-
公开(公告)号:US10810015B2
公开(公告)日:2020-10-20
申请号:US16289384
申请日:2019-02-28
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F11/14 , G06F9/4401 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US09755900B2
公开(公告)日:2017-09-05
申请号:US13794660
申请日:2013-03-11
Applicant: Amazon Technologies, Inc.
Inventor: Shivaraj Tenginakai , Rachit Chawla , Colin John Whittaker , Rajkumar Haridoss , Raghavendra Vijayanarasimhan Narasimhan
IPC: G06F15/177 , H04L12/24
CPC classification number: H04L41/082 , H04L41/0869 , H04L41/0889
Abstract: Approaches are described for managing configuration information updates, or other information in a data center, shared resource environment, or other such electronic environment. A management component is provided that can manage distribution of configuration information, operating system (OS) images, authentication data, or other such information for host machines, servers, or other such devices in a network environment. The management component can further perform a number of actions when deploying configuration information updates, such as performing one or more checks to verify the health of a target switch, deactivating the target switch, shifting traffic to and from the target switch, updating a current configuration of the target switch, verifying the target switch's health after the configuration changes, bringing the target switch back in service, among others.
-
公开(公告)号:US10454754B1
公开(公告)日:2019-10-22
申请号:US15382340
申请日:2016-12-16
Applicant: Amazon Technologies, Inc.
Inventor: Parth Patel , Rachit Chawla , Aseem Cheema , Antoun Joubran Kanawati , Manoj Kumar
IPC: G06F15/173 , H04L12/24 , H04L29/08
Abstract: At a recovery manager associated with a cluster, a determination is made as to whether a replacement for a first node of the cluster can be elected by the other nodes of the cluster using a first election protocol. The recovery manager selects a second node of the cluster as a replacement for the first node, based on data item replication progress made at the node, and transmits an indication that the second node has been selected to one or more nodes of the cluster.
-
公开(公告)号:US10241804B2
公开(公告)日:2019-03-26
申请号:US15483227
申请日:2017-04-10
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F11/14 , G06F9/4401 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US20140310510A1
公开(公告)日:2014-10-16
申请号:US13863296
申请日:2013-04-15
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
CPC classification number: G06F9/4401 , G06F9/4406 , G06F11/1417 , G06F11/1446 , G06F21/575
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。
-
公开(公告)号:US20140310509A1
公开(公告)日:2014-10-16
申请号:US13862923
申请日:2013-04-15
Applicant: Amazon Technologies, Inc
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
IPC: G06F11/14
CPC classification number: G06F11/1417 , G06F21/57
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。
-
公开(公告)号:US11516072B2
公开(公告)日:2022-11-29
申请号:US16657903
申请日:2019-10-18
Applicant: Amazon Technologies, Inc.
Inventor: Parth Patel , Rachit Chawla , Aseem Cheema , Antoun Joubran Kanawati , Manoj Kumar
IPC: G06F15/173 , H04L41/0654 , H04L67/1095
Abstract: At a recovery manager associated with a cluster, a determination is made as to whether a replacement for a first node of the cluster can be elected by the other nodes of the cluster using a first election protocol. The recovery manager selects a second node of the cluster as a replacement for the first node, based on data item replication progress made at the node, and transmits an indication that the second node has been selected to one or more nodes of the cluster.
-
公开(公告)号:US20170255472A1
公开(公告)日:2017-09-07
申请号:US15483227
申请日:2017-04-10
Applicant: Amazon Technologies, Inc.
Inventor: Nachiketh Rao Potlapally , Rachit Chawla , Jeremy Ryan Volkman , Michael David Marr
CPC classification number: G06F9/4401 , G06F9/4406 , G06F11/1417 , G06F11/1446 , G06F21/575
Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.
-
公开(公告)号:US10896432B1
公开(公告)日:2021-01-19
申请号:US14492796
申请日:2014-09-22
Applicant: Amazon Technologies, Inc.
Inventor: Abhoy Bhaktwatsalam , Nathan Gavin Spitler , Rachit Chawla , Louis Phu Dang
Abstract: A network metering service obtains from a data store raw metering data specifying network bandwidth utilization for a plurality of customers. The network metering service aggregates this data in order to identify bandwidth usage for each service of a computing resource service provider and for each customer. Based on this data, the network metering service determines a peak-to-average score and a correlation coefficient for each customer, which may be used to determine a unit cost burden. The network metering service may utilize the unit cost burden for each customer to determine whether the customer should be provided with a discounted rate for network bandwidth usage or should incur a price increase.
-
公开(公告)号:US20200052953A1
公开(公告)日:2020-02-13
申请号:US16657903
申请日:2019-10-18
Applicant: Amazon Technologies, Inc.
Inventor: Parth Patel , Rachit Chawla , Aseem Cheema , Antoun Joubran Kanawati , Manoj Kumar
Abstract: At a recovery manager associated with a cluster, a determination is made as to whether a replacement for a first node of the cluster can be elected by the other nodes of the cluster using a first election protocol. The recovery manager selects a second node of the cluster as a replacement for the first node, based on data item replication progress made at the node, and transmits an indication that the second node has been selected to one or more nodes of the cluster.
-
-
-
-
-
-
-
-
-