Authenticating secure channel establishment messages based on shared-secret

    公开(公告)号:US11044082B2

    公开(公告)日:2021-06-22

    申请号:US16563687

    申请日:2019-09-06

    IPC分类号: H04L9/08 H04L9/32 H04L29/06

    摘要: Systems and processes are described for establishing and using a secure channel. A shared secret may be used for authentication of session initiation messages as well as for generation of a private/public key pair for the session. A number of ways of agreeing on the shared secret are described and include pre-sharing the keys, reliance on a key management system, or via a token mechanism that uses a third entity to manage authentication, for example. In some instances, the third party may also perform endpoint selection by providing a particular endpoint along with the token. The particular cipher suite applied in a particular implementation may be configurable. The process is applicable to either implicit key confirmation (e.g., handshake negotiation) or explicit key confirmation (e.g., full negotiation).

    Checkpointing shared state in distributed systems

    公开(公告)号:US10542068B2

    公开(公告)日:2020-01-21

    申请号:US15437376

    申请日:2017-02-20

    摘要: To checkpoint a shared state in a distributed system, a node may first isolate itself from communication with other nodes of a distributed system. The node may then store a checkpoint of the shared state. The node then restarts and attempts to initialize its operating state from the stored checkpoint. In response to successfully initializing its operating state, the node restores communication with one or more other nodes of the distributed system. The node then indicates to the one or more other nodes that the stored checkpoint of the shared state is valid.

    Authenticating secure channel establishment messages based on shared-secret

    公开(公告)号:US10411886B1

    公开(公告)日:2019-09-10

    申请号:US14983242

    申请日:2015-12-29

    IPC分类号: H04L9/08 H04L9/32 H04L29/06

    摘要: Systems and processes are described for establishing and using a secure channel. A shared secret may be used for authentication of session initiation messages as well as for generation of a private/public key pair for the session. A number of ways of agreeing on the shared secret are described and include pre-sharing the keys, reliance on a key management system, or via a token mechanism that uses a third entity to manage authentication, for example. In some instances, the third party may also perform endpoint selection by providing a particular endpoint along with the token. The particular cipher suite applied in a particular implementation may be configurable. The process is applicable to either implicit key confirmation (e.g., handshake negotiation) or explicit key confirmation (e.g., full negotiation).

    Stable leader selection for distributed services

    公开(公告)号:US10367676B1

    公开(公告)日:2019-07-30

    申请号:US14868274

    申请日:2015-09-28

    IPC分类号: H04L12/24

    摘要: A first role manager of a distributed service determines that a leadership assignment decision is to be made with respect to a particular node of the service. The first role manager identifies a particular role indicator value from a first subset of a set of role indicator values according to a value selection order of a role assignment policy of the service. The first role manager is not permitted to assign values from a different subset of the first set of role indicator values. The particular role indicator value is transmitted to the particular node, enabling the particular node to fulfill at least a first category of service requirements corresponding to the role of leader node.