-
公开(公告)号:US11153087B1
公开(公告)日:2021-10-19
申请号:US14983246
申请日:2015-12-29
摘要: Systems and processes are described for establishing and using a secure channel. A shared secret may be used for authentication of session initiation messages as well as for generation of a private/public key pair for the session. A number of ways of agreeing on the shared secret are described and include pre-sharing the keys, reliance on a key management system, or via a token mechanism that uses a third entity such as a hub to manage authentication, for example. In some instances, the third party may also perform endpoint selection (e.g., load balancing) by providing a particular endpoint along with the token.
-
公开(公告)号:US11044082B2
公开(公告)日:2021-06-22
申请号:US16563687
申请日:2019-09-06
摘要: Systems and processes are described for establishing and using a secure channel. A shared secret may be used for authentication of session initiation messages as well as for generation of a private/public key pair for the session. A number of ways of agreeing on the shared secret are described and include pre-sharing the keys, reliance on a key management system, or via a token mechanism that uses a third entity to manage authentication, for example. In some instances, the third party may also perform endpoint selection by providing a particular endpoint along with the token. The particular cipher suite applied in a particular implementation may be configurable. The process is applicable to either implicit key confirmation (e.g., handshake negotiation) or explicit key confirmation (e.g., full negotiation).
-
公开(公告)号:US10542068B2
公开(公告)日:2020-01-21
申请号:US15437376
申请日:2017-02-20
IPC分类号: H04L29/08 , H04L12/911 , H04L29/06
摘要: To checkpoint a shared state in a distributed system, a node may first isolate itself from communication with other nodes of a distributed system. The node may then store a checkpoint of the shared state. The node then restarts and attempts to initialize its operating state from the stored checkpoint. In response to successfully initializing its operating state, the node restores communication with one or more other nodes of the distributed system. The node then indicates to the one or more other nodes that the stored checkpoint of the shared state is valid.
-
公开(公告)号:US10411886B1
公开(公告)日:2019-09-10
申请号:US14983242
申请日:2015-12-29
摘要: Systems and processes are described for establishing and using a secure channel. A shared secret may be used for authentication of session initiation messages as well as for generation of a private/public key pair for the session. A number of ways of agreeing on the shared secret are described and include pre-sharing the keys, reliance on a key management system, or via a token mechanism that uses a third entity to manage authentication, for example. In some instances, the third party may also perform endpoint selection by providing a particular endpoint along with the token. The particular cipher suite applied in a particular implementation may be configurable. The process is applicable to either implicit key confirmation (e.g., handshake negotiation) or explicit key confirmation (e.g., full negotiation).
-
公开(公告)号:US10367676B1
公开(公告)日:2019-07-30
申请号:US14868274
申请日:2015-09-28
IPC分类号: H04L12/24
摘要: A first role manager of a distributed service determines that a leadership assignment decision is to be made with respect to a particular node of the service. The first role manager identifies a particular role indicator value from a first subset of a set of role indicator values according to a value selection order of a role assignment policy of the service. The first role manager is not permitted to assign values from a different subset of the first set of role indicator values. The particular role indicator value is transmitted to the particular node, enabling the particular node to fulfill at least a first category of service requirements corresponding to the role of leader node.
-
公开(公告)号:US10331657B1
公开(公告)日:2019-06-25
申请号:US14868267
申请日:2015-09-28
发明人: Timothy Daniel Cole , Artem Danilov , Andrew Wayne Ross , John Michael Morkel , Tate Andrew Certain , Allan Henry Vermeulen , Christopher Richard Jacques De Kadt
IPC分类号: G06F16/30 , G06F16/23 , G06F16/901 , G06F16/2453 , G06F16/2455
摘要: An analytics tool of a journal-based multi-data-store database obtains respective rejection cause descriptors for a set of transactions rejected by the journal manager of the database due to read-write conflicts. A particular rejection cause descriptor indicates a query predicate used for a read set of a transaction request which was rejected by a journal manager of the database due to a read-write conflict between the read set and a previously-committed transaction. The analytics tool prepares a database contention analysis using the rejection cause descriptors, and transmits the analysis to a client.
-
公开(公告)号:US10157194B1
公开(公告)日:2018-12-18
申请号:US15199889
申请日:2016-06-30
发明人: Timothy Daniel Cole , John Michael Morkel , Yevgeniy Mikhaylyuta , Allan Henry Vermeulen , Christopher Richard Jacques de Kadt
IPC分类号: G06F17/30
摘要: A journaled database system may comprise data nodes that maintain a collection of data structured in accordance with a schema. A change to the schema may be applied by a journal module while a journal consumer continues to operate using a prior version of the schema. A buffer may be formed and have stored therein records describing state change instructions according to the prior view of the schema. An index of correspondence between the records in the buffer and in the source journal may be maintained.
-
公开(公告)号:US20180322149A1
公开(公告)日:2018-11-08
申请号:US16035425
申请日:2018-07-13
IPC分类号: G06F17/30
CPC分类号: G06F17/30289
摘要: A configuration manager of a storage service receives a set of service requirements, comprising one or more of: a performance requirement for one or more types of storage operations, or an access interface type requirement Based on the service requirements, a candidate storage configuration that includes one or more data store instances and a first log-based transaction manager is generated. Subsequent to an approval of the first storage configuration by a client, the establishment of the data store instances and the log-based transaction manager is initiated.
-
公开(公告)号:US10013184B1
公开(公告)日:2018-07-03
申请号:US15199929
申请日:2016-06-30
发明人: John Michael Morkel , Timothy Daniel Cole , Christopher Richard Jacques de Kadt , Allan Henry Vermeulen
CPC分类号: G06F3/067 , G06F3/0611 , G06F3/0617 , G06F3/0619 , G06F3/0653 , G06F3/0659
摘要: A system may comprise a storage device on which counters are stored. A counter may be associated with an identifier. A computing node of the system may receive a request to modify the counter. In response to the request, a read signature may be stored and may comprise a hash of the identifier and a tolerance of the counter to change. A write signature may be stored in response to the request, and may comprise a hash of the identifier and a magnitude of the requested modification. A conflict may be detected by comparing a sum of the magnitudes of requested changes to the tolerance of the read operation.
-
公开(公告)号:US09990391B1
公开(公告)日:2018-06-05
申请号:US14833001
申请日:2015-08-21
发明人: Timothy Daniel Cole , John Michael Morkel , Christopher Richard Jacques De Kadt , Artem Danilov , Allan Henry Vermeulen , Tate Andrew Certain , Andrew Wayne Ross
CPC分类号: G06F17/30371 , G06F17/30383 , G06F17/30578
摘要: A journal manager of a multi-data-store storage system receives a transaction which includes a message to be stored in the storage system's journal if the transaction request is accepted for commit. The journal manager performs a conflict detection operation, accepts the transaction request, and stores a corresponding committed transaction entry including the message in the journal. A write applier associated with a registered materialization node of the journal reads the committed transaction entry and applies a write indicated in the entry. A registered message subscriber of the journal reads the committed transaction entry asynchronously with respect to the write applier, and reads the contents of the message without applying the write.
-
-
-
-
-
-
-
-
-