US 11,381,584 B1Granted

System and methods using ephemeral accounts to limit risk of exposing sensitive data

AssigneeAmazon Technologies, Inc.

InventorsAnand Victor, Ramnath R. Iyer, David Edouard Louis Robert, Ankur Goenka, Zhengqiang Xu, Keshav Aswathnarayana Narsipur, Kyle B. Peterson

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A customer in a computing resource service provider environment provisions a virtual machine instance configured with access to sensitive data in a secure storage facility. The virtual machine instance is provisioned specifically to generate reports using a subset of the sensitive data to satisfy different reporting requirements associated with governing entities and agencies. After generating the reports, the virtual machine instance is then removed from the computing resource service environment such that the sensitive data is inaccessible.

Claims22

Dependent claims

A computer-implemented method, comprising:

receiving a request, at an instantiated virtual machine instance, to generate a report for a destination;
receiving, based at least in part on credentials associated with the request, data from a storage location comprising one or more tokens, wherein the credentials associated with the request provides the virtual machine instance with information usable to access the data from the storage location;
identifying, based at least in part on the request, a format of the report comprising the data;
causing, by providing the one or more tokens to a service, the service to provide a subset of the data to be in clear text form;
using the virtual machine instance to generate the report, according to the format of the report, to include the data and the subset of the data in clear text form;
sending the report to the destination;
and
deleting the virtual machine instance in response to sending the report to the destination.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/562,347Filed 5 Sep 2019
Granted: 5 Jul 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

G06F 9/541
Interprogram communication: via adapters, e.g. between incompatible applications
H04L 63/1425
By monitoring network traffic: traffic logging, e.g. anomaly detection
G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…