The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 20, 2019

Filed:

Feb. 24, 2014
Applicant:

Amazon Technologies, Inc., Reno, NV (US);

Inventors:

Nachiketh Rao Potlapally, Arlington, VA (US);

Andrew Jeffrey Doane, Vienna, VA (US);

Eric Jason Brandwine, Haymarket, VA (US);

Robert Eric Fitzgerald, Herndon, VA (US);

Assignee:

Amazon Technologies, Inc., Reno, NV (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/32 (2006.01); G06F 21/57 (2013.01); G06F 21/62 (2013.01);
U.S. Cl.
CPC ...
H04L 63/0853 (2013.01); G06F 21/57 (2013.01); G06F 21/6209 (2013.01); H04L 9/3234 (2013.01); H04L 63/064 (2013.01); H04L 63/12 (2013.01); H04L 63/06 (2013.01); H04L 63/0884 (2013.01);
Abstract

Methods and apparatus for securing client-specified credentials at cryptographically-attested resources are described. An indication is obtained that resources deployed for execution of a compute instance of a multi-tenant computing service at an instance host of a provider network meet a client's security criteria. An encrypted representation of credentials to be used at the compute instance to implement operations on behalf of a client is received at the instance host. The credentials are extracted from the encrypted representation using a private key unique to the instance host, used for the operations, and then removed from the instance host without being saved in persistent memory.


Find Patent Forward Citations

Loading…