The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 12, 2021

Filed:

Jun. 28, 2018
Applicant:

Amazon Technologies, Inc., Seattle, WA (US);

Inventors:

Marc John Brooker, Seattle, WA (US);

Ajay Nair, Bothell, WA (US);

Colm MacCárthaigh, Seattle, WA (US);

Assignee:

Amazon Technologies, Inc., Seattle, WA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 9/455 (2018.01); G06F 21/33 (2013.01);
U.S. Cl.
CPC ...
H04L 63/105 (2013.01); G06F 9/45558 (2013.01); G06F 21/335 (2013.01); H04L 63/0807 (2013.01); G06F 2009/45587 (2013.01);
Abstract

Systems and methods are described for providing escalation-resistant network-accessible services by providing the service through a set of service instances, each executing in an environment with privileges scoped based on a user requesting to access the service. Each service instance can be implemented by code on a serverless code system, executed in response to a user request to access the service. Because the code is executed in an environment with privileges scoped to those of a requesting user, the code itself need not attempt to limit the privileges or a requesting user. For that reason, potential for privilege escalations of the service are reduced, even if vulnerabilities in the code might otherwise allow for such escalations.


Find Patent Forward Citations

Loading…