US 2017/0012958 A1 · TECHNIQUES FOR CREDENTIAL GENERATION

Abstract

A plurality of virtual computing resources is detected to have been provisioned. Credentials are distributed to the plurality of virtual computing resources. A credentials map that maps the credentials to the plurality of virtual computing resources is updated. The credentials for the plurality of virtual computing resources are activated to enable the plurality of virtual computing resources to use the credentials to authenticate to a second computer system that manages a resource service, with the credentials being inaccessible to resources of the resource service. A virtual computing resource of the plurality of virtual computing resources is detected to been deprovisioned, and the credentials for the virtual computing resource are deactivated.

Claims20

Dependent claims

A computer-implemented method, comprising:

under the control of one or more computer systems that execute instructions that cause the method to be performed by one or more processors,
distributing credentials to a plurality of virtual machine instances;
updating a credentials map that maps the credentials to the plurality of virtual machine instances;
activating the credentials for the plurality of virtual machine instances, thereby enabling the plurality of virtual machine instances to use the credentials for authenticating with a computer system that manages a resource service, the computer system separate from the one or more computer systems;
determining that a virtual machine instance of the plurality of virtual machine instances has been deprovisioned;
and
deactivating one or more of the credentials in the credential map that are mapped to the virtual machine instance.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application

15/276,691Filed 26 Sep 2016

Priority

29 Dec 2010

Published

12 Jan 2017

Term ends

Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general

Family

Application12/981,231Continuation · filed 29 Dec 2010

Application14/204,124Continuation · filed 11 Mar 2014

Application15/276,691Continuation

US 10,097,531 B2Related patent

US 2014/0196130 A1Published application

US 8,683,560 B1Related patent

US 9,455,975 B2Related patent

US 2017/0012958 A1This patent

From the US filing history. Foreign family members aren’t listed.

Techniques for credential generation

Life of this patent

Techniques for credential generation

Life of this patent

Abstract

Claims20