key to encrypt a session key and provide both the session key and the encrypted session key. Requests to any of the devices can include the encrypted session key and a digital signature generated using the session key. In this manner, a device that receives the request can decrypt the session key and use the decrypted session key to verify the digital signature.

Patent Agency Ranking