公开(公告)号：US09998335B2

公开(公告)日：2018-06-12

申请号：US14952519

申请日：2015-11-25

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Kevin Christopher Miller ,  Andrew J. Doane

IPC: H04L12/28 ,  H04L12/24 ,  H04L12/715 ,  H04L12/713 ,  H04L12/751 ,  G06F9/455 ,  H04L29/08 ,  H04J1/16

CPC classification number: H04L41/12 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/0816 ,  H04L41/5096 ,  H04L45/02 ,  H04L45/586 ,  H04L45/64 ,  H04L67/34

Abstract: Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify a logical network topology for a managed computer network with multiple computing nodes that includes one or more virtual networking devices each associated with a specified group of the multiple computing nodes. Corresponding networking functionality may be provided for communications between the multiple computing nodes by emulating functionality that would be provided by the networking devices if they were physically present and configured to support the specified network topology. In some situations, the managed computer network is a virtual computer network overlaid on a substrate network, and the networking device functionality emulating includes receiving routing communications directed to the networking devices and using included routing information to update the specified network topology for the managed computer network.

公开(公告)号：US20180069844A1

公开(公告)日：2018-03-08

申请号：US15645936

申请日：2017-07-10

Applicant: Amazon Technologies, Inc.

Inventor： Todd Lawrence Cignetti ,  Andrew J. Doane ,  Eric Jason Brandwine ,  Robert Eric Fitzgerald

IPC: H04L29/06 ,  G06F9/455 ,  H04L9/32

CPC classification number: H04L63/061 ,  G06F9/45533 ,  H04L9/3247 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/0876

Abstract: Organizations maintain and generate large amounts of sensitive information using computer hardware resources and services of a service provider. Furthermore, there is a need to be able to delete large amounts of data securely and quickly by encrypting the data with a key and destroying the key. To ensure that information stored remotely is secured and capable of secure deletion, cryptographic keys used by the organization should be prevented from being persistently stored during serialization operations. If the keys used to encrypt the data have not been exposed during serialization operation, they may be deleted or destroyed enabling the destruction of data encrypted with the keys.

公开(公告)号：US20170272417A1

公开(公告)日：2017-09-21

申请号：US15615727

申请日：2017-06-06

Applicant: Amazon Technologies, Inc.

Inventor： Todd Lawrence Cignetti ,  Eric Jason Brandwine ,  Robert Eric Fitzgerald ,  Andrew J. Doane

IPC: H04L29/06 ,  G06F21/62 ,  G06F21/60 ,  G06F9/455 ,  G06F9/48

CPC classification number: H04L63/061 ,  G06F9/45558 ,  G06F9/4812 ,  G06F21/602 ,  G06F21/6218 ,  G06F2221/2101 ,  G06F2221/2143

Abstract: Organizations maintain and generate large amounts of sensitive information using computer hardware resources and services of a service provider. Furthermore, there is a need to be able to delete large amounts of data securely and quickly by encrypting the data with a key and destroying the key. To ensure that information stored remotely is secured and capable of secure deletion, cryptographic keys used by the organization should be prevented from being persistently stored during serialization operations.

公开(公告)号：US09769021B2

公开(公告)日：2017-09-19

申请号：US14977392

申请日：2015-12-21

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/28 ,  H04L12/24 ,  H04L12/727 ,  H04L12/721 ,  H04L12/707 ,  H04L12/701 ,  H04L12/26

CPC classification number: H04L41/0826 ,  H04L43/50 ,  H04L45/00 ,  H04L45/121 ,  H04L45/14 ,  H04L45/22

Abstract: Techniques are described for providing managed virtual computer networks that have a configured logical network topology with virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the virtual networking devices if they were physically present. In some situations, the networking functionality provided for a managed computer network of a client includes receiving routing communications directed to the virtual networking devices and using included routing cost information to update the configuration of the managed computer network, and/or includes determining actual cost information corresponding to use of an underlying substrate network and providing routing cost information to the client that reflects the determined actual cost information, so as to enable the client to modify the configuration of the managed computer network accordingly.

