Amazon Technologies, Inc.

Other

Peter Sven Vosshall

Kurt Kufeld

Deniz Hastorun

Alex Pilchin

Ivan D Rosero

Peter F Hill

Giuseppe Decandia

Avinash Lakshman

Leon Robert Warman

Swaminathan Sivasubramanian

Jesper Mikael Johansson

Aaron Craig Thompson

Dan Mihai Dumitriu

Ozgun A Erdogan

Mathew Mills

George A Borle

Jeffrey P Bezos

Michael Martin George

Ian W Freed

Kyle Bradley Peterson

Amit D Agarwal

Arun Sundaram

Werner H P Vogels

Samuel John Young

Jonathan A Jenkins

Jason Curtis Jenks

Chelsea Celest Krueger

Joshua Marc Burgin

Sachin Purushottam Joglekar

Hanson Char

Rajiv Chopra

Terrance Douglas Hanold

David Hiroshi Hijirida

Brandon B Low

Waylon Brunette

Marvin Michael Theimer

Allan Henry Vermeulen

Brett Richard Taylor

Rebecca Claire Weiss

David John Ward, Jr

Ameet Nirmal Vaswani

Brad Eugene Marshall

Aakarsh Nair

Ranganath Atreya

Dhruva Lakshmana Rao Batni

Alan Stuart Robbins

Patrick Joseph Armstrong

Dennis Pilarinos

Mary Kay Bowman

Werner Hp Vogels

Bryan Kenneth Summersett

Arjun Shetty

Avinash Lakshmann

Giuspeppe deCandia

Alan Stewart Robbins

John W Gray, Iii

An embodiment relates to a computer-implemented data processing system and method for storing a data set at a plurality of data centers. The data centers and hosts within the data centers may, for example, be organized according to a multi-tiered ring arrangement. A hashing arrangement may be used to implement the ring arrangement to select the data centers and hosts where the writing and reading of the data sets occurs. Version histories may also be written and read at the hosts and may be used to evaluate causal relationships between the data sets after the reading occurs.

System and method for providing high availability data

A data processing system may store a data set at a plurality of data centers. The data centers and hosts within the data centers may, for example, be organized according to a multi-tiered ring arrangement. A hashing arrangement may be used to implement the ring arrangement to select the data centers and hosts where the writing and reading of the data sets occurs. Version histories may also be written and read a the hosts and may be used to evaluate causal relationships between the data sets after the reading occurs.

A computer-implemented system and method for managing service requests are disclosed. The system includes a service provider, having a number of server devices, that provides a service response in response to a client service request. The service response includes a service instance ID associated with a server and a connection lease. A communication processing component routes a first client service request to one of the servers. Subsequent client service requests and responses are transmitted directly between the client device and the server device associated with service instance ID included in the first service response for the duration of the connection lease.

Service request management

A computer-implemented data processing system and method writes a first plurality of copies of a data set at a first plurality of hosts and reads a second plurality of copies of the data set at a second plurality of hosts. The first and second pluralities of copies may be overlapping and the first and second pluralities of hosts may be overlapping. A hashing function may be used to select the first and second pluralities of hosts. Version histories for each of the first copies of the data set may also be written at the first plurality of hosts and read at the second plurality of hosts. The version histories for the second copies of the data set may be compared and causal between the second copies of the data set may be evaluated based on the version histories for the second copies of the data set.

A system is configured to receive a network resource request from a user device configured with a browsing application, wherein the request includes identification data associated with the user device. The system transmits, to a network resource provider, a request for the network resource, wherein the request transmitted to the network resource provider excludes identification data included in the request received from the user device. The system receives from the network resource provider a response, including a document comprising a field configured to receive payment information for an item purchase. The system receives from the browsing application an indication that an anonymous payment instrument, associated with a first entity different than the user, is to be used to purchase a first item at a first price. The system causes information regarding the anonymous payment instrument to be provided to the network resource provider.

