公开(公告)号：US12158973B1

公开(公告)日：2024-12-03

申请号：US17699548

申请日：2022-03-21

Applicant: Amazon Technologies, Inc.

Inventor： John Nilles ,  Lionel Bitoun ,  Rahul Chopra ,  Fredrik Wass ,  Ron E. Knapp ,  Megan Duffy ,  Nelson M. Pereira

IPC: G06F21/78 ,  G06F21/60 ,  G06F21/62 ,  H04L9/06 ,  H04L9/08

Abstract: Systems, devices, and methods are provided for stable pseudonymous identifiers. A system may obtain first data, and obtain a first cryptographic key from a cryptography service. The system may determine, based at least in part on the first data and the first cryptographic key, a first hash output of a hash function. The system may determine that a mapping table does not include a first record associated with the first hash output. The system may create, in the mapping table, a first record comprising the first hash output and a random value. The system may provide the random value as a stable pseudonymous identifier of the first data. If the first cryptographic key is subject to a key rotation, the pseudonymous identifier of the first data may remain constant even though the value of the key changes as a result of the key rotation.

公开(公告)号：US11997209B1

公开(公告)日：2024-05-28

申请号：US17208881

申请日：2021-03-22

Applicant: Amazon Technologies, Inc.

Inventor： Rahul Chopra ,  Maurice Lin ,  Pramod Raghavendran ,  Keerat Singh Sharma

IPC: H04L9/32 ,  H04L9/00

CPC classification number: H04L9/3236 ,  H04L9/50

Abstract: Devices, systems, and methods are provided for rotating cryptography secrets in data hashing. A method may include generating, based on a hashing technique, first obfuscated data using first data and a first version of a secret, and generating first metadata associated with the first obfuscated data, the first metadata indicative of the first version of the secret. The method may include determining a second version of the secret based on the first metadata. The method may include generating, based on the hashing technique, second obfuscated data using the first obfuscated data and the second version of the secret, and generating second metadata associated with the second obfuscated data, the second metadata indicative of the second version of the secret.