公开(公告)号：US09756018B2

公开(公告)日：2017-09-05

申请号：US15179700

申请日：2016-06-10

Applicant: Amazon Technologies, Inc.

Inventor： Andrew J. Doane ,  Eric Jason Brandwine

IPC: H04L29/06 ,  H04L29/08 ,  H04L29/12

CPC classification number: H04L63/0272 ,  H04L61/2069 ,  H04L63/10 ,  H04L67/18 ,  H04L67/34 ,  H04L67/36

Abstract: Techniques are described for providing users with access to computer networks, such as to enable users to interact with a remote configurable network service to create and configure computer networks that are provided by the configurable network service for use by the users. Secure private access between a computer network provided for a user by the configurable network service and one or more other remote computing systems of the user (e.g., a remote private network) may be enabled in various ways. For example, a user may programmatically invoke an API provided by the configurable network service to obtain assistance in establishing remote access from a remote location to a provided computer network of the configurable network service, such as to establish a VPN connection from the remote location to the provided computer network using hardware and/or software supplied to the remote location in response to the API invocation.

公开(公告)号：US09722871B2

公开(公告)日：2017-08-01

申请号：US14715412

申请日：2015-05-18

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/24 ,  H04L12/751 ,  H04L12/715 ,  H04L12/713

CPC classification number: H04L41/0816 ,  H04L41/12 ,  H04L45/02 ,  H04L45/04 ,  H04L45/586

Abstract: Techniques are described for providing managed virtual computer networks that have a configured logical network topology with virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the virtual networking devices if they were physically present. In some situations, the networking functionality provided for a managed computer network of a client includes receiving routing communications directed to the virtual networking devices and using included routing information to update the configuration of the managed computer network, such as to allow at least some computing nodes of a managed computer network to dynamically signal particular types of uses of one or more indicated target network addresses and/or to dynamically signal use of particular external public network addresses based on such routing information.

公开(公告)号：US09686349B2

公开(公告)日：2017-06-20

申请号：US14721878

申请日：2015-05-26

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: G06F15/16 ,  H04L29/08 ,  H04L29/06 ,  H04L29/12 ,  H04L12/24

CPC classification number: H04L41/0816 ,  H04L41/08 ,  H04L41/0806 ,  H04L61/103 ,  H04L61/2007 ,  H04L61/251 ,  H04L61/6004 ,  H04L61/6059 ,  H04L63/0272 ,  H04L67/10 ,  H04L67/16

Abstract: Techniques are described for managing communications between multiple computing nodes, such as for computing nodes that are part of managed virtual computer networks provided on behalf of users or other entities. In some situations, one or more of the computing nodes of a managed virtual computer network is configured to perform actions to extend capabilities of the managed virtual computer network to other computing nodes that are not part of the managed virtual computer network, such as by forwarding communications between computing nodes of the managed virtual computer network and the other external computing nodes so as to enable the other external computing nodes to participate in the managed virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

公开(公告)号：US20160080213A1

公开(公告)日：2016-03-17

申请号：US14952519

申请日：2015-11-25

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Kevin Christopher Miller ,  Andrew J. Doane

IPC: H04L12/24 ,  H04L12/713

CPC classification number: H04L41/12 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/0816 ,  H04L41/5096 ,  H04L45/02 ,  H04L45/586 ,  H04L45/64 ,  H04L67/34

Abstract: Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify a logical network topology for a managed computer network with multiple computing nodes that includes one or more virtual networking devices each associated with a specified group of the multiple computing nodes. Corresponding networking functionality may be provided for communications between the multiple computing nodes by emulating functionality that would be provided by the networking devices if they were physically present and configured to support the specified network topology. In some situations, the managed computer network is a virtual computer network overlaid on a substrate network, and the networking device functionality emulating includes receiving routing communications directed to the networking devices and using included routing information to update the specified network topology for the managed computer network.

