专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10356062B2 Data access control utilizing key restriction 有权
公开(公告)号：US10356062B2
公开(公告)日：2019-07-16
申请号：US14938403
申请日：2015-11-11
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Marc R. Barbour , Bradley Jeffrey Behm , Cristian M. Ilac , Eric Jason Brandwine
IPC分类号： H04L29/06 , H04L9/32 , H04L9/08 , G06F21/64
摘要： A plurality of keys is obtained, with each obtained key of the plurality of keys being based at least in part on an information set for the plurality of keys and at least one other key distinct from the plurality of keys. A signing key is calculated by inputting a combination of the plurality of keys into a function with the information set for the plurality of keys, and the signing key is used to evaluate whether access to one or more computing resources is to be granted, with the information set preventing access from being granted when a request for the access is submitted out of compliance with the information set for the plurality of keys.

2. 发明授权

US09571488B2 Adaptive timeouts for security credentials 有权
标题翻译：自适应超时安全凭证
公开(公告)号：US09571488B2
公开(公告)日：2017-02-14
申请号：US14954744
申请日：2015-11-30
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Nicholas Alexander Allen , Cristian M. Ilac
IPC分类号： G06F7/04 , H04L29/06 , H04L12/26 , H04L29/08
CPC分类号： H04L63/083 , H04L43/106 , H04L63/08 , H04L63/0807 , H04L63/0846 , H04L63/108 , H04L63/168 , H04L63/20 , H04L67/14 , H04L67/146 , H04L67/42 , H04L2463/121
摘要： Session-specific information stored to a cookie or other secure token can be selected and/or caused to vary over time, such that older copies will become less useful over time. Such an approach reduces the ability of entities obtaining a copy of the cookie from performing unauthorized tasks on a session. A cookie received with a request can contain a timestamp and an operation count for a session that may need to fall within an acceptable range of the current values in order for the request to be processed. A cookie returned with a response can be set to the correct value or incremented from the previous value based on various factors. The allowable bands can decrease with age of the session, and various parameter values such as a badness factor for a session can be updated continually based on the events for the session.
摘要翻译：存储到cookie或其他安全令牌的会话专用信息可以被选择和/或导致随时间变化，使得较旧的副本随着时间变得不那么有用。这种方法降低了获取cookie副本的实体在会话中执行未授权任务的能力。使用请求收到的cookie可以包含可能需要落在当前值的可接受范围内的会话的时间戳和操作计数，以便请求被处理。返回响应的cookie可以根据各种因素设置为正确的值或从先前值递增。允许的频带可以随着会话的年龄而减小，并且可以基于会话的事件来连续地更新诸如会话的不良因素的各种参数值。

3. 发明申请

US20150350226A1 MULTI-USER SECRET DECAY 审中-公开
标题翻译：多用户秘密衰退
公开(公告)号：US20150350226A1
公开(公告)日：2015-12-03
申请号：US14822586
申请日：2015-08-10
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Cristian M. Ilac
IPC分类号： H04L29/06 , H04L9/08
CPC分类号： H04L63/123 , H04L9/08 , H04L9/0891 , H04L9/0894 , H04L63/0428 , H04L63/068
摘要： Secret information, such as seeds, codes, and keys, can be automatically renegotiated between at least one sender and at least one recipient. Various mechanisms, such as counters, events, or challenges, can be used to trigger automatic renegotiations through various requests or communications. These changes can cause the current secret information to diverge from older copies of the secret information that might have been obtained by unintended third parties. In some embodiments, a secret can be configured to “decay” over time, or have small changes periodically introduced that can be determined to be valid by an authorized party, but can reduce the effectiveness of prior versions of the secret information.
摘要翻译：可以在至少一个发送者和至少一个接收者之间自动重新协商秘密信息，例如种子，密码和密钥。诸如计数器，事件或挑战等各种机制可用于通过各种请求或通信来触发自动重新谈判。这些更改可能导致当前的秘密信息与旧版本的秘密信息分歧，这些秘密信息可能是由非预期的第三方获得的。在一些实施例中，秘密可以被配置为随着时间的推移“衰减”，或者周期性地引入可以被授权方确定为有效的小变化，但是可以降低秘密信息的先前版本的有效性。

