专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

EP3111618A4 SECURING CLIENT-SPECIFIED CREDENTIALS AT CRYPTOGRAPHICALLY ATTESTED RESOURCES 有权
公开(公告)号：EP3111618A4
公开(公告)日：2017-10-25
申请号：EP15752268
申请日：2015-02-24
申请人： AMAZON TECH INC
发明人： POTLAPALLY NACHIKETH RAO , DOANE ANDREW JEFFREY , BRANDWINE ERIC JASON , FITZGERALD ROBERT ERIC
IPC分类号： G06F21/57
CPC分类号： H04L63/0853 , G06F21/57 , G06F21/6209 , H04L63/06 , H04L63/064 , H04L63/0884

2. 发明公开

EP2949074A4 PRIVILEGED CRYPTOGRAPHIC SERVICES IN A VIRTUALIZED ENVIRONMENT 有权
标题翻译： EINER VIRTUALISIERTEN UMGEBUNG特别荣誉
公开(公告)号：EP2949074A4
公开(公告)日：2016-09-21
申请号：EP14743982
申请日：2014-01-22
申请人： AMAZON TECH INC
发明人： ROTH GREGORY BRANCHEK , POTLAPALLY NACHIKETH RAO
IPC分类号： G06F21/53 , G06F21/57 , G06F21/64 , G06F21/72
CPC分类号： G06F21/72 , G06F21/53 , G06F21/57 , G06F21/575 , G06F21/602 , G06F21/64
摘要： A privileged cryptographic service is described, such as a service running in system management mode (SMM). The privileged service is operable to store and manage cryptographic keys and/or other security resources in a multitenant remote program execution environment. The privileged service can receive requests to use the cryptographic keys and issue responses to these requests. In addition, the privileged service can measure the hypervisor at runtime (e.g., either periodically or in response to the requests) in an attempt to detect evidence of tampering with the hypervisor. Because the privileged service is operating in system management mode that is more privileged than the hypervisor, the privileged service can be robust against virtual machine escape and other hypervisor attacks.
摘要翻译：描述了一种特权密码服务，例如以系统管理模式运行的服务（SMM）。特权服务可操作以在多租户远程程序执行环境中存储和管理加密密钥和/或其他安全资源。特权服务可以接收使用加密密钥的请求并发出对这些请求的响应。此外，特权服务可以在运行时（例如，周期性地或响应于请求）来测量管理程序，以试图检测篡改管理程序的证据。由于特权服务在比管理程序更具特权的系统管理模式下运行，因此特权服务可以针对虚拟机逃脱和其他管理程序攻击而强大。

3. 发明公开

EP3017397A4 CRYPTOGRAPHICALLY ATTESTED RESOURCES FOR HOSTING VIRTUAL MACHINES 有权
标题翻译：加密的测试资源以保持虚拟机
公开(公告)号：EP3017397A4
公开(公告)日：2016-12-28
申请号：EP14819365
申请日：2014-07-01
申请人： AMAZON TECH INC
发明人： POTLAPALLY NACHIKETH RAO , BRANDWINE ERIC JASON , WILSON MATTHEW SHAWN
IPC分类号： G06F21/72 , G06F9/455 , G06F9/50 , G06F12/14 , G06F21/57 , H04L9/06 , H04L9/08 , H04L9/32 , H04L29/06
CPC分类号： G06F9/455 , G06F9/45558 , G06F9/5077 , G06F12/14 , G06F12/145 , G06F21/53 , G06F21/57 , G06F2009/45562 , G06F2009/45587 , G06F2212/1052 , H04L9/0643 , H04L9/08 , H04L9/32 , H04L9/321 , H04L63/04
摘要： Approaches to enable the configuration of computing resources for executing virtual machines on behalf of users to be cryptographically attested to or verified. When a user requests a virtual machine to be provisioned, an operator of the virtualized computing environment can initiate a two phase launch of the virtual machine. In the first phase, the operator provisions the virtual machine on a host computing device and obtains cryptographic measurements of the software and/or hardware resources on the host computing device. The operator may then provide those cryptographic measurements to the user that requested the virtual machine. If the user approves the cryptographic measurements, the operator may proceed with the second phase and actually launch the virtual machine on the host. In some cases, operator may compare the cryptographic measurements to a list of approved measurements to determine whether the host computing device is acceptable for hosting the virtual machine.

4. 发明公开

EP2987107A4 HOST RECOVERY USING A SECURE STORE 有权
标题翻译： HOSTWIEDERHERSTELLUNG麻省理工EINEM SICHEREN SPEICHER
公开(公告)号：EP2987107A4
公开(公告)日：2016-11-16
申请号：EP14785721
申请日：2014-04-11
申请人： AMAZON TECH INC
发明人： POTLAPALLY NACHIKETH RAO , CHAWLA RACHIT , VOLKMAN JEREMY RYAN , MARR MICHAEL DAVID
IPC分类号： G06F21/57 , G06F21/44
CPC分类号： G06F21/575 , G06F21/44 , G06F21/57
摘要： Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
摘要翻译：描述了使主机计算设备能够存储用于在诸如主机计算设备上的可信平台模块（TPM）的安全存储器中恢复主机计算设备的状态的凭证和其他安全信息的方法。在主机计算设备发生故障（例如断电，网络故障等）的情况下恢复时，主机计算设备可以从安全存储中获取必要的凭证，并使用这些凭据来启动各种服务，恢复状态的主机并执行各种其他功能。此外，安全存储（例如，TPM）可以提供主机计算设备的引导固件测量和远程认证到网络上的其他设备，例如当恢复的主机需要与网络上的其他设备进行通信时。

5. 发明公开

EP2962441A4 CONFIGURABLE-QUALITY RANDOM DATA SERVICE 有权
标题翻译： ZUFALLSDATENDIENST MIT KONFIGURIERBARERQUALITÄT
公开(公告)号：EP2962441A4
公开(公告)日：2016-10-05
申请号：EP14756576
申请日：2014-02-28
申请人： AMAZON TECH INC
发明人： POTLAPALLY NACHIKETH RAO , MIKULSKI ANDREW PAUL , BAILEY JR DONALD LEE , FITZGERALD ROBERT ERIC
IPC分类号： H04L29/06 , G06F7/58 , H04L9/08 , H04L29/08
CPC分类号： H04L63/12 , H04L63/062
摘要： Methods and apparatus for a configurable-quality random data service are disclosed. A method includes implementing programmatic interfaces enabling a determination of respective characteristics of random data to be delivered to one or more clients of a random data service of a provider network. The method includes implementing security protocols for transmission of random data to the clients, including a protocol for transmission of random data to trusted clients at devices within the provider network. The method further includes obtaining, on behalf of a particular client and in accordance with the determined characteristics, random data from one or more servers of the provider network, and initiating a transmission of the random data directed to a destination associated with the particular client.
摘要翻译：公开了可配置质量随机数据服务的方法和装置。一种方法包括实现程序化接口，使得能够确定要提供给提供商网络的随机数据服务的一个或多个客户端的随机数据的相应特性。该方法包括实现用于向客户端发送随机数据的安全协议，包括用于在提供商网络内的设备处将随机数据传输到可信客户端的协议。该方法还包括代表特定客户端并根据确定的特征获得来自提供商网络的一个或多个服务器的随机数据，以及发起指向与特定客户端相关联的目的地的随机数据的传输。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式