专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US10284519B1 Dynamically updating authentication schemes 有权
公开(公告)号：US10284519B1
公开(公告)日：2019-05-07
申请号：US13356470
申请日：2012-01-23
申请人： Eric J. Brandwine , Peter N. DeSantis
发明人： Eric J. Brandwine , Peter N. DeSantis
IPC分类号： H04L29/06
摘要： When requesting network services, clients often supply authentication information such as digital signatures. A network provider may from time to time change its authentication scheme. Clients are notified of the change and are provided with an updated authentication specification. Upon receiving the updated authentication specification, a client updates its authentication logic accordingly, and subsequently prepares and provides authentication information in accordance with the new authentication scheme.

12. 发明授权

US09875174B1 Optimizing the execution of an application executing on a programmable execution service 有权
公开(公告)号：US09875174B1
公开(公告)日：2018-01-23
申请号：US13238867
申请日：2011-09-21
申请人： Eric J. Brandwine , Joseph E. Fitzgerald , Marvin M. Theimer , Benjamin W. Mercier
发明人： Eric J. Brandwine , Joseph E. Fitzgerald , Marvin M. Theimer , Benjamin W. Mercier
IPC分类号： G06F9/44 , G06F11/36 , G06F9/50
CPC分类号： G06F11/3664 , G06F9/5077 , G06F11/3688 , G06F2201/865
摘要： A test environment is created for optimizing the execution of a programmable execution service (“PES”) application. The test environment is created in one embodiment by replicating a production network and one or more production virtual machine instances executing the PES application. Once the test environment has been created, the test environment is utilized to identify optimized values for one or more application parameters consumed by the PES application. The optimized values may be selected to optimize the output of a fitness function that is based upon one or more direct and/or indirect performance metrics associated with the PES application. Once the optimized values for the application parameters have been identified, the generated values are applied to production virtual machine instances executing the PES application.

13. 发明授权

US09836466B1 Managing objects using tags 有权
公开(公告)号：US09836466B1
公开(公告)日：2017-12-05
申请号：US12588839
申请日：2009-10-29
申请人： Eric J. Brandwine , Matthew T. Corddry
发明人： Eric J. Brandwine , Matthew T. Corddry
IPC分类号： G06F17/30
CPC分类号： G06F17/30082 , G06F17/30864 , G06F17/30997
摘要： Systems and methods are provided for managing objects. In one implementation, a computer-implemented method is provided. The method includes receiving a query comprising a tag and executing the query. An object identifier is retrieved from a data table, based on the tag. The method further returns a result of the query. The result includes the object identifier that was retrieved from the data table. The method further performing an action related to an object having the retrieved object identifier.

14. 发明授权

US09544137B1 Encrypted boot volume access in resource-on-demand environments 有权
标题翻译：在资源需求环境中加密引导卷访问
公开(公告)号：US09544137B1
公开(公告)日：2017-01-10
申请号：US12981007
申请日：2010-12-29
申请人： Eric J. Brandwine
发明人： Eric J. Brandwine
IPC分类号： H04L9/08
CPC分类号： G06F21/575 , G06F9/4401 , G06F9/4416 , G06F21/335 , G06F2221/2107 , G06F2221/2149 , H04L9/083 , H04L9/3215 , H04L9/3234 , H04L63/0435 , H04L63/0442 , H04L63/061 , H04L63/062 , H04L63/0807
摘要： In an resource-on-demand environment, dynamically created server instances are allowed to boot from encrypted boot volumes. Access keys to the boot volumes are provided from a key provider that authenticates new instances based on possession of a security token that has been previously shared between the key provider and the new instance through an out-of-band communication.
摘要翻译：在资源需求环境中，允许动态创建的服务器实例从加密引导卷引导。引导卷的访问密钥是从一个密钥提供者提供的，该密钥提供者根据先前通过带外通信在密钥提供者和新实例之间共享的安全令牌的身份认证新的实例。

