Stateless service-mediated security module
AssigneeAmazon Technologies, Inc.
InventorSteven Preston Lightner Norum
Life of this patent
Estimating the term…
Abstract
Secure operations can be performed using security module instances offered as a web service through a resource provider environment. State data and cryptographic material can be loaded and unloaded from the instance as needed, such that the instance can be reused for operations of different customers. The material and data can be stored as a bundle encrypted using a key specific to the hardware security module and a key specific to the resource provider, such that the bundle can only be decrypted in an instance of that type of security module from the associated manufacturer and operated by that particular resource provider. The customer is then only responsible for the allocation of that instance during the respective cryptographic operation(s).
Claims20
A computer-implemented method, comprising:
- receiving a first request for a first cryptographic operation to be performed on behalf of a first account of a service provider;
- forwarding information for the first request to an allocated security module instance of a plurality of security module instances operating on a hardware security module;
- loading a first key bundle including a customer certificate and a public module key into the allocated security module instance, the first key bundle encrypted using a security key, the security key being a key installed onto the hardware security module by a third-party other than the service provider;
- decrypting, at the allocated security module instance, the first key bundle using the security key;
- verifying, using the first key bundle, an identity of the first account associated with the first request;
- performing the first cryptographic operation on behalf of the first account in the allocated security module instance;
- and
- deleting the first key bundle from the allocated security module instance, wherein one or more subsequent cryptographic operations for at least one other account of the service provider are able to be performed on the allocated security module instance.
A computing device, comprising:
- at least one processor;
- and
- memory including instructions that, when executed by the at least one processor, cause the computing device to:
- receive a first request for a first cryptographic operation to be performed on behalf of a first account of a service provider;
- forward information for the first request to an allocated security module instance of a plurality of security module instances operating on a hardware security module;
- load a first key bundle including a customer certificate and a public module key into the allocated security module instance, the first key bundle encrypted using a security key, the security key being a key installed onto the hardware security module by a third-party other than the service provider;
- decrypt, at the allocated security module instance, the first key bundle using the security key;
- verify, using the first key bundle, an identity of the first account associated with the first request;
- perform the first cryptographic operation on behalf of the first account in the allocated security module instance;
- and
- delete the first key bundle from the allocated security module instance, wherein one or more subsequent cryptographic operations for at least one other account of the service provider are able to be performed on the allocated security module instance.
Dependencies are inferred from the claim text.