公开(公告)号：US20180150646A1

公开(公告)日：2018-05-31

申请号：US15864738

申请日：2018-01-08

Applicant: Amazon Technologies, Inc.

Inventor： Gregory Branchek Roth ,  Gautam Shanbhag ,  Gregory Alan Rubin ,  Christopher H. Fant

IPC: G06F21/62 ,  H04L29/06 ,  G06F9/455 ,  G06F21/60 ,  H04L9/08

CPC classification number: G06F21/6218 ,  G06F9/45558 ,  G06F21/53 ,  G06F21/602 ,  G06F2009/45579 ,  G06F2009/45587 ,  H04L9/088 ,  H04L9/0891 ,  H04L9/0894 ,  H04L63/10 ,  H04L63/20

Abstract: A data storage management process is directed to aspects of managing encrypted data via data storage volumes in conjunction with a service provider computer network that hosts virtual machine instances. A volume can be created and configured for managing encrypted data with an encrypted version of a volume key. The volume can be attached to a virtual machine instance such that the virtual machine instance accesses the volume in a transparent fashion based on the volume key. Encrypted data specific to the volume can be copied across multiple regions of data storage each associated with distinct encrypted versions of a volume key corresponding to the volume.

公开(公告)号：US09864874B1

公开(公告)日：2018-01-09

申请号：US14622752

申请日：2015-02-13

Applicant: Amazon Technologies, Inc.

Inventor： Gautam Shanbhag ,  Gregory Branchek Roth ,  Gregory Alan Rubin ,  Christopher H. Fant

IPC: G06F21/62 ,  G06F9/455 ,  H04L29/06 ,  H04L9/08 ,  G06F21/60

CPC classification number: G06F21/6218 ,  G06F9/45558 ,  G06F21/53 ,  G06F21/602 ,  G06F2009/45579 ,  G06F2009/45587 ,  H04L9/088 ,  H04L9/0891 ,  H04L9/0894 ,  H04L63/10 ,  H04L63/20

Abstract: A data storage management process is directed to aspects of managing encrypted data via data storage volumes in conjunction with a service provider computer network that hosts virtual machine instances. A volume can be created and configured for managing encrypted data with an encrypted version of a volume key. The volume can be attached to a virtual machine instance such that the virtual machine instance accesses the volume in a transparent fashion based on the volume key. Encrypted data specific to the volume can be copied across multiple regions of data storage each associated with distinct encrypted versions of a volume key corresponding to the volume.

公开(公告)号：US10402578B2

公开(公告)日：2019-09-03

申请号：US15864738

申请日：2018-01-08

Applicant: Amazon Technologies, Inc.

Inventor： Gregory Branchek Roth ,  Gautam Shanbhag ,  Gregory Alan Rubin ,  Christopher H. Fant

IPC: G06F21/62 ,  H04L29/06 ,  H04L9/08 ,  G06F21/60 ,  G06F21/53 ,  G06F9/455

Abstract: A data storage management process is directed to aspects of managing encrypted data via data storage volumes in conjunction with a service provider computer network that hosts virtual machine instances. A volume can be created and configured for managing encrypted data with an encrypted version of a volume key. The volume can be attached to a virtual machine instance such that the virtual machine instance accesses the volume in a transparent fashion based on the volume key. Encrypted data specific to the volume can be copied across multiple regions of data storage each associated with distinct encrypted versions of a volume key corresponding to the volume.