知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

70 records (took 0.041 seconds)

    Virtual service provider zones
    2.
    发明授权
    Virtual service provider zones 有权

    公开(公告)号：US10474829B2

    公开(公告)日：2019-11-12

    申请号：US15712043

    申请日：2017-09-21

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Eric Jason Brandwine ,  Matthew James Wren

    IPC: G06F21/60 ,  G06F21/62

    Abstract: A service proxy services as an application programming interface proxy to a service, which may involve data storage. When a request to store data is received by the service proxy, the service proxy encrypts the data and stores the data in encrypted form at the service. Similarly, when a request to retrieve data is received by the service proxy, the service proxy obtains encrypted data from the service and decrypts the data. The data may be encrypted using a key that is kept inaccessible to the service.

    DATA SECURITY WITH A SECURITY MODULE
    7.
    发明申请
    DATA SECURITY WITH A SECURITY MODULE 审中-公开
    数据安全与安全模块

    公开(公告)号：US20160283723A1

    公开(公告)日：2016-09-29

    申请号：US15173523

    申请日：2016-06-03

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: G06F21/60 ,  H04L29/06

    CPC classification number: G06F21/602 ,  H04L9/0897 ,  H04L63/1416 ,  H04L2209/76

    Abstract: A security module securely manages keys. The security module is usable to implement a cryptography service that includes a request processing component. The request processing component responds to requests by causing the security module to perform cryptographic operations that the request processing component cannot perform due to a lack of access to appropriate keys. The security module may be a member of a group of security modules that securely manage keys. Techniques for passing secret information from one security module to the other prevent unauthorized access to secret information.

    Abstract translation: 一个安全模块可以安全地管理密钥。 安全模块可用于实现包括请求处理组件的加密服务。 请求处理组件通过使安全模块执行密码操作来响应请求，请求处理组件由于缺乏对适当的密钥的访问而无法执行。 安全模块可以是安全管理密钥的一组安全模块的成员。 将秘密信息从一个安全模块传递到另一个安全模块的技术防止未经授权的访问秘密信息。

    Data security with a security module
    8.
    发明授权
    Data security with a security module 有权
    具有安全模块的数据安全性

    公开(公告)号：US09367697B1

    公开(公告)日：2016-06-14

    申请号：US13765020

    申请日：2013-02-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine ,  Brian Irl Pratt

    IPC: G06F21/00 ,  G06F21/60

    CPC classification number: G06F21/602 ,  H04L9/0897 ,  H04L63/1416 ,  H04L2209/76

    Abstract: A security module securely manages keys. The security module is usable to implement a cryptography service that includes a request processing component. The request processing component responds to requests by causing the security module to perform cryptographic operations that the request processing component cannot perform due to a lack of access to appropriate keys. The security module may be a member of a group of security modules that securely manage keys. Techniques for passing secret information from one security module to the other prevent unauthorized access to secret information.

    Abstract translation: 一个安全模块可以安全地管理密钥。 安全模块可用于实现包括请求处理组件的加密服务。 请求处理组件通过使安全模块执行密码操作来响应请求，请求处理组件由于缺乏对适当的密钥的访问而无法执行。 安全模块可以是安全管理密钥的一组安全模块的成员。 将秘密信息从一个安全模块传递到另一个安全模块的技术防止未经授权的访问秘密信息。

    Revocable shredding of security credentials
    9.
    发明授权
    Revocable shredding of security credentials 有权
    可撤销的破解安全凭证

    公开(公告)号：US09071429B1

    公开(公告)日：2015-06-30

    申请号：US13873083

    申请日：2013-04-29

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren ,  Eric Jason Brandwine

    IPC: H04L9/08 ,  H04L29/06 ,  H04L9/32

    CPC classification number: H04L63/0823 ,  H04L9/0822 ,  H04L9/0891 ,  H04L9/0894 ,  H04L63/06 ,  H04L63/061 ,  H04L2463/062

    Abstract: Customers accessing resources and/or data in a multi-tenant environment can obtain assurance that a provider of that environment will honor only requests associated with the customer. A multi-tenant cryptographic service can be used to manage cryptographic key material and/or other security resources in the multi-tenant environment. The cryptographic service can provide a mechanism in which the service can receive requests to use the cryptographic key material to access encrypted customer data, export key material out of the cryptographic service, destroy key material managed by the cryptographic service, among others. Such an approach can enable a customer to manage key material without exposing the key material outside a secure environment.

    Abstract translation: 在多租户环境中访问资源和/或数据的客户可以确保该环境的提供商只会履行与客户相关的请求。 可以使用多租户加密服务来管理多租户环境中的加密密钥资料和/或其他安全资源。 加密服务可以提供一种机制，其中服务可以接收使用加密密钥材料的访问加密客户数据的请求，从密码服务导出密钥材料，销毁密码服务管理的密钥材料等。 这种方法可以使客户能够管理关键材料，而不会将密钥材料暴露在安全环境之外。

    MULTIPLE AUTHORITY DATA SECURITY AND ACCESS
    10.
    发明申请
    MULTIPLE AUTHORITY DATA SECURITY AND ACCESS 有权
    多个权限数据安全和访问

    公开(公告)号：US20140380054A1

    公开(公告)日：2014-12-25

    申请号：US13922875

    申请日：2013-06-20

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Matthew James Wren

    IPC: H04L9/32

    CPC classification number: H04L9/083 ,  G06F21/6209 ,  H04L9/0822 ,  H04L9/0825 ,  H04L9/0894 ,  H04L9/14 ,  H04L63/0435 ,  H04L63/06

    Abstract: Data is encrypted such that multiple keys are needed to decrypt the data. The keys are accessible to different entities so that no single entity has access to all the keys. At least one key is managed by a service provider. A customer computer system of the service provider may be configured with executable instructions directing the orchestration of communications between the various entities having access to the keys. As a result, security compromise in connection with a key does not, by itself, render the data decryptable.

    Abstract translation: 数据被加密，使得需要多个密钥来解密数据。 密钥可以访问不同的实体，以便没有一个实体可以访问所有的密钥。 至少一个密钥由服务提供商管理。 服务提供商的客户计算机系统可以配置有指导在具有访问密钥的各种实体之间的通信协调的可执行指令。 因此，与密钥相关的安全性妥协本身不会使数据可解密。

Patent Agency Ranking