Microsoft Technology Licensing, LLC

Amazon Technologies, Inc.

Brian Scott Waters

Tyler S Wiegers

Christopher Glenn Maynard

Matthew Paul Erickson

Siddhartha Rana

Dominic Mario Rael

Martin Peter Check

Nathan Bartholomew Thomas

Malcolm Russell Ah Kun

Prasanna Subash

Jeffery David Wells

Harshit Kumar Tiwari

Lihao Wang

Zhenghong Sun

Ankur Goyal

Chao Li

Venkatesh Velaga

Alexey A Nikitin

Anand Krishnamoorthy

Uday Bheema

Himesh Pandya

A computer system that includes one or more processors configured to execute a secure sovereign manager that controls remote execution of commands on a sovereign cloud computing platform. The secure sovereign manager is configured to create an escorted session for an unqualified user for invoking commands on the sovereign cloud computing platform. The unqualified user does not have sovereign-trusted credentials that define qualifications required for accessing the sovereign cloud computing platform. The escorted session is asynchronously supervised by a qualified user that has sovereign-trusted credentials. The secure sovereign manager is configured to receive an indication of approval or denial of invocation of a received command. Based on at least receiving an indication of approval, the secure sovereign manager invokes the received command on the sovereign cloud computing platform.

Asynchronous supervision for sovereign cloud platforms

A computer server controls access to a hosted service using digital certificates that are requested from each client attempting to access the service. When a particular client accesses the hosted service, the host service requests a digital certificate from the particular client and issues a challenge message. The particular client signs the challenge message and provides a client digital certificate to the hosted service. The hosted service confirms that the signature on the challenge message matches the client digital certificate, and that the client digital certificate is signed by a trusted entity. Trusted entities are defined by an administrator by uploading, to the hosted service, one or more trusted digital certificates associated with a trusted entities. Using the trusted digital certificates, the hosted service confirms that the digital certificate provided by the particular client is signed by at least one of the trusted entities.

Certificate-based service authorization

Growing community of inventors

Renton, WA, United States of America

Brian Scott Waters