4. 发明授权

US10652232B2 Adaptive timeouts for security credentials 有权
公开(公告)号：US10652232B2
公开(公告)日：2020-05-12
申请号：US15409120
申请日：2017-01-18
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Nicholas Alexander Allen , Cristian M. Ilac
IPC分类号： H04L29/06 , H04L12/26 , H04L29/08
摘要： Session-specific information stored to a cookie or other secure token can be selected and/or caused to vary over time, such that older copies will become less useful over time. Such an approach reduces the ability of entities obtaining a copy of the cookie from performing unauthorized tasks on a session. A cookie received with a request can contain a timestamp and an operation count for a session that may need to fall within an acceptable range of the current values in order for the request to be processed. A cookie returned with a response can be set to the correct value or incremented from the previous value based on various factors. The allowable bands can decrease with age of the session, and various parameter values such as a badness factor for a session can be updated continually based on the events for the session.

5. 发明授权

US10425223B2 Multiple authority key derivation 有权
公开(公告)号：US10425223B2
公开(公告)日：2019-09-24
申请号：US15984198
申请日：2018-05-18
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Marc R. Barbour , Bradley Jeffrey Behm , Cristian M. Ilac , Eric Jason Brandwine
IPC分类号： H04L9/08 , G06F21/60 , H04L29/06 , H04L9/14
摘要： Systems and methods for authentication generate keys from secret credentials shared between authenticating parties and authenticators. Generation of the keys may involve utilizing specialized information in the form of parameters that are used to specialize keys. Keys and/or information derived from keys held by multiple authorities may be used to generate other keys such that signatures requiring such keys and/or information can be verified without access to the keys. Keys may also be derived to form a hierarchy of keys that are distributed such that a key holder's ability to decrypt data depends on the key's position in the hierarchy relative to the position of a key used to encrypt the data. Key hierarchies may also be used to distribute key sets to content processing devices to enable the devices to decrypt content such that sources or potential sources of unauthorized content are identifiable from the decrypted content.

6. 发明授权

US10148629B1 User-friendly multifactor authentication 有权
公开(公告)号：US10148629B1
公开(公告)日：2018-12-04
申请号：US14034527
申请日：2013-09-23
申请人： AMAZON TECHNOLOGIES, INC.
发明人： Gregory Branchek Roth , Ian Nicholas Wesley-Smith , Cristian M. Ilac , Patrick James Ward
IPC分类号： H04L29/06
摘要： An application executing on a user device can receive a request to access a remote computer system. The application can automatically obtain an authentication code that is generated based at least in part on a seed value, which can be stored in the user device. The application can automatically generate an authentication request based at least in part on the access information and the authentication code, and transmit the authentication request to remote computer system.

7. 发明申请

US20170264602A1 AUTOMATED SECRET RENEGOTIATION 审中-公开
公开(公告)号：US20170264602A1
公开(公告)日：2017-09-14
申请号：US15605739
申请日：2017-05-25
申请人： Amazon Technologies, Inc.
发明人： Gregory Branchek Roth , Cristian M. Ilac
IPC分类号： H04L29/06 , H04W12/04 , H04L9/08 , H04W12/06
CPC分类号： H04L63/08 , H04L9/0872 , H04L9/0891 , H04L63/061 , H04L63/0838 , H04W12/00502 , H04W12/04 , H04W12/06
摘要： Secret information, such as seeds, codes, and keys, can be automatically renegotiated between at least one sender and at least one recipient. Various mechanisms, such as counters, events, or challenges, can be used to trigger automatic renegotiations through various requests or communications. These changes can cause the current secret information to diverge from older copies of the secret information that might have been obtained by unintended third parties. In some embodiments, a secret can be configured to “decay” over time, or have small changes periodically introduced that can be determined to be valid by an authorized party, but can reduce the effectiveness of prior versions of the secret information.

