-
公开(公告)号:US20190356495A1
公开(公告)日:2019-11-21
申请号:US16525174
申请日:2019-07-29
Applicant: Amazon Technologies, Inc.
Inventor: Arjun Dasarakothapalli , Morgan Akers , David Alan Blunt , Darin Keith McAdams
Abstract: A client obtains, in response to a request to a server, a response that includes data for fulfillment of the request, a digital signature that can be verified using a digital certificate, and location information that specifies a location where the digital certificate can be obtained. The client uses the location information to access the location and obtains the digital certificate. Using the digital certificate, the client evaluates the digital signature provided in the response to determine whether the digital signature is valid. If the digital signature is valid, the client accepts the data included in the response for fulfillment of the request.
-
公开(公告)号:US10708256B1
公开(公告)日:2020-07-07
申请号:US14882120
申请日:2015-10-13
Applicant: Amazon Technologies, Inc.
Inventor: David James Kane-Parry , David Alan Blunt
IPC: H04L29/06
Abstract: A certificate manager allows a particular entity such as an individual computer system, computer application, or network service, to define a customized set of rules that are used to identify digital certificates that are trusted by the particular entity. When a digital certificate is presented to the entity, the certificate manager determines whether the digital certificate is trustworthy by examining the characteristics of the certificate such as the expiration of the certificate, the characteristics of the certificate authorities that signed the digital certificate, or the signing algorithms used to generate the digital signatures on the certificate. The certificate manager may be combined with trusted root CA stores, pinned certificate stores, and other certificate management systems to define a customized set of potentially trusted certificates based on the characteristics of the particular entity.
-
公开(公告)号:US11018874B2
公开(公告)日:2021-05-25
申请号:US16525174
申请日:2019-07-29
Applicant: Amazon Technologies, Inc.
Inventor: Arjun Dasarakothapalli , Morgan Akers , David Alan Blunt , Darin Keith McAdams
Abstract: A client obtains, in response to a request to a server, a response that includes data for fulfillment of the request, a digital signature that can be verified using a digital certificate, and location information that specifies a location where the digital certificate can be obtained. The client uses the location information to access the location and obtains the digital certificate. Using the digital certificate, the client evaluates the digital signature provided in the response to determine whether the digital signature is valid. If the digital signature is valid, the client accepts the data included in the response for fulfillment of the request.
-
公开(公告)号:US10374809B1
公开(公告)日:2019-08-06
申请号:US15377895
申请日:2016-12-13
Applicant: Amazon Technologies, Inc.
Inventor: Arjun Dasarakothapalli , Morgan Akers , David Alan Blunt , Darin Keith McAdams
Abstract: A server obtains response data for an asynchronous response to a request from a client. The server generates, in response to obtaining the response data, a digital signature for the response data. The server makes available the response data, the digital signature, and location information that indicates a location from which a digital certificate usable to verify the digital signature can be obtained.
-
-
-