Amazon Technologies, Inc.

Timothy Craig Worsley

Charles Edward Rice

Michael Ellsworth Bundy

Karl Eric Schrader

David Henry Clark

Dean Christopher Fullerton

Jeffery Thomas Moore

William Alan Snitselaar

Karthik Kumar Srivatsa

Jonathan Eric Rosenberg

Roderick Peter Chamberlin

Cable robots may be used to automatically load items onto one or more surfaces in any environment. An item may be received on a carrier that is connected to tensioning actuators of a cable robot by one or more cables in tension. The actuators of the robot may be manipulated in concert to move the carrier from a first position to a second position, which may be fixed or in motion, at which the item may be expelled from the carrier. The carrier may include induction wheels and/or conveyors for receiving the item thereon and for expelling the item therefrom. The cable robot may be provided in series with a conveyor and mounted to a frame, and used to load items onto a delivery vehicle, such that the frame may be withdrawn as items are loaded.

Automated loading system

A network directory service, responsive to receiving a target device symbolic name from a client, identifies a network access server in communication with a network on which the target device resides, notifies the network access server of an expected connection from the client, and returns a device access token to the client. The network access server, responsive to receiving and validating the device access token, forwards the client-originated traffic to the target device by implementing a Network Address Translation (NAT) scheme.

Network directory and access service

A system includes a first mobile drive unit and a second mobile drive unit. The first mobile drive unit is operable to dock with a first item holder at a first end of a column of connected item holders. The second mobile drive unit is operable to dock with a second item holder at a second end of the column of connected item holders. The system also includes a management module that is operable to instruct the first mobile drive unit and the second mobile drive units to transport the column of connected item holders from a first location to a second location.

Inventory system with connectable inventory holders

The disclosure describes a system for applying custom branded tape to packages that are shipped from a multi-seller materials handling facility. In some implementations, a materials handling facility may store, process and ship items for multiple sellers. As items are packed for shipping, a tape dispensing device may dispense custom branded tape associated with the seller of the item(s) being packed such that the sellers brand, logo or other information is presented on the exterior of the container.

Custom branded tape in a multi-seller environment

In some implementations, a computing device includes an identifier that is embedded into a firmware of the computing device. The identifier uniquely identifies the computing device from other computing devices. The computing device may send a request to a server to provide credentials to enable the computing device to access a secured resource, such as secured data or a secured system. The computing device may provide the server with the identifier to enable the server to determine whether the computing device is authorized to access the secured resource. If the server determines that the computing device is authorized, the server may provide the credentials to the computing device. If the server determines that the computing device is unauthorized, the server may cause the computing device to perform one or more actions to render the computing device inoperable and/or render the resource inaccessible.

Secure computer operations

This disclosure describes, in part, systems, devices, and techniques to encrypt address resolution protocol (ARP) messages to prevent a rogue device from accessing information about a local network. In certain embodiments described herein, networked devices are preconfigured with security credentials that allow the devices, possibly via network interface controllers (NICs), to encrypt outgoing ARP messages and decrypt incoming ARP messages. The NICs may listen for encrypted messages that are recognized as being ARP messages. These encrypted messages may include a designator that indicates that the message is an encrypted ARP message. When a NIC receives a message that is indicated as an encrypted ARP message, then the NIC will decrypt the message using secure credentials to obtain the true ARP message. The device will then process the message in accordance standard procedures.

Secure address resolution protocol

In some implementations, a client device includes a client identifier embedded into a firmware of the client device. A server may register a service with a global authentication, authorization, and account (AAA) server. The client device may request permission to access the service. The request may be signed using a client signature that is based on the identifier. The global AAA server may send the request to the server and the server may determine whether to grant the client device permission. If the global AAA server determines that the server has granted the client device permission, the global AAA server may provide server credentials to the client device and client credentials to the server. The client device may sign a request to connect to the service using the client signature. The server may grant the request in response to authenticating the request using the client signature.

Server for authentication, authorization, and accounting

A networked computer device can be provisioned by customizing the computer device to contain a specification of a particular provisioning server. For example, a network interface device can be pre-configured and installed in the computer device. The pre-configuration of the network interface device may include embedding a provisioning service identification in the network interface device. The network interface device may be further configured to perform provisioning from a provisioning service indicated by the embedded provisioning service identification. In addition, or alternatively, the network interface device, or the computer within which it is installed, may be configured to authenticate with a provisioning server based on authentication information that has been embedded within firmware of the computer or network interface device.

Global computer provisioning

A mobile provisioning device is configured for use in conjunction with a provisioning service/authority. Upon connection to a target computer, the mobile provisioning device emulates a boot device, and provides a boot image for booting by the target computer. The mobile provisioning device and/or the target computer may communicate with the provisioning service/authority for various purposes, including authentication, reporting, and provisioning.

Mobile provisioning device

An apparatus includes an interface and a processor. The interface is operable to wirelessly transmit instructions to one or more mobile drive units. The processor is communicatively coupled to the interface and is operable to instruct a mobile drive unit to transport a first shipping container storing at least one completed order to a shipping station, instruct the mobile drive unit to connect the first shipping container to a second shipping container to form a group of connected shipping containers. The processor is also operable to detect a trigger event, and in response to detecting the trigger event, coordinate movement of one or more mobile drive units to transport the group of connected shipping containers onto a vehicle for shipment.

A system includes a station and a management module. The station includes a queue having a first row and a second row. The management module is operable to instruct a first mobile drive unit to move a first group of connected item holders from the second row to the first row, instruct the first mobile drive unit to move the first group of connected item holders along the station such that one or more items stored by the first group of connected item holders are processed at the station, and after the one or more items from the first group of items are processed, instruct a second mobile drive unit to move a second group of connected item holders from the second row to the first row.

A local network can include a configuration server such as a DHCP server. When requesting a local network configuration from the server, a device may include credentials that can be verified by the server to establish that the device is authorized to use the local network. In addition, when providing a network configuration, the server may include its own credentials so that the device can determine whether the configuration has originated from a trusted server.

System and method of selectively implementing network configurations

A networked computer device can be customized to contain provisioning and/or authorization logic in its firmware or the firmware of one of its subcomponents. The computer device is thus configured to provision itself from a provisioning server that is identified within the firmware, and to periodically query an operations authority for continued authorization to operate with the received provisioning. Upon failure to receive authorization, the firmware may implement various security measures, such as storage protection, boot protection, communications protection, and so forth. The firmware may also implement remote reporting, to assist an investigator when a device has been lost or stolen.

Growing community of inventors

Snoqualmie, WA, United States of America

Timothy Craig Worsley