Remote attestation of host devices

    公开(公告)号:US10810015B2

    公开(公告)日:2020-10-20

    申请号:US16289384

    申请日:2019-02-28

    Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.

    Managing configuration updates
    2.
    发明授权

    公开(公告)号:US09755900B2

    公开(公告)日:2017-09-05

    申请号:US13794660

    申请日:2013-03-11

    CPC classification number: H04L41/082 H04L41/0869 H04L41/0889

    Abstract: Approaches are described for managing configuration information updates, or other information in a data center, shared resource environment, or other such electronic environment. A management component is provided that can manage distribution of configuration information, operating system (OS) images, authentication data, or other such information for host machines, servers, or other such devices in a network environment. The management component can further perform a number of actions when deploying configuration information updates, such as performing one or more checks to verify the health of a target switch, deactivating the target switch, shifting traffic to and from the target switch, updating a current configuration of the target switch, verifying the target switch's health after the configuration changes, bringing the target switch back in service, among others.

    Remote attestation of host devices

    公开(公告)号:US10241804B2

    公开(公告)日:2019-03-26

    申请号:US15483227

    申请日:2017-04-10

    Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.

    REMOTE ATTESTATION OF HOST DEVICES
    5.
    发明申请
    REMOTE ATTESTATION OF HOST DEVICES 有权
    主机设备远程监控

    公开(公告)号:US20140310510A1

    公开(公告)日:2014-10-16

    申请号:US13863296

    申请日:2013-04-15

    Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.

    Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。

    HOST RECOVERY USING A SECURE STORE
    6.
    发明申请
    HOST RECOVERY USING A SECURE STORE 有权
    使用安全存储的主机恢复

    公开(公告)号:US20140310509A1

    公开(公告)日:2014-10-16

    申请号:US13862923

    申请日:2013-04-15

    CPC classification number: G06F11/1417 G06F21/57

    Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.

    Abstract translation: 描述了使主计算设备能够存储用于在主计算设备上的安全存储(诸如可信平台模块(TPM))中恢复主计算设备的状态的凭证和其他安全信息的方法。 在主机计算设备发生故障(例如断电,网络故障等)时,主机计算设备可以从安全存储中获得必要的凭证,并使用这些凭据来启动各种服务,恢复状态 的主机,并执行各种其他功能。 此外,安全存储(例如,TPM)可以将主机计算设备的引导固件测量和远程认证提供给网络上的其他设备,例如当恢复的主机需要与网络上的其他设备进行通信时。

    REMOTE ATTESTATION OF HOST DEVICES
    8.
    发明申请

    公开(公告)号:US20170255472A1

    公开(公告)日:2017-09-07

    申请号:US15483227

    申请日:2017-04-10

    Abstract: Approaches are described for enabling a host computing device to store credentials and other security information useful for recovering the state of the host computing device in a secure store, such as a trusted platform module (TPM) on the host computing device. When recovering the host computing device in the event of a failure (e.g., power outage, network failure, etc.), the host computing device can obtain the necessary credentials from the secure store and use those credentials to boot various services, restore the state of the host and perform various other functions. In addition, the secure store (e.g., TPM) may provide boot firmware measurement and remote attestation of the host computing devices to other devices on a network, such as when the recovering host needs to communicate with the other devices on the network.

    Bandwidth cost assignment for multi-tenant networks

    公开(公告)号:US10896432B1

    公开(公告)日:2021-01-19

    申请号:US14492796

    申请日:2014-09-22

    Abstract: A network metering service obtains from a data store raw metering data specifying network bandwidth utilization for a plurality of customers. The network metering service aggregates this data in order to identify bandwidth usage for each service of a computing resource service provider and for each customer. Based on this data, the network metering service determines a peak-to-average score and a correlation coefficient for each customer, which may be used to determine a unit cost burden. The network metering service may utilize the unit cost burden for each customer to determine whether the customer should be provided with a discounted rate for network bandwidth usage or should incur a price increase.

    HYBRID CLUSTER RECOVERY TECHNIQUES
    10.
    发明申请

    公开(公告)号:US20200052953A1

    公开(公告)日:2020-02-13

    申请号:US16657903

    申请日:2019-10-18

    Abstract: At a recovery manager associated with a cluster, a determination is made as to whether a replacement for a first node of the cluster can be elected by the other nodes of the cluster using a first election protocol. The recovery manager selects a second node of the cluster as a replacement for the first node, based on data item replication progress made at the node, and transmits an indication that the second node has been selected to one or more nodes of the cluster.

Patent Agency Ranking