专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10084818B1 Flexibly configurable data modification services 有权
公开(公告)号：US10084818B1
公开(公告)日：2018-09-25
申请号：US13491403
申请日：2012-06-07
申请人： Gregory B. Roth , Graeme D. Baer , Eric Jason Brandwine
发明人： Gregory B. Roth , Graeme D. Baer , Eric Jason Brandwine
IPC分类号： G06F15/173 , H04L29/06
CPC分类号： H04L63/20 , G06F15/173 , H04L63/0263
摘要： Techniques for processing data according to customer-defined rules are disclosed. In particular, methods and systems for implementing a data alteration service using one or resources of a distributed computing system are described. The data alteration service is flexibly configurable by entities using the distributed computing system, and may be used to augment, compress, filter or otherwise modify data crossing a customer boundary.

2. 发明授权

US10070195B1 Computing resource service security method 有权
公开(公告)号：US10070195B1
公开(公告)日：2018-09-04
申请号：US13370214
申请日：2012-02-09
申请人： Eric Jason Brandwine , Nathan R. Fitch
发明人： Eric Jason Brandwine , Nathan R. Fitch
IPC分类号： G06F21/00 , H04N21/488
摘要： Techniques are described for providing users with computing resources, such as to enable users to interact with a remote configurable computing resource service in order to create and configure computing resources that are provided by the configurable computing resource service for use by the users. Computing resources provided by the configurable computing resource service may be configured to be private computing resources that are accessible only by the users who create them. The configurable computing resource service provides one or more interfaces that allow a user to provide to the computing resource service an indication of a security concern related to the provided computing resources, and responds to a received indication of a security concern by taking one or more actions to secure the provided computing resources.

3. 发明授权

US09497040B1 Using virtual networking devices and routing information to initiate external actions 有权
标题翻译：使用虚拟网络设备和路由信息来启动外部操作
公开(公告)号：US09497040B1
公开(公告)日：2016-11-15
申请号：US13542441
申请日：2012-07-05
申请人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
发明人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： G06F15/177 , H04L29/06 , H04L12/46 , H04L12/24
CPC分类号： H04L12/4641 , H04L12/66 , H04L41/5041 , H04L41/5096 , H04L45/586
摘要： Techniques are described for providing managed virtual computer networks that have a configured logical network topology with virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the virtual networking devices if they were physically present. In some situations, the networking functionality provided for a managed computer network of a client includes receiving routing communications directed to the virtual networking devices, and using included routing information to identify and initiate external actions whose effects are not related to how network communications between computing nodes of the managed computer network are configured to be routed or otherwise forwarded through the managed computer network, such as external actions that affect devices that are not part of the managed computer network, or other types of external actions.
摘要翻译：描述了用于提供具有配置的逻辑网络拓扑的管理虚拟计算机网络的技术，其中具有虚拟网络设备，例如通过网络可访问的可配置网络服务，具有为虚拟计算机网络的多个计算节点之间的通信提供的对应网络功能，虚拟网络设备如果物理存在的话将提供的功能。在某些情况下，为客户端的受管计算机网络提供的网络功能包括接收定向到虚拟网络设备的路由通信，并且使用包括的路由信息来识别和启动其影响与计算节点之间的网络通信无关的外部动作被管理的计算机网络被配置为被路由或以其他方式通过被管理的计算机网络转发，例如影响不属于被管理的计算机网络的设备的外部动作或其他类型的外部动作。

4. 发明授权

US09450967B1 Intelligent network service provisioning and maintenance 有权
标题翻译：智能网络服务配置和维护
公开(公告)号：US09450967B1
公开(公告)日：2016-09-20
申请号：US13461596
申请日：2012-05-01
申请人： Arijit Ganguly , Andrew B. Dickinson , Christopher J. Lefelhocz , Manish Agarwal , Ian R. Searle , Eric Jason Brandwine
发明人： Arijit Ganguly , Andrew B. Dickinson , Christopher J. Lefelhocz , Manish Agarwal , Ian R. Searle , Eric Jason Brandwine
IPC分类号： G06F15/177 , H04L29/06 , H04L12/24
CPC分类号： H04L63/126 , H04L41/08 , H04L41/0823 , H04L41/5041 , H04L63/0218 , H04L63/1458 , H04L63/20
摘要： A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.
摘要翻译：代表客户实体实现网络网关。网络网关可以使用分布式计算机系统来实现，并且网络网关可以将客户实体的网络连接到公共通信网络。网络网关可以包括网络相关服务，而不需要添加专门的硬件。响应于从客户实体接收到的指令，网络网关可以以编程方式提供。网络网关可以通过几种不同类型的数据连接进行配置和访问。网络网关凭借在分布式计算机系统上的实现，可根据需要进行扩展，而无需客户实体的额外输入。

