中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

102 records (took 0.027 seconds)

    Configuration updates for access-restricted hosts
    2.
    发明授权
    Configuration updates for access-restricted hosts 有权

    公开(公告)号：US10904011B2

    公开(公告)日：2021-01-26

    申请号：US16179548

    申请日：2018-11-02

    Applicant: Amazon Technologies, Inc.

    Inventor： Justin Lee Werner ,  Gregory Alan Rubin ,  Matthew John Campagna ,  Michael Bentkofsky

    IPC: H04L29/06 ,  H04L9/32 ,  G06F9/4401 ,  G06F9/445 ,  G06F9/50 ,  H04L12/24

    Abstract: A host machine operated for a specific purpose can have restricted access to other components in a multi-tenant environment in order to provide for the security of the host machine. The access restriction can prevent the host machine from obtaining updates to critical system-level configurations, but such information can be obtained through a signed command received to an API for the host machine. The command can be signed by a quorum of operators, and the host machine can be configured to verify the signatures and the quorum before processing the command. The host machine can store the updates to ephemeral storage as well as persistent storage, such that upon a reboot or power cycle the host machine can operate with current configuration data.

    Durable cryptographic keys
    3.
    发明授权
    Durable cryptographic keys 有权

    公开(公告)号：US10728031B2

    公开(公告)日：2020-07-28

    申请号：US16167377

    申请日：2018-10-22

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Gregory Alan Rubin

    IPC: H04L9/08 ,  G06F12/14

    Abstract: Cryptographic keys are durably stored for an amount of time. A cryptographic key is encrypted so as to be decryptable using another cryptographic key that has a limited lifetime. The other cryptographic key can be used to decrypt the encrypted cryptographic key to restore the cryptographic key during the lifetime of the other cryptographic key. After the lifetime of the other cryptographic key, if a copy of the cryptographic key is lost (e.g., inadvertently and unrecoverably deleted from memory), the cryptographic key becomes irrecoverable.

    CRYPTOGRAPHIC KEY MANAGEMENT FOR IMPORTED CRYPTOGRAPHIC KEYS
    5.
    发明申请
    CRYPTOGRAPHIC KEY MANAGEMENT FOR IMPORTED CRYPTOGRAPHIC KEYS 审中-公开

    公开(公告)号：US20190068363A1

    公开(公告)日：2019-02-28

    申请号：US16174033

    申请日：2018-10-29

    Applicant: Amazon Technologies, Inc.

    Inventor： Aleksandrs J. Rudzitis ,  Alexis Lynn Carlough ,  Gregory Alan Rubin ,  Matthew John Campagna

    IPC: H04L9/08

    Abstract: A cryptographic key management service receives a request to import a first cryptographic key. In response to the request, the service creates a public cryptographic key and a private cryptographic key. The private cryptographic key is encrypted using a second cryptographic key to create an import key token. The import key token and the public cryptographic key are provided in response to the request. The service receives an encrypted first cryptographic key, which the service decrypts using the private cryptographic key to obtain the first cryptographic key. The service stores the first cryptographic key and enables its use for the performance of cryptographic operations.

    Trusted malware scanning
    6.
    发明授权
    Trusted malware scanning 有权

    公开(公告)号：US10133867B1

    公开(公告)日：2018-11-20

    申请号：US15083728

    申请日：2016-03-29

    Applicant: Amazon Technologies, Inc.

    Inventor： Eric Jason Brandwine ,  Matthew John Campagna ,  Gregory Alan Rubin

    IPC: G06F21/56 ,  H04L29/06 ,  H04L9/32

    Abstract: A trusted co-processor can provide a hardware-based observation point into the operation of a host machine owned by a resource provider or other such entity. The co-processor can be installed via a peripheral card on a fast bus, such as a PCI bus, on the host machine. The co-processor can execute malware detection software, and can use this software to analyze data and/or code obtained from the relevant resources of the host machine. The trusted co-processor can notify the customer or another appropriate entity of the results of the scan, such that an appropriate action can be taken if malware is detected. The results of the scan can be trusted, as malware will be unable to falsify such a notification or modify the operation of the trusted co-processor.

    Signature delegation
    7.
    发明授权
    Signature delegation 有权

    公开(公告)号：US10129034B2

    公开(公告)日：2018-11-13

    申请号：US15946614

    申请日：2018-04-05

    Applicant: Amazon Technologies, Inc.

    Inventor： Matthew John Campagna ,  Gregory Alan Rubin ,  Nicholas Alexander Allen ,  Andrew Kyle Driggs ,  Eric Jason Brandwine

    IPC: H04L9/32 ,  H04L9/30 ,  H04L9/14 ,  H04L9/08 ,  H04L9/06

    Abstract: A signature authority generates a master seed value that is used to generate a seed tree of subordinate nodes. Each subordinate node of the seed tree is generated from the value of its parent node using a cryptographic hash or one-way function. The signature authority selects subordinate seed values from the seed tree which are distributed to one or more subordinates, each of which generates a set of one-time-use cryptographic keys from the provided seed. Each subordinate generates a hash tree from its set of one-time-use cryptographic keys, and returns the root of its hash tree to the signature authority. The signature authority integrates the hashes provided by the key generators into a comprehensive hash tree, and the root of the hash tree acts as a public key for the signature authority.

Patent Agency Ranking