Amazon Technologies, Inc.

Steven Collison

James Christopher Sorenson

Douglas Stewart Laurence

Paul Henry Hohensee

Andrew Gary Hourselt

Neha Shetty

Evgeniy Retyunskiy

Colm MacCárthaigh

Bernd Joachim Wolfgang Mathiske

Yishai Galatzer

Contents of client-initiated handshake messages of a security protocol are obtained at a handshake processing offloader configured for an application. The offloader uses a first security artifact (which is inaccessible from a front-end request processor of the application) and the contents of the handshake messages to generate a second security artifact. The second security artifact is transmitted to the front-end request processor, which uses it to perform cryptographic operations for client-server interactions of the application.

Security protocol handshake offloading

A first run-time environment executing a first instance of an application, and a second run-time environment executing a second instance of the application are established. An indication of an impending commencement of a reduced-capacity phase of operation of the first run-time environment is obtained at a service request receiver. Based at least in part on the indication, the service request receiver directs a service request to the second instance of the application.

Service performance enhancement using advance notifications of reduced-capacity phases of operations

Technologies are provided for generating an encrypted session resumption ticket and using the encrypted session resumption ticket to resume a secure session. As part of establishing a secure session with a client, a server can use a common key that is accessible by multiple servers and secret data (such as a private key, etc.) for a tenant associated with the secure session request to generate a session key. The session key can be used to encrypt a session resumption ticket. The client can transmit the encrypted session resumption ticket to another server to re-establish a secure session. The another server can retrieve the common key and the secret data for the tenant, and can use them to generate the session key. The another server can then decrypt the encrypted session resumption ticket using the session key and use the decrypted session resumption ticket to resume a secure session.

Distributed encrypted session resumption

Growing community of inventors

Seattle, WA, United States of America

Steven Collison