公开(公告)号：US11588889B1

公开(公告)日：2023-02-21

申请号：US17219614

申请日：2021-03-31

Applicant: Amazon Technologies, Inc.

Inventor： Selvanayagam Sendurpandian ,  Ross Engers ,  Luke Curley ,  Nikhil Purushe ,  Andrew Francis ,  Daniel Lin ,  Tarek Amara ,  Shuhan Jin ,  Levi Lovelock ,  Berk Taner ,  Yann Landry ,  Neeraj Satish Joshi ,  Jean-Sebastien Royer

IPC: G06F15/173 ,  H04L67/1074 ,  H04L9/32 ,  H04L9/08 ,  H04L67/60

Abstract: A processing service of a provider network may protect media content from being tampered with when it is transmitted from the provider network/transcoder to untrusted networks (e.g., third-party networks/CDNs) and to a media player. The processing service (e.g., the transcoder) generates a public and a private key. The service uses the private key to digitally sign content portions (e.g., video frames) before distribution to untrusted CDNs. The provider network creates a manifest that includes the public key. To play the media content, the media player obtains a manifest that includes the public key (via a secure/trusted connection with the provider network). The media player may then obtain the media content from an untrusted edge server/CDN and validate it using the public key that was separately obtained from the manifest (to verify the content was not tampered with).

公开(公告)号：US20230328300A1

公开(公告)日：2023-10-12

申请号：US18330302

申请日：2023-06-06

Applicant: Amazon Technologies, Inc.

Inventor： Selvanayagam Sendurpandian ,  Ross Engers ,  Luke Curley ,  Nikhil Purushe ,  Andrew Francis ,  Daniel Lin ,  Tarek Amara ,  Shuhan Jin ,  Levi Lovelock ,  Berk Taner ,  Yann Landry ,  Neeraj Satish Joshi ,  Jean-Sebastien Royer

IPC: H04N21/2347 ,  H04L9/06 ,  H04L9/08

CPC classification number: H04N21/2347 ,  H04L9/0643 ,  H04L9/0825

Abstract: A processing service of a provider network may protect media content from being tampered with when it is transmitted from the provider network/transcoder to untrusted networks (e.g., third-party networks/CDNs) and to a media player. The processing service (e.g., the transcoder) generates a public and a private key. The service uses the private key to digitally sign content portions (e.g., video frames) before distribution to untrusted CDNs. The provider network creates a manifest that includes the public key. To play the media content, the media player obtains a manifest that includes the public key (via a secure/trusted connection with the provider network). The media player may then obtain the media content from an untrusted edge server/CDN and validate it using the public key that was separately obtained from the manifest (to verify the content was not tampered with).

公开(公告)号：US12108096B2

公开(公告)日：2024-10-01

申请号：US18330302

申请日：2023-06-06

Applicant: Amazon Technologies, Inc.

Inventor： Selvanayagam Sendurpandian ,  Ross Engers ,  Luke Curley ,  Nikhil Purushe ,  Andrew Francis ,  Daniel Lin ,  Tarek Amara ,  Shuhan Jin ,  Levi Lovelock ,  Berk Taner ,  Yann Landry ,  Neeraj Satish Joshi ,  Jean-Sebastien Royer

IPC: H04N21/2347 ,  H04L9/06 ,  H04L9/08

CPC classification number: H04N21/2347 ,  H04L9/0643 ,  H04L9/0825

Abstract: A processing service of a provider network may protect media content from being tampered with when it is transmitted from the provider network/transcoder to untrusted networks (e.g., third-party networks/CDNs) and to a media player. The processing service (e.g., the transcoder) generates a public and a private key. The service uses the private key to digitally sign content portions (e.g., video frames) before distribution to untrusted CDNs. The provider network creates a manifest that includes the public key. To play the media content, the media player obtains a manifest that includes the public key (via a secure/trusted connection with the provider network). The media player may then obtain the media content from an untrusted edge server/CDN and validate it using the public key that was separately obtained from the manifest (to verify the content was not tampered with).

公开(公告)号：US20240422370A1

公开(公告)日：2024-12-19

申请号：US18817115

申请日：2024-08-27

Applicant: Amazon Technologies, Inc.

Inventor： Selvanayagam Sendurpandian ,  Ross Engers ,  Luke Curley ,  Nikhil Purushe ,  Andrew Francis ,  Daniel Lin ,  Tarek Amara ,  Shuhan Jin ,  Levi Lovelock ,  Berk Taner ,  Yann Landry ,  Neeraj Satish Joshi ,  Jean-Sebastien Royer

IPC: H04N21/2347 ,  H04L9/06 ,  H04L9/08

Abstract: A processing service of a provider network may protect media content from being tampered with when it is transmitted from the provider network/transcoder to untrusted networks (e.g., third-party networks/CDNs) and to a media player. The processing service (e.g., the transcoder) generates a public and a private key. The service uses the private key to digitally sign content portions (e.g., video frames) before distribution to untrusted CDNs. The provider network creates a manifest that includes the public key. To play the media content, the media player obtains a manifest that includes the public key (via a secure/trusted connection with the provider network). The media player may then obtain the media content from an untrusted edge server/CDN and validate it using the public key that was separately obtained from the manifest (to verify the content was not tampered with).

公开(公告)号：US11711555B1

公开(公告)日：2023-07-25

申请号：US17219585

申请日：2021-03-31

Applicant: Amazon Technologies, Inc.

Inventor： Selvanayagam Sendurpandian ,  Ross Engers ,  Luke Curley ,  Nikhil Purushe ,  Andrew Francis ,  Daniel Lin ,  Tarek Amara ,  Shuhan Jin ,  Levi Lovelock ,  Berk Taner ,  Yann Landry ,  Neeraj Satish Joshi ,  Jean-Sebastien Royer

IPC: H04N21/2347 ,  H04L9/06 ,  H04L9/08

CPC classification number: H04N21/2347 ,  H04L9/0643 ,  H04L9/0825

Abstract: A processing service of a provider network may protect media content from being tampered with when it is transmitted from the provider network/transcoder to untrusted networks (e.g., third-party networks/CDNs) and to a media player. The processing service (e.g., the transcoder) generates a public and a private key. The service uses the private key to digitally sign content portions (e.g., video frames) before distribution to untrusted CDNs. The provider network creates a manifest that includes the public key. To play the media content, the media player obtains a manifest that includes the public key (via a secure/trusted connection with the provider network). The media player may then obtain the media content from an untrusted edge server/CDN and validate it using the public key that was separately obtained from the manifest (to verify the content was not tampered with).

公开(公告)号：US11368492B1

公开(公告)日：2022-06-21

申请号：US17039340

申请日：2020-09-30

Applicant: Amazon Technologies, Inc.

Inventor： Ross Engers ,  Jaco Le Roux

IPC: G06F21/60 ,  H04L29/06 ,  H04L9/40 ,  H04L65/80 ,  H04L41/0893

Abstract: Techniques for parameterized trust and permission policies between entities for cloud resources are described. A method of parameterized trust and permission policies between entities for cloud resources may include receiving, by an access control service of a provider network, a request to generate a parameterized policy template, the parameterized policy template including characteristics of at least one action or at least one resource to be specified by a user, receiving a parameterized action list or a parameterized resource list from the user, validating the parameterized action list or the parameterized resource list based on the characteristics defined in the parameterized policy template, and generating a parameterized role based on the parameterized policy template and the parameterized action list or the parameterized resource list.