Amazon Technologies, Inc.

Evgeniy Retyunskiy

Maciej Broda

Mian Zainulabadin Khurrum

Steven Collison

Colm MacCárthaigh

Matthew Schwartz

Methods, systems, and computer-readable media for single-packet authorization using proof of work are disclosed. An access control service receives, from a client, a single-packet authorization (SPA) request. The (SPA) request comprises output of a proof-of-work task, wherein completion of the proof-of-work task requires computational resources or memory resources of the client. The access control service performs verification of the output of the proof-of-work task using fewer computational or memory resources of the access control service than were used by the client. In response to determining that verification of the output of the proof-of-work task succeeds, the access control service performs authentication of the SPA request. In response to determining that authentication of the SPA request succeeds, the access control service allows access by the client device to a service.

Single-packet authorization using proof of work

Technologies are provided for generating an encrypted session resumption ticket and using the encrypted session resumption ticket to resume a secure session. As part of establishing a secure session with a client, a server can use a common key that is accessible by multiple servers and secret data (such as a private key, etc.) for a tenant associated with the secure session request to generate a session key. The session key can be used to encrypt a session resumption ticket. The client can transmit the encrypted session resumption ticket to another server to re-establish a secure session. The another server can retrieve the common key and the secret data for the tenant, and can use them to generate the session key. The another server can then decrypt the encrypted session resumption ticket using the session key and use the decrypted session resumption ticket to resume a secure session.

Distributed encrypted session resumption

Techniques are described for scaling resources used by a load balancer service responsive to capacity changes associated with a target group of virtualized computing resources to which the load balancer service distributes application traffic. A load balancer service of a service provider network obtains a resource scaling indication indicating a change in a number of virtualized computing resources in a target group of virtualized computing resources associated with a user of the provider network. The load balancer service determines, based at least in part on the resource scaling indication, a scaling factor indicating a relative increase of the number of the number of virtualized computing resources in the target group. Based on the scaling factor, the load balancer service scales a respective amount of provider network resources available for use by each component of a plurality of components of the load balancer service.

Growing community of inventors

Bellevue, WA, United States of America

Evgeniy Retyunskiy