知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

63 records (took 0.074 seconds)

    Security association management
    41.
    发明授权
    Security association management 有权

    公开(公告)号：US10516652B1

    公开(公告)日：2019-12-24

    申请号：US15445459

    申请日：2017-02-28

    Applicant: AMAZON TECHNOLOGIES, INC.

    Inventor： Omer Hashmi ,  Andrew Hemstreet Redmon

    IPC: H04L29/06 ,  G06F9/455

    Abstract: A system (and method) includes a plurality of compute devices configured to execute an endpoint node and a provisioning service. The endpoint node is configured to establish an encrypted communication channel over a public network. The provisioning service is configured to retrieve configuration parameters from a database. The configuration parameters define a security association for the encrypted communication channel and include an encryption key and an identifier of an encryption algorithm. The provisioning service is configured to transmit the configuration parameters to the endpoint node for use in implementation of a security association for the encrypted communication channel.

    Controlling user access to command execution
    42.
    发明授权
    Controlling user access to command execution 有权

    公开(公告)号：US10397232B2

    公开(公告)日：2019-08-27

    申请号：US14750868

    申请日：2015-06-25

    Applicant: Amazon Technologies, Inc.

    Inventor： Omer Hashmi ,  Katherine Yichen Chung

    IPC: H04L29/08 ,  H04L29/06 ,  G06F9/455 ,  G06F9/50

    Abstract: Techniques are described for providing users with access to perform commands on network-accessible computing resources. In some situations, permissions are established for user(s) to execute command(s) on computing node(s) provided by an online service, such as by maintaining various permission information externally to those provided computing nodes for use in controlling users' ability to access, use, and/or modify the provided computing nodes. An interface component may use such external permissions information to determine if a particular user is authorized to execute one or more particular commands on one or more particular computing nodes, and to initiate simultaneous and independent execution of the command(s) on the computing node(s) when authorized. The interface component may further aggregate results from each computing node that executed the command(s), prior to providing the results to the user.

    Propagating access rules on virtual networks in provider network environments
    43.
    发明授权
    Propagating access rules on virtual networks in provider network environments 有权

    公开(公告)号：US10326710B1

    公开(公告)日：2019-06-18

    申请号：US14843881

    申请日：2015-09-02

    Applicant: Amazon Technologies, Inc.

    Inventor： Omer Hashmi ,  Mark Edward Stalzer

    IPC: G06F15/173 ,  H04L12/911 ,  G06F9/455

    Abstract: Methods and apparatus that automatically propagate access rules for access groups within clients' virtual networks on a provider network. A peering protocol may be used to advertise routes from a gateway of a client's external network to a virtual gateway of the client's virtual network via direct and/or virtual connections. The advertised routes may be automatically propagated into the virtual network so that traffic can flow between the source address ranges of the advertised routes and the virtual network. Access group information may be included as metadata with at least some route advertisements. Access rules for access groups on the virtual network may be automatically created or updated according to the metadata included with the advertised routes to allow access from network addresses on the client's external network to the client's resources in the access groups.

    CONTROLLING USER ACCESS TO COMMAND EXECUTION
    44.
    发明申请
    CONTROLLING USER ACCESS TO COMMAND EXECUTION 审中-公开
    控制用户访问命令执行

    公开(公告)号：US20160381032A1

    公开(公告)日：2016-12-29

    申请号：US14750868

    申请日：2015-06-25

    Applicant: Amazon Technologies, Inc.

    Inventor： Omer Hashmi ,  Katherine Yichen Chung

    IPC: H04L29/06

    CPC classification number: H04L63/102 ,  G06F9/45512 ,  G06F9/45533 ,  G06F9/468 ,  H04L63/10 ,  H04L67/10 ,  H04L67/306

    Abstract: Techniques are described for providing users with access to perform commands on network-accessible computing resources. In some situations, permissions are established for user(s) to execute command(s) on computing node(s) provided by an online service, such as by maintaining various permission information externally to those provided computing nodes for use in controlling users' ability to access, use, and/or modify the provided computing nodes. An interface component may use such external permissions information to determine if a particular user is authorized to execute one or more particular commands on one or more particular computing nodes, and to initiate simultaneous and independent execution of the command(s) on the computing node(s) when authorized. The interface component may further aggregate results from each computing node that executed the command(s), prior to providing the results to the user.

    Abstract translation: 描述了为用户提供对网络可访问的计算资源执行命令的访问的技术。 在某些情况下，建立用户在由在线服务提供的计算节点上执行命令的权限，例如通过将所提供的计算节点外部的各种许可信息保持在用于控制用户的能力 访问，使用和/或修改所提供的计算节点。 接口组件可以使用这样的外部许可信息来确定特定用户是否被授权在一个或多个特定计算节点上执行一个或多个特定命令，并且启动计算节点上的命令的同时且独立的执行 s）授权时。 在向用户提供结果之前，接口组件可以进一步聚合来自执行命令的每个计算节点的结果。

Patent Agency Ranking