-
公开(公告)号:US10810015B2
公开(公告)日:2020-10-20
申请号:US16289384
申请日:2019-02-28
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F11/14 , G06F9/4401 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US10241804B2
公开(公告)日:2019-03-26
申请号:US15483227
申请日:2017-04-10
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F11/14 , G06F9/4401 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US20170255472A1
公开(公告)日:2017-09-07
申请号:US15483227
申请日:2017-04-10
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
CPC classification number: G06F9/4401 , G06F9/4406 , G06F11/1417 , G06F11/1446 , G06F21/575
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US20140310510A1
公开(公告)日:2014-10-16
申请号:US13863296
申请日:2013-04-15
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
CPC classification number: G06F9/4401 , G06F9/4406 , G06F11/1417 , G06F11/1446 , G06F21/575
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。
-
公开(公告)号:US20140310509A1
公开(公告)日:2014-10-16
申请号:US13862923
申请日:2013-04-15
Applicant: Amazon Technologies, Inc
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F11/14
CPC classification number: G06F11/1417 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。
-
公开(公告)号:US20190196843A1
公开(公告)日:2019-06-27
申请号:US16289384
申请日:2019-02-28
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F9/4401 , G06F11/14 , G06F21/57
CPC classification number: G06F9/4401 , G06F9/4406 , G06F11/1417 , G06F11/1446 , G06F21/575
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US09992064B1
公开(公告)日:2018-06-05
申请号:US14683487
申请日:2015-04-10
Applicant: Amazon Technologies, Inc.
Inventor: Rachit Chawla , Christopher John Rose , Jeremy Ryan Volkman , Mayilan Balachandran , Christopher Edward Folger , Kenneth Oliver Henderson, Jr. , Dmytro Taran , Abhoy Bhaktwatsalam , Justin Oliver Pietsch
IPC: G06F15/173 , H04L12/24
CPC classification number: H04L41/082 , H04L41/0816
Abstract: The following description is directed to configuring network devices. In one example, at a network device deployment pipeline, a request can be received from a non-integrated configuration tool to configure a network device of a network. The configuration of the network device can be scheduled so that both an integrated configuration tool of the network device deployment pipeline and the non-integrated configuration tool can configure the network.
-
公开(公告)号:US09893940B1
公开(公告)日:2018-02-13
申请号:US14721925
申请日:2015-05-26
Applicant: Amazon Technologies, Inc.
Inventor: Rachit Chawla , Mayilan Balachandran , Jeremy Ryan Volkman , Christopher John Rose , Kenneth Oliver Henderson, Jr. , Muralidhar Koka , Abhoy Bhaktwatsalam
IPC: G06F15/177 , H04L12/24 , G06F17/30 , H04L12/911 , H04L12/703 , G06F9/445
CPC classification number: H04L41/082 , G06F9/445 , G06F17/30914 , H04L41/00 , H04L41/0816 , H04L45/28 , H04L47/822
Abstract: The following description is directed to topologically aware network device configuration. In one example, components to be configured within a network can be mapped to one or more redundancy groups within a network topology of the network. The components to be configured can be selectively configured within the network so that network traffic continues during the configuration. Selectively configuring the components can include choosing an order to configure the components based on configuration rules and the mapping of the components to the one or more redundancy groups.
-
公开(公告)号:US09619238B2
公开(公告)日:2017-04-11
申请号:US13863296
申请日:2013-04-15
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
CPC classification number: G06F9/4401 , G06F9/4406 , G06F11/1417 , G06F11/1446 , G06F21/575
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US09594638B2
公开(公告)日:2017-03-14
申请号:US13862923
申请日:2013-04-15
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
CPC classification number: G06F11/1417 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。
-
-
-
-
-
-
-
-
-