15. 发明授权

US09509503B1 Encrypted boot volume access in resource-on-demand environments 有权
标题翻译：在资源需求环境中加密引导卷访问
公开(公告)号：US09509503B1
公开(公告)日：2016-11-29
申请号：US12980959
申请日：2010-12-29
申请人： Eric J. Brandwine
发明人： Eric J. Brandwine
IPC分类号： H04L9/08 , H04L29/06
CPC分类号： H04L9/083 , G06F21/57 , G06F21/575 , H04L9/0816 , H04L9/3234 , H04L63/062 , H04L63/08
摘要： In a resource-on-demand environment, dynamically created server instances are allowed to boot from encrypted boot volumes. Access keys to the boot volumes are provided from a key provider that authenticates new instances based on possession of a security token that has been previously shared between the key provider and the new instance through an out-of-band communication.
摘要翻译：在资源需求环境中，允许动态创建的服务器实例从加密引导卷引导。引导卷的访问密钥是从一个密钥提供者提供的，该密钥提供者根据先前通过带外通信在密钥提供者和新实例之间共享的安全令牌的身份认证新的实例。

16. 发明授权

US09037511B2 Implementation of secure communications in a support system 有权
标题翻译：在支持系统中实现安全通信
公开(公告)号：US09037511B2
公开(公告)日：2015-05-19
申请号：US13248980
申请日：2011-09-29
申请人： Gregory B. Roth , Eric D. Crahen , Graeme D. Baer , Eric J. Brandwine , Nathan R. Fitch
发明人： Gregory B. Roth , Eric D. Crahen , Graeme D. Baer , Eric J. Brandwine , Nathan R. Fitch
IPC分类号： G06F21/00 , G06F21/60 , H04L29/06 , G06Q30/06
CPC分类号： G06F21/602 , G06F9/44505 , G06F9/45558 , G06F21/606 , G06F2009/45587 , G06Q30/06 , H04L63/0209 , H04L63/0428 , H04L63/0471 , H04L63/08 , H04L63/166
摘要： A support system negotiates secure connections on behalf of multiple guest systems using a set of credentials associated with the guest systems. The operation of the secure connection may be transparent to the guest system such that guest system may send and receive messages that are encrypted or decrypted by the support system, such as a hypervisor. As the support system is in between the guest system and a destination, the support system may act as a local endpoint to the secure connection. Messages may be altered by the support system to indicate to a guest system which communications were secured. The credentials may be managed by the support system such that the guest system does not require access to the credentials.
摘要翻译：支持系统使用与guest虚拟机系统相关联的一组凭据代表多个客户系统协商安全连接。安全连接的操作对于客户系统可能是透明的，使得客系统可以发送和接收由诸如管理程序之类的支持系统加密或解密的消息。由于支持系统在客户系统和目的地之间，支持系统可以充当安全连接的本地端点。消息可以由支持系统改变以向客系统指示哪些通信被保护。证书可以由支持系统管理，使得客户机系统不需要访问凭证。

17. 发明授权

US09032070B1 Methods and apparatus for providing inline network traffic monitoring 有权
标题翻译：提供内联网络流量监控的方法和装置
公开(公告)号：US09032070B1
公开(公告)日：2015-05-12
申请号：US13461601
申请日：2012-05-01
申请人： Thomas C. Stickle , Eric J. Brandwine
发明人： Thomas C. Stickle , Eric J. Brandwine
IPC分类号： G06F15/173 , H04L12/26
CPC分类号： H04L12/2626 , H04L43/04 , H04L43/12 , H04L63/1408
摘要： Methods and apparatus for providing inline network traffic monitoring such as intrusion detection to clients of a provider network. A client can configure new or existing components and specify that traffic monitoring be added on or at the components in the client's configuration on the provider network. Traffic monitoring is automatically and transparently added to the client's configuration on or at the components. Traffic to the client's configuration passes through the traffic monitoring technology. Traffic monitoring technology may be implemented on a resource in the client's configuration that implements other technology, such as a load balancer component. Alternatively, traffic monitoring technology may be implemented on separate components upstream or downstream of a resource that implements other technology. Traffic monitoring may be implemented at a network substrate level rather than at an overlay network level.
摘要翻译：用于向提供商网络的客户端提供诸如入侵检测的内联网络流量监控的方法和装置。客户端可以配置新的或现有的组件，并指定在提供商网络上的客户端配置中或组件上添加流量监控。流量监控自动且透明地添加到组件上或组件上的客户端配置中。流量到客户端的配置通过流量监控技术。可以在实现其他技术的客户端配置中的资源（例如负载均衡器组件）上实现流量监控技术。或者，可以在实现其他技术的资源的上游或下游的单独组件上实现流量监控技术。交通监控可以在网络底层级别而不是覆盖网络级实现。

