中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

18 records (took 0.026 seconds)

    Organization level identity management
    2.
    发明授权
    Organization level identity management 有权

    公开(公告)号：US10715458B1

    公开(公告)日：2020-07-14

    申请号：US15836565

    申请日：2017-12-08

    Applicant: Amazon Technologies, Inc.

    Inventor： Conor Patrick Cahill ,  Jasmeet Chhabra ,  Daniel Stephen Popick

    IPC: H04L12/911 ,  H04L29/06 ,  H04L29/08 ,  G06F21/45 ,  G06Q10/00 ,  G06F21/31

    Abstract: User identities can managed at an organization level, instead of across multiple individual resource accounts. In a resource provider environment, access to various resources and services may require users to have identities with specific resource accounts. Users can instead be associated with organization accounts, or virtual accounts that are not associated with specific resources or services. The organization accounts are attached at the appropriate location(s) in an organizational hierarchy. A user having an organization account can project the identity in any sub-account in the organization hierarchy. This can include any lower-level resource account, or can child accounts under a relevant branch of the hierarchy. A user can validate against the organization account, and receive access to the relevant service or resources using the identity projected in the corresponding resource account.

    ORGANIZATION LEVEL IDENTITY MANAGEMENT
    3.
    发明申请
    ORGANIZATION LEVEL IDENTITY MANAGEMENT 审中-公开

    公开(公告)号：US20200267090A1

    公开(公告)日：2020-08-20

    申请号：US16866961

    申请日：2020-05-05

    Applicant: Amazon Technologies, Inc.

    Inventor： Conor Patrick Cahill ,  Jasmeet Chhabra ,  Daniel Stephen Popick

    IPC: H04L12/911 ,  G06Q10/00 ,  G06F21/31 ,  G06F21/45 ,  H04L29/08 ,  H04L29/06

    Abstract: User identities can managed at an organization level, instead of across multiple individual resource accounts. In a resource provider environment, access to various resources and services may require users to have identities with specific resource accounts. Users can instead be associated with organization accounts, or virtual accounts that are not associated with specific resources or services. The organization accounts are attached at the appropriate location(s) in an organizational hierarchy. A user having an organization account can project the identity in any sub-account in the organization hierarchy. This can include any lower-level resource account, or can child accounts under a relevant branch of the hierarchy. A user can validate against the organization account, and receive access to the relevant service or resources using the identity projected in the corresponding resource account.

    Multi-tenant secure bastion
    4.
    发明授权
    Multi-tenant secure bastion 有权

    公开(公告)号：US10511584B1

    公开(公告)日：2019-12-17

    申请号：US15280692

    申请日：2016-09-29

    Applicant: Amazon Technologies, Inc.

    Inventor： Graeme David Baer ,  Conor Patrick Cahill

    IPC: H04L9/32 ,  H04L29/06

    Abstract: A secure shell (SSH) bastion service can proxy customer SSH traffic through SSH host resources before routing the traffic to the target resource instances in a customer allocation of a multi-tenant environment. The bastion service supports connections directly from a customer allocation management console, which enables the specification of a target instance and selection of an option to establish a secure connection to that instance. The bastion service handles authentication and authorization, ensuring that all security requirements are satisfied. An SSH server of the bastion service can route the traffic to the target instance using the appropriate port for SSH traffic. A second SSH connection is established from the bastion service to the SSH server executing on the target instance, providing end-to-end security of traffic from the client device to the target instance of the customer allocation.

    Contribution signatures for tagging
    7.
    发明授权
    Contribution signatures for tagging 有权

    公开(公告)号：US10536277B1

    公开(公告)日：2020-01-14

    申请号：US14979308

    申请日：2015-12-22

    Applicant: Amazon Technologies, Inc.

    Inventor： William Frederick Hingle Kruse ,  Conor Patrick Cahill ,  Jeffrey Cicero Canton ,  Dmitry Frenkel ,  Harshad Vasant Kulkarni ,  Colin Watson ,  Andrew Paul Mikulski

    IPC: H04L29/06 ,  H04L9/32 ,  G06F12/14

    Abstract: A request to add tags (e.g., labels, key-value pairs, or metadata) to resources can be digitally signed by the entity making the request, such that the source can be verified and an authorization determination made for each tag. For a request involving multiple services (or entities) that can each add tags, any tag added by a service can be included in the request and digitally signed by that service. Each service processing the request can also digitally sign the request before forwarding, so that each service signs a version of the request, which includes elements signed by other services earlier in the request chain. When the request is received to a tagging service, the service ensures that every tag was digitally signed by the appropriate authorized entity or service, and validates the signatures to ensure that no data was modified or omitted, before adding the tags to the designated resource(s).

    Organization level identity management
    8.
    发明授权
    Organization level identity management 有权

    公开(公告)号：US11962511B2

    公开(公告)日：2024-04-16

    申请号：US17870609

    申请日：2022-07-21

    Applicant: Amazon Technologies, Inc.

    Inventor： Conor Patrick Cahill ,  Jasmeet Chhabra ,  Daniel Stephen Popick

    IPC: H04L47/70 ,  G06F21/31 ,  G06F21/45 ,  G06Q10/00 ,  H04L9/40 ,  H04L67/02 ,  H04L67/146

    CPC classification number: H04L47/70 ,  G06F21/31 ,  G06F21/45 ,  G06Q10/00 ,  H04L63/102 ,  H04L67/02 ,  H04L67/146

    Abstract: User identities can managed at an organization level, instead of across multiple individual resource accounts. In a resource provider environment, access to various resources and services may require users to have identities with specific resource accounts. Users can instead be associated with organization accounts, or virtual accounts that are not associated with specific resources or services. The organization accounts are attached at the appropriate location(s) in an organizational hierarchy. A user having an organization account can project the identity in any sub-account in the organization hierarchy. This can include any lower-level resource account, or can child accounts under a relevant branch of the hierarchy. A user can validate against the organization account, and receive access to the relevant service or resources using the identity projected in the corresponding resource account.

Patent Agency Ranking