Secure proxy service

A collection of fault categories, including faults associated with internal resources at a provider network, is presented via an interface of a fault injection service. A fault injection mode, selected from a set which comprises a non-randomized mode, to be used to inject faults into a target environment is determined. Fault injection agents introduce faults into the target environment in accordance with the fault injection mode.

Fault injection service

Disclosed is secure decryption and business rule validation of encrypted confidential data within a hardware security module (HSM). The validation may include the use of a Bloom filter stored and executing within the HSM. The return order of encrypted data within the HSM as well as requests for external data relating to validation may be randomized to further harden against correlation attacks.

Secure validation using hardware security modules

A system and method for facilitating transactions utilizing phrase tokens are provided. Individual entities can be associated with unambiguous transaction phrase tokens, such as multiple word phrases. The transaction phrase tokens are associated with transaction accounts by a service provider such that the entities can complete a transaction without having to exchange transaction account information. In a transaction, a transaction phrase token is offered to an accepting party, which tenders the offered transaction phrase token to the service provider. The service provider processes the offered transaction phrase token according to configuration information specified for the transaction phrase token. The service provider can automatically process the transaction request or request additional information.

Utilizing phrase tokens in transactions

A browsing process is directed to the generation and management of a browse session at a network computing provider. A client computing device transmits secure requests for network resources to a network computing provider. The network computing provider comprises one or more virtual network computing providers for processing secure communications between a client computing device and a content source. A virtual network computing provider handles the secure communications, decrypting and processing the communications while preventing third parties from accessing the unencrypted communication data. The virtual network computing provider may determine a browse configuration identifying processing actions to perform on the request content. The virtual network computing provider may retrieve the requested content, perform a first set of processing actions to generate a processing result, and provide the processing result to the client computing device, which may perform a second set of processing actions, including display.

Remote browsing session management

Techniques and solutions for measuring web page value are described. For example, web page content information for a web page can be obtained. The web page can be decomposed into web page content components based on the web page content information. Content types can be determined for the web page content components. The web page content components can be weighted based on the content types and/or based on other criteria. Web page resources can be obtained in advance for web pages and/or content components based on the weights.

Measuring page value

Throttling for network requests may be implemented. A request processing balance may be provided for processing received network requests for a given period of time. As network requests are received, processing costs may be determined for the network requests. Processing costs may be determined on-the-fly based on processing times, resources consumed, or costs incurred to process the network requests at additional systems, in some embodiments. The request processing balance may be updated according to the determined processing costs of received network requests. Network requests may be throttled based on the current request processing balance. In some embodiments, an estimated processing cost may be determined and compared with the current request processing balance to determine whether to throttle the network requests.

Network request throttling

Financial transactions, such as buying and selling, may be facilitated by merchant-based shadow account numbers. A master account may contain several associated shadow accounts. Each shadow account may in turn be associated with a specific merchant or group of merchants. Merchants and users may store and use the shadow account numbers rather than the master account numbers. Stolen or otherwise compromised shadow account numbers are useless with other non-associated merchants. Furthermore, the shadow numbers may be easily invalidated while leaving the master account untouched.

Merchant-specific shadow account numbers

Systems, methods, and computer-readable media related to configuration of multiple browser applications to control the functionality of the browser application as at least some content is accessed are provided. The configuration of a server-based browser application and a client-based browser application can be controlled programmatically such that browser configuration can be validated and controlled by at least some content providers. Additionally, the configuration and subsequent processing of content provided by an authenticating content provider can be implemented in a manner to limit content access functionality.

Network browser configuration

Content inspection and analysis are described. A server stores a definition of sets of browser policies. A definition of one or more sets of users is stored. The server stores an association with a respective set of browser policies for the one or more sets of users. A request is received from a client browser associated with a user, wherein the client browser is configured to communicate with the server. The server determines which set of users the user is associated with. The server identifies a first set of browser policies that is associated with the determined set of users and applies the identified first set of browser policies to the request.

Distributed split browser content inspection and analysis

Growing community of inventors

Bainbridge Island, WA, United States of America

Peter Sven Vosshall