Abstract translation: 描述了为被管理的计算机网络提供虚拟网络功能的技术。 在某些情况下，用户可以配置或以其他方式指定具有多个计算节点的被管理计算机网络的逻辑网络拓扑，所述多个计算节点包括每个与多个计算节点的指定组相关联的一个或多个虚拟网络设备。 可以通过模拟由网络设备提供的功能（如果它们物理存在并被配置为支持指定的网络拓扑）来为多个计算节点之间的通信提供相应的网络功能。 在一些情况下，被管理计算机网络是覆盖在基板网络上的虚拟计算机网络，并且模拟的网络设备功能包括接收定向到网络设备的路由通信，并使用包括的路由信息​​来更新被管理计算机网络的指定网络拓扑 。

公开(公告)号：US20150334054A1

公开(公告)日：2015-11-19

申请号：US14807752

申请日：2015-07-23

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/947 ,  H04L12/931 ,  H04L12/933

CPC classification number: H04L49/252 ,  H04L29/06 ,  H04L29/08072 ,  H04L41/0803 ,  H04L41/12 ,  H04L45/02 ,  H04L49/15 ,  H04L49/70 ,  H04L65/1069

Abstract: Techniques are described for providing managed virtual computer networks whose configured logical network topology may have one or more virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of a virtual computer network by emulating functionality that would be provided by the networking devices if they were physically present. The networking functionality provided for a managed computer network may include supporting a connection between that managed computer network and other managed computer networks, such as via a provided virtual peering router to which each of the managed computer networks may connect, with the functionality of the virtual peering router being emulated by modules of the configurable network service without physically providing the virtual peering router, including to manage data communications between computing nodes of the inter-connected managed computer networks in accordance with client-specified configuration information.

Abstract translation: 描述了用于提供被管理的虚拟计算机网络的技术，其被配置的逻辑网络拓扑可以具有一个或多个虚拟网络设备，诸如通过网络可访问的可配置网络服务，具有为虚拟计算机网络的多个计算节点之间的通信提供的相应的网络功能 通过模拟由网络设备提供的功能，如果它们是物理存在的。 为受管理的计算机网络提供的联网功能可以包括支持该被管理的计算机网络与其他被管理的计算机网络之间的连接，例如经由所提供的虚拟对等路由器，每个被管理的计算机网络可以连接到该虚拟对等路由器与虚拟的 对等路由器被可配置网络服务的模块仿真，而不物理地提供虚拟对等路由器，包括根据客户端指定的配置信息来管理连接在一起的被管理计算机网络的计算节点之间的数据通信。

公开(公告)号：US20150134791A1

公开(公告)日：2015-05-14

申请号：US14599182

申请日：2015-01-16

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/24 ,  G06F9/455

CPC classification number: H04L41/0816 ,  G06F9/45533 ,  H04L41/50 ,  H04L61/103 ,  H04L61/251 ,  H04L69/167 ,  H04W4/02 ,  H04W80/045

Abstract: Techniques are described for managing communications between multiple computing nodes, such as computing nodes that are part of a virtual computer network. In some situations, various types of modifications may be made to one or more computing nodes of an existing virtual computer network, and the described techniques include managing ongoing communications for those computing nodes so as to accommodate the modifications. Such modifications may include, for example, migrating or otherwise moving a particular computing node that is part of a virtual network to a new physical network location, or modifying other aspects of how the computing node participates in the virtual network (e.g., changing one or more virtual network addresses used by the computing node). In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

Abstract translation: 描述了用于管理多个计算节点（例如作为虚拟计算机网络的一部分的计算节点）之间的通信的技术。 在一些情况下，可以对现有虚拟计算机网络的一个或多个计算节点进行各种类型的修改，并且所描述的技术包括管理那些计算节点的持续通信，以便适应这些修改。 这样的修改可以包括例如将作为虚拟网络的一部分的特定计算节点迁移或以其他方式移动到新的物理网络位置，或修改计算节点如何参与虚拟网络的其他方面（例如，改变一个或多个 计算节点使用更多的虚拟网络地址）。 在一些情况下，计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点，诸如由一个或多个用户代表或代表一个或多个用户。