18. 发明授权

US08565108B1 Network data transmission analysis 有权
公开(公告)号：US08565108B1
公开(公告)日：2013-10-22
申请号：US12892741
申请日：2010-09-28
申请人： Bradley E. Marshall , Charles D. Phillips , Eric J. Brandwine
发明人： Bradley E. Marshall , Charles D. Phillips , Eric J. Brandwine
IPC分类号： H04L12/26
CPC分类号： G06F21/60 , H04L63/0227 , H04L63/20
摘要： Network computing systems may implement data loss prevention (DLP) techniques to reduce or prevent unauthorized use or transmission of confidential information or to implement information controls mandated by statute, regulation, or industry standard. Implementations of network data transmission analysis systems and methods are disclosed that can use contextual information in a DLP policy to monitor data transmitted via the network. The contextual information may include information based on a network user's organizational structure or services or network infrastructure. Some implementations may detect bank card information in network data transmissions. Some of the systems and methods may be implemented on a virtual network overlaid on one or more intermediate physical networks that are used as a substrate network.

19. 发明授权

US08539556B1 Disabling administrative access to computing resources 有权
标题翻译：禁用对计算资源的管理访问
公开(公告)号：US08539556B1
公开(公告)日：2013-09-17
申请号：US12973647
申请日：2010-12-20
申请人： Eric J. Brandwine
发明人： Eric J. Brandwine
IPC分类号： H04L29/02
CPC分类号： H04L63/10 , H04L29/02 , H04L41/069 , H04L41/28
摘要： Disclosed are various embodiments for disabling administrative access to computing resources. A customer request is obtained to disable administrative access of a provider to one or more computing devices. The provider supplies computing resources of the at least one computing device to the customer. The administrative access of the provider to the computing devices is disabled in response to the request. The administrative access of the provider remains disabled until a reset of the computing devices is performed.
摘要翻译：公开了用于禁止对计算资源的管理访问的各种实施例。获得客户请求以禁止提供商对一个或多个计算设备的管理访问。提供者向客户提供至少一个计算设备的计算资源。提供商对计算设备的管理访问是响应于该请求被禁用的。供应商的管理访问权保持禁用，直到执行计算设备的重置。

20. 发明申请

US20120246157A1 METHOD AND SYSTEM FOR DYNAMICALLY TAGGING METRICS DATA 有权
标题翻译：用于动态标注量度数据的方法和系统
公开(公告)号：US20120246157A1
公开(公告)日：2012-09-27
申请号：US13053143
申请日：2011-03-21
申请人： Marvin M. Theimer , Eric J. Brandwine , David Brown , Marc J. Brooker , Erik J. Fuller
发明人： Marvin M. Theimer , Eric J. Brandwine , David Brown , Marc J. Brooker , Erik J. Fuller
IPC分类号： G06F17/30
CPC分类号： G06F8/77 , G06F11/3409 , G06F11/3476 , G06F2201/815
摘要： Embodiments of systems and methods are described for dynamically tagging metrics data by a provider of computing resources. In some implementations, a requesting user or application can request the provider of computing resources to tag the metrics based on configurations and/or settings specified by the requesting user or application. The tagged metrics data can then be processed by a processing user or application at a later time.
摘要翻译：描述了系统和方法的实施例，用于由计算资源提供者动态地标记度量数据。在一些实现中，请求用户或应用程序可以请求计算资源的提供者基于由请求用户或应用指定的配置和/或设置来标记度量。随后可以由处理用户或应用程序处理标记的量度数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式