公开(公告)号：US10574443B2

公开(公告)日：2020-02-25

申请号：US15045113

申请日：2016-02-16

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Julian Tribble ,  Robert Michael Barry ,  Jeremy Boynes ,  Melissa Elaine Davis ,  Igor Spac

IPC: H04L9/08 ,  H04L29/06 ,  G06F21/60

Abstract: A computing device can obtain a session key for encrypting data that is communicated between a client device and the computing device. The computing device can receive, from the client device, an encrypted request for data. The encrypted request can be encrypted by the client device using the session key. The data requested can be stored on a second computing device. The computing device can send, to the second computing device, a copy of the session key and the encrypted request for data. The second computing device can decrypt the data using the session key and can also encrypt data responsive to the request using the session key.

公开(公告)号：US09935977B1

公开(公告)日：2018-04-03

申请号：US14100663

申请日：2013-12-09

Applicant: AMAZON TECHNOLOGIES, INC.

Inventor： Alexander Julian Tribble ,  Robert Michael Barry ,  Jeremy Boynes ,  Igor Spac

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/0428 ,  H04L63/105 ,  H04L63/12 ,  H04L63/168

Abstract: Techniques are described for delivering one or more first resources of a page using a first security level, and delivering one or more second resources of a page using a second, different security level. A page is generated to include elements identifying resources to be presented in the page, and the elements may include security level identifiers indicating a security level to be employed in communicating the corresponding resource. Each security level may be associated with a set of security measures that ensure the integrity or confidentiality of the resource while it is communicated. The use of multiple security levels to communicate multiple resources may provide appropriate security for each resource, reducing latency and overhead in page generation, communication, and rendering.

公开(公告)号：US09819626B1

公开(公告)日：2017-11-14

申请号：US14229338

申请日：2014-03-28

Applicant: Amazon Technologies, Inc.

Inventor： Paul William Berg ,  Alexander Julian Tribble ,  Robert Michael Barry

IPC: G06F15/16 ,  H04L12/58 ,  H04L12/911 ,  H04L29/08

CPC classification number: H04L51/18 ,  G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L41/5006 ,  H04L41/5009 ,  H04L43/10 ,  H04L47/78 ,  H04L67/10 ,  H04L67/1002 ,  H04L69/24

Abstract: A first component of a network-accessible service is configured to participate in client-server interactions with other components of the service via a default communication channel. The first component has access to an alternate communication channel available only to a subset of components of the service. Using the alternate communication channel, the first component reaches a local workload agreement with a second component, in accordance with which at least some service requests of the first component or the second component are fulfilled using the alternate communication channel.

公开(公告)号：US20160173280A1

公开(公告)日：2016-06-16

申请号：US15045113

申请日：2016-02-16

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Julian Tribble ,  Robert Michael Barry ,  Jeremy Boynes ,  Melissa Elaine Davis ,  Igor Spac

IPC: H04L9/08 ,  G06F21/60 ,  H04L29/06

CPC classification number: H04L9/0827 ,  G06F21/60 ,  G06F21/606 ,  H04L9/0838 ,  H04L63/0435 ,  H04L63/067 ,  H04L2209/76

Abstract: A computing device can obtain a session key for encrypting data that is communicated between a client device and the computing device. The computing device can receive, from the client device, an encrypted request for data. The encrypted request can be encrypted by the client device using the session key. The data requested can be stored on a second computing device. The computing device can send, to the second computing device, a copy of the session key and the encrypted request for data. The second computing device can decrypt the data using the session key and can also encrypt data responsive to the request using the session key.

Abstract translation: 计算设备可以获得用于加密在客户端设备和计算设备之间传送的数据的会话密钥。 计算设备可以从客户端设备接收加密的数据请求。 加密请求可以由客户端设备使用会话密钥进行加密。 所请求的数据可以存储在第二计算设备上。 计算设备可以向第二计算设备发送会话密钥的副本和加密的数据请求。 第二计算设备可以使用会话密钥解密数据，并且还可以使用会话密钥来响应于该请求对数据进行加密。

公开(公告)号：US09270449B1

公开(公告)日：2016-02-23

申请号：US14158636

申请日：2014-01-17

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Julian Tribble ,  Robert Michael Barry ,  Jeremy Boynes ,  Melissa Elaine Davis ,  Igor Spac

IPC: H04L29/00 ,  H04L9/08 ,  H04L29/06 ,  G06F21/60

CPC classification number: H04L9/0827 ,  G06F21/60 ,  G06F21/606 ,  H04L9/0838 ,  H04L63/0435 ,  H04L63/067 ,  H04L2209/76

Abstract: A computing device can obtain a session key for encrypting data that is communicated between a client device and the computing device. The computing device can receive, from the client device, an encrypted request for data. The encrypted request can be encrypted by the client device using the session key. The data requested can be stored on a second computing device. The computing device can send, to the second computing device, a copy of the session key and the encrypted request for data. The second computing device can decrypt the data using the session key and can also encrypt data responsive to the request using the session key.

Abstract translation: 计算设备可以获得用于加密在客户端设备和计算设备之间传送的数据的会话密钥。 计算设备可以从客户端设备接收加密的数据请求。 加密请求可以由客户端设备使用会话密钥进行加密。 所请求的数据可以存储在第二计算设备上。 计算设备可以向第二计算设备发送会话密钥的副本和加密的数据请求。 第二计算设备可以使用会话密钥解密数据，并且还可以使用会话密钥来响应于该请求对数据进行加密。