中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

30 records (took 0.022 seconds)

    Delegated permissions in a distributed electronic environment
    22.
    发明授权
    Delegated permissions in a distributed electronic environment 有权
    在分布式电子环境中授权

    公开(公告)号：US09418213B1

    公开(公告)日：2016-08-16

    申请号：US13760738

    申请日：2013-02-06

    Applicant: Amazon Technologies, Inc.

    Inventor： Gregory Branchek Roth ,  Daniel Stephen Popick ,  Bradley Jeffery Behm

    IPC: G06F21/31

    CPC classification number: H04L63/105 ,  G06F21/31 ,  G06F21/335 ,  G06F21/6218 ,  G06Q20/06 ,  G06Q2220/00 ,  H04L63/08

    Abstract: Permissions can be delegated to enable access to resources associated with one or more different accounts, which might be associated with one or more different entities. Delegation profiles are established that are associated with at least one secured account of at least one customer. Each delegation profile includes information such as a name, a validation policy that specifies principals which may be external to the account and which are permitted to assume the delegation profile, and an authorization policy that indicates the permitted actions within the account for those principals which are acting within the delegation profile. Once a delegation profile is created, the profile can be available for external principals or services that provide a user credential delegated access under the account, where that credential is provided by a trusted identity service. Access can be provided across accounts using the user credential.

    Abstract translation: 可以委派权限来访问与一个或多个不同帐户相关联的资源，这些帐户可能与一个或多个不同的实体相关联。 建立与至少一个客户的至少一个安全帐户相关联的授权配置文件。 每个委托简档都包括信息，例如一个名称，一个验证策略，它指定可能在该帐户外部的主体，以及哪些被允许承担该委托简档的授权策略，以及一个授权策略，指示帐户中允许的行为， 在代理简介中行事。 一旦创建了一个授权配置文件，该配置文件可用于在该帐户下提供用户凭据委派访问的外部主体或服务，该凭证由受信任的身份服务提供。 可以使用用户凭据在各个帐户之间提供访问。

    Providing a consistent view of associations between independently replicated data objects
    25.
    发明授权
    Providing a consistent view of associations between independently replicated data objects 有权

    公开(公告)号：US11100129B1

    公开(公告)日：2021-08-24

    申请号：US15967446

    申请日：2018-04-30

    Applicant: Amazon Technologies, Inc.

    Inventor： Daniel Stephen Popick ,  Alazel Acheson ,  Jasmeet Chhabra ,  Luke Edward Kennedy ,  Meng Li

    IPC: G06F16/00 ,  G06F16/27 ,  G06F16/23

    Abstract: A consistent view of associations between independently replicated data objects may be provided. Data objects may be stored in separate data stores. Copies of the data stores may also store the data objects. The copies of the data stores may independently receive the data objects to be stored as part of independently replicating data stores to one or more copies of the data stores. An association can be created between objects in the different data store. If when the association is created it is determined that a referenced object is not yet stored in a copy of a data store, then both the association and the referenced object may be stored in the same data store so that the association and the referenced object are replicated together to a copy of the same data store.

    Organization level identity management
    28.
    发明授权
    Organization level identity management 有权

    公开(公告)号：US10715458B1

    公开(公告)日：2020-07-14

    申请号：US15836565

    申请日：2017-12-08

    Applicant: Amazon Technologies, Inc.

    Inventor： Conor Patrick Cahill ,  Jasmeet Chhabra ,  Daniel Stephen Popick

    IPC: H04L12/911 ,  H04L29/06 ,  H04L29/08 ,  G06F21/45 ,  G06Q10/00 ,  G06F21/31

    Abstract: User identities can managed at an organization level, instead of across multiple individual resource accounts. In a resource provider environment, access to various resources and services may require users to have identities with specific resource accounts. Users can instead be associated with organization accounts, or virtual accounts that are not associated with specific resources or services. The organization accounts are attached at the appropriate location(s) in an organizational hierarchy. A user having an organization account can project the identity in any sub-account in the organization hierarchy. This can include any lower-level resource account, or can child accounts under a relevant branch of the hierarchy. A user can validate against the organization account, and receive access to the relevant service or resources using the identity projected in the corresponding resource account.

Patent Agency Ranking