5. 发明授权

US09294437B1 Remotely configured network appliances and services 有权
标题翻译：远程配置的网络设备和服务
公开(公告)号：US09294437B1
公开(公告)日：2016-03-22
申请号：US13461478
申请日：2012-05-01
申请人： Arijit Ganguly , Andrew B. Dickinson , Christopher J. Lefelhocz , Manish Agarwal , Ian R. Searle , Eric Jason Brandwine
发明人： Arijit Ganguly , Andrew B. Dickinson , Christopher J. Lefelhocz , Manish Agarwal , Ian R. Searle , Eric Jason Brandwine
IPC分类号： G06F15/173 , H04L29/06
CPC分类号： H04L63/00 , H04L63/0272 , H04L63/0281 , H04L63/1458 , H04L63/20
摘要： A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.
摘要翻译：代表客户实体实现网络网关。网络网关可以使用分布式计算机系统来实现，并且网络网关可以将客户实体的网络连接到公共通信网络。网络网关可以包括网络相关服务，而不需要添加专门的硬件。响应于从客户实体接收到的指令，网络网关可以以编程方式提供。网络网关可以通过几种不同类型的数据连接进行配置和访问。网络网关凭借在分布式计算机系统上的实现，可根据需要进行扩展，而无需客户实体的额外输入。

6. 发明授权

US09288182B1 Network gateway services and extensions 有权
标题翻译：网络网关服务和扩展
公开(公告)号：US09288182B1
公开(公告)日：2016-03-15
申请号：US13461566
申请日：2012-05-01
申请人： Arijit Ganguly , Andrew B. Dickinson , Christopher J. Lefelhocz , Manish Agarwal , Ian R. Searle , Eric Jason Brandwine
发明人： Arijit Ganguly , Andrew B. Dickinson , Christopher J. Lefelhocz , Manish Agarwal , Ian R. Searle , Eric Jason Brandwine
IPC分类号： G06F15/173 , H04L29/06 , H04L12/24
CPC分类号： H04L63/00 , H04L41/022 , H04L63/0272 , H04L63/1441 , H04L63/1458 , H04L63/20
摘要： A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.
摘要翻译：代表客户实体实现网络网关。网络网关可以使用分布式计算机系统来实现，并且网络网关可以将客户实体的网络连接到公共通信网络。网络网关可以包括网络相关服务，而不需要添加专门的硬件。响应于从客户实体接收到的指令，网络网关可以以编程方式提供。网络网关可以通过几种不同类型的数据连接进行配置和访问。网络网关凭借在分布式计算机系统上的实现，可根据需要进行扩展，而无需客户实体的额外输入。

7. 发明授权

US09225744B1 Constrained credentialed impersonation 有权
标题翻译：受限证明的假冒
公开(公告)号：US09225744B1
公开(公告)日：2015-12-29
申请号：US13461562
申请日：2012-05-01
申请人： Bradley Jeffery Behm , Gregory B. Roth , Matthew A. Estes , Eric Jason Brandwine , Patrick J. Ward
发明人： Bradley Jeffery Behm , Gregory B. Roth , Matthew A. Estes , Eric Jason Brandwine , Patrick J. Ward
IPC分类号： G06F17/00 , H04L29/06
CPC分类号： H04L63/20 , H04L63/102 , H04L67/02
摘要： Client impersonation is recognized by an access control service using servicer credentials to allow a servicer to impersonate a user's context while requesting actions be performed on a computing resource. A servicer may be requested to perform an action through impersonation, granting access to the context of a user related to the computing resource. The computing resource receives servicer credentials and impersonation information from the servicer. After verifying the servicer's authorization to perform actions under the context of the user, the servicer may attempt to perform the requested action. The action may be logged as performed by the servicer impersonating the user. The user may also be billed for any costs incurred.
摘要翻译：使用服务器凭据的访问控制服务识别客户端模拟，以允许服务器模拟用户的上下文，同时请求在计算资源上执行操作。可能请求服务器通过模拟来执行操作，授予访问与计算资源相关的用户的上下文的权限。计算资源从服务器接收服务器凭据和模拟信息。在验证服务器在用户上下文中执行操作的授权之后，服务器可能会尝试执行请求的操作。该操作可能会记录在服务器模拟用户的情况下。用户也可能会收取任何费用。

