公开(公告)号：US11526502B1

公开(公告)日：2022-12-13

申请号：US16583158

申请日：2019-09-25

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Lawrence Harris ,  Thomas Albert Faulhaber

IPC: G06F16/30 ,  G06F16/242 ,  G06F16/25 ,  G06F16/28 ,  G06N20/00 ,  G06F7/58

Abstract: A filter request for a data set indicates a query specification and one or more sub-range indicators of a disjoint subset descriptor. Corresponding the individual data records obtained from the data set using the query specification, a respective range mapping value is generated. Using the range mapping values and the sub-range indicators, a result set of the filter request is obtained.

公开(公告)号：US20220284027A1

公开(公告)日：2022-09-08

申请号：US17652365

申请日：2022-02-24

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Lawrence Harris ,  Kevin C. Miller ,  Ramyanshu Datta

IPC: G06F16/2457 ,  G06F16/2455 ,  G06F16/9035 ,  G06F16/2452 ,  G06F16/23

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied may not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11386230B2

公开(公告)日：2022-07-12

申请号：US16586816

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller

IPC: G06F21/60 ,  G06F21/62 ,  H04L9/08

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11360948B2

公开(公告)日：2022-06-14

申请号：US16586673

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Ramyanshu Datta ,  Timothy Lawrence Harris

IPC: G06F16/182 ,  G06F21/62

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11263220B2

公开(公告)日：2022-03-01

申请号：US16586562

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Lawrence Harris ,  Kevin C. Miller ,  Ramyanshu Datta

IPC: G06F7/00 ,  G06F16/2457 ,  G06F16/2455 ,  G06F16/9035 ,  G06F16/2452 ,  G06F16/23

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11023311B2

公开(公告)日：2021-06-01

申请号：US16586825

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller ,  Haripriya Devnath ,  Robert Devers Wilson

IPC: G06F11/10 ,  G06F13/16 ,  G06F9/445

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US20210096944A1

公开(公告)日：2021-04-01

申请号：US16586825

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller ,  Haripriya Devnath ,  Robert Devers Wilson

IPC: G06F11/10 ,  G06F9/445 ,  G06F13/16

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11550944B2

公开(公告)日：2023-01-10

申请号：US16586686

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Timothy Lawrence Harris ,  Ramyanshu Datta

IPC: H04L29/06 ,  G06F21/62 ,  G06F16/182 ,  G06F3/06

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. Such functions can include data access control functions, data manipulation functions, and the like. The owner of an object collection maintained by the object storage service can specify code execution environment rules that can give privileges to the execution of such functions such as by allowing the functions to access external services or the requesting user's private resources. In this manner, owners of the object collection are provided with greater control over how the object collection is accessed.

公开(公告)号：US11416628B2

公开(公告)日：2022-08-16

申请号：US16586659

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Timothy Lawrence Harris ,  Ramyanshu Datta

IPC: G06F21/62 ,  H04L9/40

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. Different data manipulation functions can be placed in different I/O paths depending on the request method or user access level. For example, a user having full access may be returned the unaltered version of the object, whereas a user having modified or reduced access may be returned a modified or redacted version of the object. In this manner, owners of the object collection are provided with greater control over how the object collection is accessed.

公开(公告)号：US20210097189A1

公开(公告)日：2021-04-01

申请号：US16586659

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Timothy Lawrence Harris ,  Ramyanshu Datta

IPC: G06F21/62

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. Different data manipulation functions can be placed in different I/O paths depending on the request method or user access level. For example, a user having full access may be returned the unaltered version of the object, whereas a user having modified or reduced access may be returned a modified or redacted version of the object. In this manner, owners of the object collection are provided with greater control over how the object collection is accessed.