Enhanced data security through uniqueness checking
AssigneeAmazon Technologies, Inc.
InventorsAndrew Paul Mikulski, Gregory Branchek Roth, Matthew John Campagna
Life of this patent
Estimating the term…
Abstract
A system records use of values used in cryptographic algorithms where the values are subject to uniqueness constraints. As new values are received, the system checks whether violations of a unique constraint has occurred. If a violation occurs, the system performs actions to mitigate potential compromise caused by exploitation of a vulnerability caused by violation of the uniqueness constraint.
Claims20
A computer-implemented method, comprising:
- receiving a message and a digital signature, the digital signature comprising a signature component and a different first component;
- determining, based at least in part on a second digital signature, that the first component fails to satisfy a constraint indicating a limit on a number of times the signature component is used in association with a cryptographic key;
- and
- performing an action that limits exploitation of a security vulnerability corresponding to the constraint.
A system, comprising:
- one or more processors;
- and
- memory including instructions that, as a result of execution by the one or more processors, cause the system to:
- determine a value subject to a uniqueness constraint of a cryptographic algorithm, the value determined based at least in part on a digital signature associated with a set of cryptographic keys;
- process usage associated with the value based at least in part on the digital signature and a second digital signature;
- determine that the usage violates the uniqueness constraint based at least in part on usage of the value with a same cryptographic key;
- and
- perform an action related to limiting exploitation of a security vulnerability associated with the uniqueness constraint.
A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:
- determine, based at least in part on information associated with a digital signature, a uniqueness constrained value that is associated with a constraint associated with a cryptographic algorithm, the uniqueness constrained value being different than a signature component of the digital signature, and the constraint restricting use of the uniqueness constrained value relative to a set of cryptographic keys;
- determine that the uniqueness constrained value fails to satisfy the constraint;
- and
- perform an action limiting exploitation of a security vulnerability corresponding the constraint.
Dependencies are inferred from the claim text.