Communication channel security enhancements
AssigneeAmazon Technologies, Inc.
InventorNima Sharifi Mehr
Life of this patent
Estimating the term…
Abstract
A secure channel is generated using a third party to the channel. A first secure channel between two computer systems is established. The first secure channel is used to relay information about a third party. The third party provides security parameters for a second secure channel to enable the two computer systems to communicate over a second secure channel.
Claims20
A computer-implemented method, comprising:
- performing a handshake process to establish a first secure communications channel between a client device and a first computer system;
- determining, by the first computer system, a second computer system;
- transmitting, by the first computer system to the client device and over the established first secure communications channel, an indication of the second computer system;
- obtaining, by the client device over a second secure communications channel established between the client device and the second computer system, a set of security parameters that enable a third secure communications channel to be established;
- and
- using, by the client device, the set of security parameters to establish the third secure communications channel between the client device and the first computer system.
A system, comprising:
- at least one computing device implementing one or more services that at least:
- determine a set of security parameters for establishment of a secure communications channel;
- store the set of security parameters in association with a pairing of a first computer system and a second computer system;
- receive, via a first secure communications channel with the first computer system, a request for the set of security parameters, the request indicating the pairing of the first computer system and the second computer system, the first computer system and the second computer system using a second secure communications channel;
- and
- provide, to the first computer system, at least a subset of the set of security parameters to cause the first computer system to establish, using the at least the subset of the set of security parameters, a third secure communications channel between the first computer system and the second computer system.
A non-transitory computer-readable storage medium comprising executable instructions that, as a result of execution by one or more processors of a first computer system, cause the first computer system to at least:
- establish a first secure communications channel with a second computer system;
- communicate over the first secure communications channel to determine a third computer system;
- obtain, from the third computer system, a set of security parameters that enable a second secure communications channel to be established;
- use the set of security parameters to establish the second secure communications channel;
- and
- communicate with the second computer system over the second secure communications channel.
Dependencies are inferred from the claim text.