知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

125 records (took 0.023 seconds)

    Remote attestation of host devices
    41.
    发明授权
    Remote attestation of host devices 有权

    公开(公告)号：US10810015B2

    公开(公告)日：2020-10-20

    申请号：US16289384

    申请日：2019-02-28

    Applicant: Amazon Technologies, Inc.

    Inventor： Nachiketh Rao Potlapally ,  Rachit Chawla ,  Jeremy Ryan Volkman ,  Michael David Marr

    IPC: G06F11/14 ,  G06F9/4401 ,  G06F21/57

    Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.

    Network policy implementation with multiple interfaces
    42.
    发明授权
    Network policy implementation with multiple interfaces 有权

    公开(公告)号：US10564994B2

    公开(公告)日：2020-02-18

    申请号：US16228223

    申请日：2018-12-20

    Applicant: Amazon Technologies, Inc.

    Inventor： Matthew D. Klein ,  Michael David Marr ,  Samuel J. McKelvie

    IPC: G06F15/173 ,  G06F9/455

    Abstract: The transmission of data on computer networks according to one or more policies is disclosed. A policy may specify, among other things, various parameters which are to be followed when transmitting initiating network traffic. Multiple network interfaces may be installed on a server to enable transmission of data from the single server according a number of discrete configuration settings implicated by the various policies. The multiple network interfaces may correspond to separate physical components, with each component configured independently to implement a feature of a policy. The multiple network interfaces may also correspond to a single physical component that exposes multiple network interfaces, both to the network and to the server on which it is installed.

    NETWORK POLICY IMPLEMENTATION WITH MULTIPLE INTERFACES
    43.
    发明申请
    NETWORK POLICY IMPLEMENTATION WITH MULTIPLE INTERFACES 审中-公开

    公开(公告)号：US20190121655A1

    公开(公告)日：2019-04-25

    申请号：US16228223

    申请日：2018-12-20

    Applicant: Amazon Technologies, Inc.

    Inventor： Matthew D. Klein ,  Michael David Marr ,  Samuel J. McKelvie

    IPC: G06F9/455

    CPC classification number: G06F9/45533 ,  G06F9/45558 ,  G06F2009/45575 ,  G06F2009/45595

    Abstract: The transmission of data on computer networks according to one or more policies is disclosed. A policy may specify, among other things, various parameters which are to be followed when transmitting initiating network traffic. Multiple network interfaces may be installed on a server to enable transmission of data from the single server according a number of discrete configuration settings implicated by the various policies. The multiple network interfaces may correspond to separate physical components, with each component configured independently to implement a feature of a policy. The multiple network interfaces may also correspond to a single physical component that exposes multiple network interfaces, both to the network and to the server on which it is installed.

    Automated profiling of resource usage
    46.
    发明授权
    Automated profiling of resource usage 有权

    公开(公告)号：US10015241B2

    公开(公告)日：2018-07-03

    申请号：US15138071

    申请日：2016-04-25

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael David Marr ,  Matthew D. Klein

    IPC: H04L12/24 ,  H04L29/08 ,  G06F9/50

    CPC classification number: H04L67/1008 ,  G06F9/5044 ,  H04L41/0806

    Abstract: Operating profiles for consumers of computing resources may be automatically determined based on an analysis of actual resource usage measurements and other operating metrics. Measurements may be taken while a consumer, such as a virtual machine instance, uses computing resources, such as those provided by a host. A profile may be dynamically determined based on those measurements. Profiles may be generalized such that groups of consumers with similar usage profiles are associated with a single profile. Assignment decisions may be made based on the profiles, and computing resources may be reallocated or oversubscribed if the profiles indicate that the consumers are unlikely to fully utilize the resources reserved for them. Oversubscribed resources may be monitored, and consumers may be transferred to different resource providers if contention for resources is too high.

    Clustered dispersion of resource use in shared computing environments
    47.
    发明授权
    Clustered dispersion of resource use in shared computing environments 有权

    公开(公告)号：US10015107B2

    公开(公告)日：2018-07-03

    申请号：US15357480

    申请日：2016-11-21

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael David Marr ,  Tyson J. Lamoreaux

    IPC: H04L12/911 ,  H04L12/24 ,  H04L12/26 ,  H04L12/931 ,  H04L29/08

    CPC classification number: H04L47/70 ,  H04L41/145 ,  H04L43/0882 ,  H04L47/827 ,  H04L49/20 ,  H04L67/10

    Abstract: Host machines and other devices performing synchronized operations can be dispersed across multiple racks in a data center to provide additional buffer capacity and to reduce the likelihood of congestion. The level of dispersion can depend on factors such as the level of oversubscription, as it can be undesirable in a highly connected network to push excessive host traffic into the aggregation fabric. As oversubscription levels increase, the amount of dispersion can be reduced and two or more host machines can be clustered on a given rack, or otherwise connected through the same edge switch. By clustering a portion of the machines, some of the host traffic can be redirected by the respective edge switch without entering the aggregation fabric. When provisioning hosts for a customer, application, or synchronized operation, for example, the levels of clustering and dispersion can be balanced to minimize the likelihood for congestion throughout the network.

    Firmware updates during limited time period
    50.
    发明授权
    Firmware updates during limited time period 有权

    公开(公告)号：US09823934B2

    公开(公告)日：2017-11-21

    申请号：US14537786

    申请日：2014-11-10

    Applicant: Amazon Technologies, Inc.

    Inventor： Michael David Marr ,  Matthew R. Corddry ,  James R. Hamilton

    IPC: G06F9/44 ,  H04L29/08 ,  G06F9/445 ,  H04L12/24 ,  H04L29/06 ,  G06F21/57

    CPC classification number: G06F9/4416 ,  G06F8/65 ,  G06F21/572 ,  H04L41/082 ,  H04L63/126 ,  H04L67/34

    Abstract: When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.

Patent Agency Ranking