8. 发明授权

US09756031B1 Portable access to auditing information 有权
公开(公告)号：US09756031B1
公开(公告)日：2017-09-05
申请号：US14513147
申请日：2014-10-13
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Cristian M. Ilac , James E. Scharf, Jr. , Nathan R. Fitch , Graeme D. Baer , Brian Irl Pratt , Kevin Ross O'Neill
IPC分类号： H04L29/06 , G06F21/00 , H04L29/08
CPC分类号： H04L63/08 , G06F21/123 , G06Q20/3821 , H04L63/0428 , H04L67/22
摘要： Systems and methods provide a storage media on a portable physical object associated with a set of credentials that enables access to a set of computing resources associated with a set of Web services. In some embodiments, information including a set of credentials is prepackaged onto the storage media of the portable physical object. A pre-activated subscription to the set of Web services in a distributed system is provisioned. Access to the set of Web services is enabled when the portable physical object is coupled with a computing device and the set of credentials is authenticated. In some embodiments, the portable physical object is purchased by a user on a prepaid basis without requiring the user to register an account with the set of Web services, allowing the user to remain anonymous with respect to interaction with the set of Web services.

9. 发明申请

US20160065549A1 HIERARCHICAL DATA ACCESS TECHNIQUES 审中-公开
标题翻译：分层数据访问技术
公开(公告)号：US20160065549A1
公开(公告)日：2016-03-03
申请号：US14938403
申请日：2015-11-11
申请人： Amazon Technologies, Inc.
发明人： Gregory B. Roth , Marc R. Barbour , Bradley Jeffrey Behm , Cristian M. Ilac , Eric Jason Brandwine
IPC分类号： H04L29/06
CPC分类号： H04L63/062 , G06F21/64 , H04L9/0836 , H04L9/321 , H04L9/3242 , H04L9/3247 , H04L63/06 , H04L63/08 , H04L2209/38 , H04L2209/60 , H04L2463/061
摘要： A plurality of keys is obtained, with each obtained key of the plurality of keys being based at least in part on an information set for the plurality of keys and at least one other key distinct from the plurality of keys. A signing key is calculated by inputting a combination of the plurality of keys into a function with the information set for the plurality of keys, and the signing key is used to evaluate whether access to one or more computing resources is to be granted, with the information set preventing access from being granted when a request for the access is submitted out of compliance with the information set for the plurality of keys.
摘要翻译：获得多个密钥，其中多个密钥的每个获得的密钥至少部分地基于针对多个密钥的信息集和至少一个与多个密钥不同的其他密钥。通过将多个密钥的组合输入到具有为多个密钥设置的信息的功能中来计算签名密钥，并且使用签名密钥来评估是否允许对一个或多个计算资源的访问，其中当不满足为多个密钥设置的信息而提交访问请求时阻止访问的信息设置。

10. 发明申请

US20140282950A1 AUTOMATED SECRET RENEGOTIATION 审中-公开
标题翻译：自动秘密通报
公开(公告)号：US20140282950A1
公开(公告)日：2014-09-18
申请号：US14292404
申请日：2014-05-30
申请人： Amazon Technologies, Inc.
发明人： Gregory Branchek Roth , Cristian M. Ilac
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , H04L9/0872 , H04L9/0891 , H04L63/061 , H04L63/0838 , H04W12/04 , H04W12/06
摘要： Secret information, such as seeds, codes, and keys, can be automatically renegotiated between at least one sender and at least one recipient. Various mechanisms, such as counters, events, or challenges, can be used to trigger automatic renegotiations through various requests or communications. These changes can cause the current secret information to diverge from older copies of the secret information that might have been obtained by unintended third parties. In some embodiments, a secret can be configured to “decay” over time, or have small changes periodically introduced that can be determined to be valid by an authorized party, but can reduce the effectiveness of prior versions of the secret information.
摘要翻译：可以在至少一个发送者和至少一个接收者之间自动重新协商秘密信息，例如种子，密码和密钥。诸如计数器，事件或挑战等各种机制可用于通过各种请求或通信来触发自动重新谈判。这些更改可能导致当前的秘密信息与旧版本的秘密信息分歧，这些秘密信息可能是由非预期的第三方获得的。在一些实施例中，秘密可以被配置为随着时间的推移“衰减”，或者周期性地引入可以被授权方确定为有效的小变化，但是可以降低秘密信息的先前版本的有效性。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式