8. 发明授权

US09197409B2 Key derivation techniques 有权
标题翻译：关键推导技术
公开(公告)号：US09197409B2
公开(公告)日：2015-11-24
申请号：US13248973
申请日：2011-09-29
申请人： Gregory B. Roth , Bradley Jeffery Behm , Eric D. Crahen , Cristian M. Ilac , Nathan R. Fitch , Eric Jason Brandwine , Kevin Ross O'Neill
发明人： Gregory B. Roth , Bradley Jeffery Behm , Eric D. Crahen , Cristian M. Ilac , Nathan R. Fitch , Eric Jason Brandwine , Kevin Ross O'Neill
IPC分类号： H04L9/32 , H04L9/08 , G06F21/31 , H04L29/06
CPC分类号： H04L9/083 , G06F21/31 , G06F2221/2115 , H04L9/0861 , H04L9/088 , H04L9/3242 , H04L9/3247 , H04L63/0884 , H04L63/126 , H04L2209/38
摘要： Systems and methods for authentication generate keys from secret credentials shared between authenticating parties and authenticators. Generation of the keys may involve utilizing specialized information that, as a result of being used to generate the keys, renders the generated keys usable for a smaller scope of uses than the secret credential. Further, key generation may involve multiple invocations of a function where each of at least a subset of the invocations of the function results in a key that has a smaller scope of permissible use than a key produced from a previous invocation of the function. Generated keys may be used as signing keys to sign messages. One or more actions may be taken depending on whether a message and/or the manner in which the message was submitted complies with restrictions of the a key's use.
摘要翻译：用于认证的系统和方法从认证方和认证者之间共享的秘密凭证生成密钥。密钥的生成可以涉及利用专用信息，作为用于生成密钥的结果，使生成的密钥可用于比秘密凭证更小的使用范围。此外，密钥生成可以涉及函数的多次调用，其中函数的调用的至少一个子集中的每一个导致具有比从先前调用函数产生的密钥更小的允许使用范围的密钥。生成的密钥可以用作签名密钥来签名消息。取决于消息和/或提交消息的方式是否符合密钥使用的限制，可以采取一个或多个动作。

9. 发明授权

US09104458B1 Managing virtual computing nodes using isolation and migration techniques 有权
标题翻译：使用隔离和迁移技术管理虚拟计算节点
公开(公告)号：US09104458B1
公开(公告)日：2015-08-11
申请号：US12895265
申请日：2010-09-30
申请人： Eric Jason Brandwine , Stephen E. Schmidt
发明人： Eric Jason Brandwine , Stephen E. Schmidt
IPC分类号： G06F9/455 , G06F9/46 , G06F9/48 , G06F9/50
CPC分类号： G06F9/45558 , G06F9/4856 , G06F9/5077 , G06F9/5088 , G06F2009/4557 , H04L41/0896
摘要： Systems and method for the management of virtual machine instances are provided. A network data transmission analysis system can use contextual information in the execution of virtual machine instances to isolate and migrate virtual machine instances onto physical computing devices. The contextual information may include information obtained in observing the execution of virtual machines instances, information obtained from requests submitted by users, such as system administrators. Still further, the network data transmission analysis system can also include information collection and retention for identified virtual machine instances.
摘要翻译：提供了用于管理虚拟机实例的系统和方法。网络数据传输分析系统可以在执行虚拟机实例时使用上下文信息来将虚拟机实例隔离并迁移到物理计算设备上。上下文信息可以包括在观察虚拟机实例的执行时获得的信息，由诸如系统管理员的用户提交的请求获得的信息。此外，网络数据传输分析系统还可以包括用于识别的虚拟机实例的信息收集和保留。

10. 发明授权

US09076013B1 Managing requests for security services 有权
标题翻译：管理安全服务请求
公开(公告)号：US09076013B1
公开(公告)日：2015-07-07
申请号：US13037265
申请日：2011-02-28
申请人： Donald L. Bailey, Jr. , Eric Jason Brandwine
发明人： Donald L. Bailey, Jr. , Eric Jason Brandwine
IPC分类号： G06F11/00 , G06F21/62 , H04L29/06 , H04W12/06
CPC分类号： G06F21/6227 , G06F21/577 , H04L63/0272 , H04L63/1433 , H04W12/06
摘要： Embodiments of systems and methods are described for managing requests for security services to a provider of computing resources. In some implementations, a user can request that security services be provided to analyze or test a target network. For example, the user can request that security services conduct penetration testing of the target network in order to detect vulnerabilities with the target network's security infrastructure or configuration. The computing resource provider can dynamically provide the security services to the target network, for example, by instantiating one or more virtual machines that begin security testing of the target network in response to the user's request. In some embodiments, the provider of the security services may instantiate a security virtual machine instance (VMI) that can be connected to a customer's network using a secure connection, such as a virtual private network. The virtual machine instance can be physically located outside the customer's network while functioning as part of the customer's network. Thus, the security VMI can test security from either outside the network or from inside the network. In some embodiments, the VMI may test at multiple locations of the customer's network, for example, by establishing connections to multiple locations on the customer network.
摘要翻译：描述了用于管理对计算资源提供商的安全服务的请求的系统和方法的实施例。在一些实现中，用户可以请求提供安全服务以分析或测试目标网络。例如，用户可以请求安全服务进行目标网络的渗透测试，以便利用目标网络的安全基础架构或配置来检测漏洞。计算资源提供者可以动态地向目标网络提供安全服务，例如，通过实例化一个或多个虚拟机来响应用户的请求开始目标网络的安全测试。在一些实施例中，安全服务的提供者可以使用诸如虚拟专用网络的安全连接实例化可以连接到客户网络的安全虚拟机实例（VMI）。虚拟机实例可以物理地位于客户网络外部，同时作为客户网络的一部分。因此，安全性VMI可以从网络外部或从网络内部测试安全性。在一些实施例中，VMI可以在客户网络的多个位置进行测试，例如通过建立到客户网络上的多个位置的连接。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式