公开(公告)号：US20210096883A1

公开(公告)日：2021-04-01

申请号：US16586704

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Ramyanshu Datta ,  Timothy Lawrence Harris

IPC: G06F9/445 ,  G06F13/16

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US10908927B1

公开(公告)日：2021-02-02

申请号：US16586539

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Lawrence Harris ,  Kevin C. Miller ,  Ramyanshu Datta ,  Chandan Talukdar

IPC: G06F9/44 ,  G06F9/445 ,  G06F13/16

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11656892B1

公开(公告)日：2023-05-23

申请号：US16586694

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Lawrence Harris ,  Ramyanshu Datta ,  Kevin C. Miller

IPC: G06F9/455 ,  G06F9/48 ,  G06F16/22 ,  G06F16/245 ,  G06F9/38

CPC classification number: G06F9/45558 ,  G06F9/3897 ,  G06F9/4806 ,  G06F16/221 ,  G06F16/245 ,  G06F2009/4557

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing any combination of and any number of owner-specified functions and native functions. A function can implement a data manipulation. The functions can be applied prior to implementing a request method (e.g., GET, PUT, LIST, etc.) specified within the I/O request, such that the data to which the method is applied may not match the object specified within the request. For example, a user may request to obtain a data set. The data set may be passed to a native function that filters sensitive data to the data set, the output of the native function may be passed to an owner-specified function that redacts data from the filtered data set, and the request method may then be applied to the output of the owner-specified function.

公开(公告)号：US20230038409A1

公开(公告)日：2023-02-09

申请号：US17811534

申请日：2022-07-08

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller

IPC: G06F21/62 ,  G06F21/60 ,  H04L9/08

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service

公开(公告)号：US11204715B1

公开(公告)日：2021-12-21

申请号：US16141743

申请日：2018-09-25

Applicant: Amazon Technologies, Inc.

Inventor： John Kenneth Fawcett ,  Timothy Lawrence Harris ,  Lauren M Kisser ,  Didier Wenzek

IPC: G06F3/06

Abstract: A data storage service obtains derivation code and data. The derivation code is executable to generate derived data from the data. The data storage service stores the derivation code and the data in a logical data container. In response to receiving a request to obtain the derived data, the data storage service uses the derivation code to regenerate the derived data from the data and transmits the derived data to fulfill the request.

公开(公告)号：US11055112B2

公开(公告)日：2021-07-06

申请号：US16586704

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Ramyanshu Datta ,  Timothy Lawrence Harris

IPC: G06F9/445 ,  G06F9/54 ,  G06F13/16

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US20210097024A1

公开(公告)日：2021-04-01

申请号：US16586647

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Timothy Lawrence Harris ,  Ramyanshu Datta

IPC: G06F16/14 ,  G06F16/182 ,  G06F21/62

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement data access control, such as controlling which users are provided access to which portions of an object collection maintained by the object storage service. For example, data access control functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, and may grant or deny access based on a variety of factors such as user identity, time window, prior access, keywords, geographical region, etc. In this manner, owners of the object collection are provided with greater control over how the object collection is accessed.

公开(公告)号：US11250007B1

公开(公告)日：2022-02-15

申请号：US16586580

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Lawrence Harris ,  Kevin C. Miller ,  Ramyanshu Datta ,  Haripriya Devnath

IPC: G06F17/00 ,  G06F16/2457 ,  G06F16/28 ,  G06F16/2455 ,  G06F9/455

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11106477B2

公开(公告)日：2021-08-31

申请号：US16586619

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Ramyanshu Datta ,  Timothy Lawrence Harris

IPC: G06F9/445 ,  H04L29/06 ,  G06F16/188 ,  G06F9/50 ,  G06F21/44

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US20210097202A1

公开(公告)日：2021-04-01

申请号：US16586816

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller

IPC: G06F21/62 ,  H04L9/08 ,  G06F21/60

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.