知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

47 records (took 0.02 seconds)

    Complete forward access sessions
    2.
    发明授权
    Complete forward access sessions 有权

    公开(公告)号：US11115220B2

    公开(公告)日：2021-09-07

    申请号：US15146836

    申请日：2016-05-04

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Graeme David Baer

    IPC: H04L9/32 ,  H04L9/14 ,  H04L29/06

    Abstract: A system and method wherein an authentication request to verify authentication information submitted to a first system in connection with a first request submitted to the first system is received from the first system. A response to the authentication request is generated that includes information usable by a second system to make, without communicating with the authentication system, based at least in part on the information and one or more cryptographic processes, a determination whether fulfillment of a second request from the first system is allowable under authority of the authentication system, with the determination being based at least in part on policy information included in the information that specifies one or more policies applicable to an identity that is associated with the first request. The response generated is provided to the first system.

    REFRESH TOKEN FOR CREDENTIAL RENEWAL
    3.
    发明申请
    REFRESH TOKEN FOR CREDENTIAL RENEWAL 审中-公开

    公开(公告)号：US20200153831A1

    公开(公告)日：2020-05-14

    申请号：US16704985

    申请日：2019-12-05

    Applicant: Amazon Technologies, Inc.

    Inventor： Graeme David Baer ,  Dmitry Frenkel ,  Marc R. Barbour

    IPC: H04L29/06

    Abstract: Security credentials issued by an entity, such as an identity broker, can have a limited lifetime. Access to resources or content under those credentials then can only be obtained for a limited period of time, limiting the ability of an unauthorized entity obtaining the credentials to utilize those credentials for access. Along with the credentials, a refresh token can be issued to a requesting client that can enable the limited lifetime of the credentials to be renewed up to a maximum lifetime of the credentials and/or the token. A service providing access can determine that the client has a valid copy of the refresh token when the credentials are about to expire, and if so can cause the lifetime of the credentials to be extended another credential lifetime. This renewal can be done transparent to a user and without again contacting the identity broker.

    Virtual communication endpoint services
    4.
    发明授权
    Virtual communication endpoint services 有权

    公开(公告)号：US10484433B2

    公开(公告)日：2019-11-19

    申请号：US15888722

    申请日：2018-02-05

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Graeme David Baer ,  Eric Jason Brandwine

    IPC: H04L29/00 ,  H04L29/06 ,  H04L29/08 ,  G06F21/62

    Abstract: Customers can utilize resources of a multi-tenant environment to provide one or more services available to various users. In order to simplify the process for these customers, the multi-tenant environment can include an infrastructure wherein a portion of the resources provide an authentication and/or authorization service that can be leveraged by the customer services. These resources can logically sit in front of the resources used to provide the customer services, such that a user request must pass through the authorization and authentication service before being directed to the customer service. Such resources can provide other functionality as well, such as load balancing and metering.

    Source-inclusive credential verification
    5.
    发明授权
    Source-inclusive credential verification 有权

    公开(公告)号：US10110578B1

    公开(公告)日：2018-10-23

    申请号：US13797886

    申请日：2013-03-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Graeme David Baer ,  Gregory Branchek Roth

    IPC: G06F7/04 ,  H04L29/06

    Abstract: Access to resources or data can be managed based at least in part upon a validation of credentials. A customer can have customer credentials, such as a username and password pair, that can be used to obtain access according to terms of a customer account. A computing device used to gain the access can also have device credentials, which can be based upon identifying information from the device or provided to the device upon a successful login. The customer account might be locked for a period of time if a number of unsuccessful login attempts are received over a designated period of time. If, however, a request is received with device credentials for a trusted and/or recognized device, at least one additional login attempt might be granted in order to prevent a customer from being locked out of the account due to actions of other persons and/or devices.

    Token based one-time password security
    6.
    发明授权
    Token based one-time password security 有权
    基于令牌的一次性密码安全

    公开(公告)号：US09218476B1

    公开(公告)日：2015-12-22

    申请号：US13671304

    申请日：2012-11-07

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Graeme David Baer ,  Brian Irl Pratt

    IPC: G06F21/34

    CPC classification number: H04L63/0838 ,  G06F21/34

    Abstract: A one-time password (OTP) based security scheme is described, where a provider pre-generates a number of verification codes (e.g., OTP codes) which will be valid for a predetermined interval. The provider then encodes the verification codes (e.g., by hashing each code with a time value), and stores the verification codes into a data structure. The data structure can be provided to a verification system that can use the set of pre-generated OTP codes to authenticate requests received from users having personal security tokens.

    Abstract translation: 描述了基于一次密码（OTP）的安全方案，其中提供商预先生成将在预定间隔内有效的许多验证码（例如，OTP码）。 然后，提供商对验证码进行编码（例如，通过用时间值对每个代码进行散列），并将验证码存储到数据结构中。 可以将数据结构提供给可以使用一组预先生成的OTP代码来验证从具有个人安全令牌的用户接收的请求的验证系统。

    VIRTUAL SERVICE AUTHORIZATION
    8.
    发明申请
    VIRTUAL SERVICE AUTHORIZATION 有权

    公开(公告)号：US20220029993A1

    公开(公告)日：2022-01-27

    申请号：US17173584

    申请日：2021-02-11

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Eric Jason Brandwine ,  Graeme David Baer

    IPC: H04L29/06

    Abstract: A computing resource service provides flexible configuration of authorization rules. A set of authorization rules which define whether fulfillment of requests. The set of authorization rules are applied to a request of a first type which is mapped to a request of a second type. The request of the second type is used for fulfillment of the request of the first type when the authorization rules so allow.

    Refresh token for credential renewal
    9.
    发明授权
    Refresh token for credential renewal 有权

    公开(公告)号：US10567381B1

    公开(公告)日：2020-02-18

    申请号：US14972676

    申请日：2015-12-17

    Applicant: Amazon Technologies, Inc.

    Inventor： Graeme David Baer ,  Dmitry Frenkel ,  Marc R. Barbour

    IPC: H04L29/06

    Abstract: Security credentials issued by an entity, such as an identity broker, can have a limited lifetime. Access to resources or content under those credentials then can only be obtained for a limited period of time, limiting the ability of an unauthorized entity obtaining the credentials to utilize those credentials for access. Along with the credentials, a refresh token can be issued to a requesting client that can enable the limited lifetime of the credentials to be renewed up to a maximum lifetime of the credentials and/or the token. A service providing access can determine that the client has a valid copy of the refresh token when the credentials are about to expire, and if so can cause the lifetime of the credentials to be extended another credential lifetime. This renewal can be done transparent to a user and without again contacting the identity broker.

Patent Agency Ranking