知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

65 records (took 0.047 seconds)

    FEDERATED KEY MANAGEMENT
    51.
    发明申请
    FEDERATED KEY MANAGEMENT 有权
    联合关键管理

    公开(公告)号：US20140229737A1

    公开(公告)日：2014-08-14

    申请号：US13765209

    申请日：2013-02-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: H04L9/08

    CPC classification number: H04L9/088 ,  H04L9/0618 ,  H04L9/0643 ,  H04L9/0891 ,  H04L9/14 ,  H04L9/30 ,  H04L9/321 ,  H04L9/3247

    Abstract: A system uses information submitted in connection with a request to determine if and how to process the request. The information may be electronically signed by a requestor using a key such that the system processing the request can verify that the requestor has the key and that the information is authentic. The information may include information that identifies a holder of a key needed for processing the request, where the holder of the key can be the system or another, possibly third party, system. Requests to decrypt data may be processed to ensure that a certain amount of time passes before access to the decrypted data is provided, thereby providing an opportunity to cancel such requests and/or otherwise mitigate potential security breaches.

    Abstract translation: 系统使用与请求相关联的信息来确定是否以及如何处理请求。 信息可以由请求者使用密钥电子签名，使得处理请求的系统可以验证请求者具有密钥并且信息是真实的。 信息可以包括识别处理请求所需的密钥的持有者的信息，其中密钥的持有者可以是系统或另一个，可能是第三方系统。 可以处理对数据解密的请求，以确保在访问解密数据之前经过一定量的时间，从而提供取消这种请求和/或以其他方式缓解潜在安全漏洞的机会。

    Automatic key rotation
    53.
    发明授权
    Automatic key rotation 有权

    公开(公告)号：US11372993B2

    公开(公告)日：2022-06-28

    申请号：US16673753

    申请日：2019-11-04

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: G06F11/30 ,  G06F21/62 ,  G06F12/14

    Abstract: Requests submitted to a computer system are evaluated for compliance with policy to ensure data security. Plaintext and associated data are used as inputs into a cipher to produce ciphertext. Whether a result of decrypting the ciphertext can be provided in response to a request is determined based at least in part on evaluation of a policy that itself is based at least in part on the associated data. Other policies include automatic rotation of keys to prevent keys from being used in enough operations to enable cryptographic attacks intended to determine the keys.

    Versioned access controls
    55.
    发明授权
    Versioned access controls 有权

    公开(公告)号：US10346626B1

    公开(公告)日：2019-07-09

    申请号：US13854679

    申请日：2013-04-01

    Applicant: Amazon Technologies, Inc.

    Inventor： Brian Irl Pratt ,  Kathryn Marie Shih ,  Patrick James Ward

    IPC: G06F17/30 ,  G06F21/62

    Abstract: Methods and systems for implementing versioned access controls are disclosed. A first task is added to a first workflow with a first version of a default role. A second version of the default role is generated after the first task is added. A second task is added to a second workflow with the second version of the default role. The first version and the second version each comprise one or more permissions for using one or more computing resources. The first task is performed using the permissions in the first version of the default role. The second task is performed using the permissions in the second version of the default role.

    ACCESS CONTROL USING IMPERSONIZATION
    56.
    发明申请
    ACCESS CONTROL USING IMPERSONIZATION 审中-公开

    公开(公告)号：US20180183837A1

    公开(公告)日：2018-06-28

    申请号：US15900465

    申请日：2018-02-20

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Brian Irl Pratt

    IPC: H04L29/06 ,  H04L9/32 ,  G06F21/60

    Abstract: A first service submits a request to a second service on behalf of a customer of a service provider. The request may have been triggered by a request of the customer to the first service. To process the request, the second service evaluates one or more policies to determine whether fulfillment of the request is allowed by policy associated with the customer. The one or more policies may state one or more conditions on one or more services that played a role in submission of the request. If determined that the policy allows fulfillment of the request, the second service fulfills the request.

    FEDERATED KEY MANAGEMENT
    59.
    发明申请
    FEDERATED KEY MANAGEMENT 审中-公开

    公开(公告)号：US20170093581A1

    公开(公告)日：2017-03-30

    申请号：US15376451

    申请日：2016-12-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: H04L9/32 ,  H04L9/08 ,  H04L9/30 ,  H04L9/14 ,  H04L9/06

    Abstract: A system uses information submitted in connection with a request to determine if and how to process the request. The information may be electronically signed by a requestor using a key such that the system processing the request can verify that the requestor has the key and that the information is authentic. The information may include information that identifies a holder of a key needed for processing the request, where the holder of the key can be the system or another, possibly third party, system. Requests to decrypt data may be processed to ensure that a certain amount of time passes before access to the decrypted data is provided, thereby providing an opportunity to cancel such requests and/or otherwise mitigate potential security breaches.

Patent Agency Ranking