Amazon Technologies, Inc.

Jin Peng

Matthew John Campagna

Jason Wrang

A customer of a computing resource provider is associated with a key provided by a key management system. When the key is generated, a value is generated and encrypted with the key. In response to a detection of a trigger to re-encrypt the customer's key, the encrypted value is used to verify validity of the re-encrypted customer's key before committing it to storage and made available for use.

Data integrity checks for reencryptions

Systems and methods are directed to enabling a client device to insert customized content from a first server into a container page received from a second server without using an asynchronous data fetching protocol. The second server determines contextual information related to the client device and prepares a container page that includes an image link having a cryptographically verifiable representation of a set of one or more parameters based on the contextual information. The client device receives and uses the image link to send, to the first server, an image request with the cryptographically verifiable representation of the parameter set. The first server verifies the cryptographically verifiable representation, and uses the set of parameters to generate a customized image. The client device receives and renders the customized image within the container page without reloading the container page.

Secure cross-domain page generation

Systems and methods are directed to enabling a client device to insert customized content from a first server into a webpage received from a second server without using an asynchronous data fetching protocol. The second server determines contextual information related to the client device and prepares a container webpage that includes an image link having one or more parameters based on the contextual information. The client device receives and uses the image link to send, to the first server, an image request with the one or more parameters and a cryptographically verifiable token generated by the second server. The first server uses the token to verify that the second server generated the one or more parameters and generates a customized image using the one or more parameters. The client device receives and renders the customized image within the container webpage without reloading the container webpage.

Growing community of inventors

Mercer Island, WA, United States of America

Jin Peng