中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

102 records (took 0.018 seconds)

    Host attestation
    34.
    发明授权
    Host attestation 有权

    公开(公告)号：US11620387B2

    公开(公告)日：2023-04-04

    申请号：US17321356

    申请日：2021-05-14

    Applicant: Amazon Technologies, Inc.

    Inventor： Matthew John Campagna ,  Gregory Alan Rubin ,  Eric Jason Brandwine ,  Nicholas Alexander Allen ,  Andrew Kyle Driggs

    IPC: G06F21/57 ,  H04L9/40 ,  H04L9/32 ,  H04L9/08 ,  G06F21/64 ,  H04L9/14 ,  H04L67/01

    Abstract: A service provider provides virtual computing services using a fleet of one or more host computer systems. Each of the host computer systems may be equipped with a trusted platform module (“TPM”). The service provider, the host computer systems, and the virtual computing environments generate attestations that prove the integrity of the system. The attestations are signed with a one-time-use cryptographic key that is verifiable against the public keys of the service provider, a host computer system, and a virtual computing environment. The public key of the host computer system is integrated into a hash tree that links the public key of the host computer system to the public key of the service provider. The public key of the virtual computing environment is signed using a one-time-use graphic key issued to the host computer system that hosts the virtual computing environment.

    Signing key log management
    35.
    发明授权
    Signing key log management 有权

    公开(公告)号：US10924286B2

    公开(公告)日：2021-02-16

    申请号：US15942039

    申请日：2018-03-30

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Alan Rubin ,  Gregory Branchek Roth

    IPC: H04L9/32 ,  H04L9/08 ,  G06F21/64 ,  G06F21/00

    Abstract: Cryptographic keys can include logging properties that enable those keys to be used only if the properties can be enforced by the cryptographic system requested to perform one or more actions using the keys. The logging property can specify how to log use of a respective key. A key can also include a mutability property for specifying whether the logging property can be changed, and if so under what circumstances or in which way(s). The ability to specify and automatically enforce logging can be important for environments where audit logs are essential. These can include, for example, public certificate authorities that must provide accurate and complete audit trails. In cases where the data is not to be provided outside a determined secure environment, the key can be generated with a property indicating not to log any of the usage.

    Data security operations with expectations
    38.
    发明授权
    Data security operations with expectations 有权

    公开(公告)号：US10560441B2

    公开(公告)日：2020-02-11

    申请号：US14574337

    申请日：2014-12-17

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Alan Rubin ,  Gregory Branchek Roth

    IPC: H04L29/06

    Abstract: A cryptography service allows for management of cryptographic keys and for the evaluation of security expectations when processing incoming requests. In some contexts, the cryptography service, upon receiving a request to perform a cryptographic operation, evaluates a set of security expectations to determine whether the cryptographic key or keys usable to perform the cryptographic operation should be trusted. A response to the request is dependent on evaluation of the security expectations.

    Certificate echoing for session security
    39.
    发明授权
    Certificate echoing for session security 有权

    公开(公告)号：US10298404B1

    公开(公告)日：2019-05-21

    申请号：US14569608

    申请日：2014-12-12

    Applicant: Amazon Technologies, Inc.

    Inventor： Bradley Jeffery Behm ,  Gregory Branchek Roth ,  Gregory Alan Rubin

    IPC: H04L9/32

    Abstract: A client establishes a cryptographically protected communications session with a server. To detect a man-in-the-middle, the client echoes information about a certificate purportedly received from the server. The information echoed by the client is digitally signed so as to be verifiable by the server without any cryptographic key used in the cryptographically protected communications session or its establishment, thereby rendering the echoed information unmodifiable by a man-in-the-middle without invalidating the signature. The server can therefore verify both the echoed information and the digital signature to determine whether it has established a cryptographically protected communications session with the client or with a man-in-the-middle purporting to be the client.

    Data integrity verification
    40.
    发明授权
    Data integrity verification 有权

    公开(公告)号：US10263997B2

    公开(公告)日：2019-04-16

    申请号：US15217624

    申请日：2016-07-22

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Gregory Alan Rubin ,  Matthew John Campagna ,  Petr Praus

    IPC: G06F21/00 ,  H04L29/06 ,  G06F21/60 ,  G06F21/64

    Abstract: A system performs cryptographic operations utilizing information usable to verify validity of plaintext. To prevent providing information about a plaintext by providing the information usable to verify the validity of the plaintext, the system provides the information usable to verify validity of the plaintext to an entity on a condition that the entity is authorized to access the plaintext. The information usable to verify validity of the plaintext may be persisted in ciphertext along with the plaintext to enable the plaintext to be verified when decrypted.

Patent Agency Ranking