知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

25 records (took 0.025 seconds)

    Impersonating request-based security in connection-based security environment
    1.
    发明授权
    Impersonating request-based security in connection-based security environment 有权

    公开(公告)号：US12058176B1

    公开(公告)日：2024-08-06

    申请号：US17161491

    申请日：2021-01-28

    Applicant: Amazon Technologies, Inc.

    Inventor： Gokul Ramanan Subramanian ,  Sayantan Chakravorty ,  Dennis Tighe ,  Carlos Alessandro Chiconato ,  Damian Wylie

    IPC: H04L29/06 ,  H04L9/40

    CPC classification number: H04L63/20 ,  H04L63/0807 ,  H04L63/0876 ,  H04L63/1483

    Abstract: A connection-based service impersonates request-based security for requests from clients that do not include credentials for the requests (e.g., data plane requests made via a connection-oriented security). A connection between a client and a connection-based service is established based on connection credentials that are based on security credentials from a request-based security service. The credentials are sent by a security component of the service to a local agent of the remote security service to be authenticated by the security service. An impersonation token is returned by the security service and cached by the local agent. Requests from the client to perform operations do not include credentials. For each request, the service passes an identifier for the client and the operation to a local authorization component that calls the agent for authorization of the requested operation. The agent uses the impersonation token to obtain authorization for the requested operation.

    IMPERSONATING REQUEST-BASED SECURITY IN CONNECTION-BASED SECURITY ENVIRONMENT
    6.
    发明公开
    IMPERSONATING REQUEST-BASED SECURITY IN CONNECTION-BASED SECURITY ENVIRONMENT 审中-公开

    公开(公告)号：US20240356985A1

    公开(公告)日：2024-10-24

    申请号：US18762541

    申请日：2024-07-02

    Applicant: Amazon Technologies, Inc.

    Inventor： Gokul Ramanan Subramanian ,  Sayantan Chakravorty ,  Dennis Tighe ,  Carlos Alessandro Chiconato ,  Damian Wylie

    IPC: H04L9/40

    CPC classification number: H04L63/20 ,  H04L63/0807 ,  H04L63/0876 ,  H04L63/1483

    Abstract: A connection-based service impersonates request-based security for requests from clients that do not include credentials for the requests (e.g., data plane requests made via a connection-oriented security). A connection between a client and a connection-based service is established based on connection credentials that are based on security credentials from a request-based security service. The credentials are sent by a security component of the service to a local agent of the remote security service to be authenticated by the security service. An impersonation token is returned by the security service and cached by the local agent. Requests from the client to perform operations do not include credentials. For each request, the service passes an identifier for the client and the operation to a local authorization component that calls the agent for authorization of the requested operation. The agent uses the impersonation token to obtain authorization for the requested operation.

    Streaming data service with isolated read channels
    10.
    发明授权
    Streaming data service with isolated read channels 有权

    公开(公告)号：US10768830B1

    公开(公告)日：2020-09-08

    申请号：US16143341

    申请日：2018-09-26

    Applicant: Amazon Technologies, Inc.

    Inventor： Vasudeva Gade ,  Benjamin Warren Mercier ,  Sayantan Chakravorty ,  Yasemin Avcular ,  Charlie Paucard

    IPC: G06F3/00 ,  G06F3/06

    Abstract: At a data stream management service, a first set of metadata indicating that a first isolated read channel has been associated with a first data stream is stored. The first isolated read channel has an associated read performance limit setting. A second set of metadata indicating that a second isolated read channel, with its own performance limit setting, has been associated with a data stream is also stored. Based on determining that the difference between a metric of read operations associated with the first channel and the read performance limit setting of the first channel meets a first criterion, the service initiates a throttling operation for reads associated with the first channel. The throttling decision is made independently of read metrics of the second channel.

Patent Agency Ranking