Network traffic with credential signatures
AssigneeAmazon Technologies, Inc.
InventorsKevin Christopher Miller, Colm Gearóid MacCárthaigh
Life of this patent
Estimating the term…
Loading patent…
AssigneeAmazon Technologies, Inc.
InventorsKevin Christopher Miller, Colm Gearóid MacCárthaigh
Estimating the term…
Data is split into a set of data packets and transmitted between a client computer system and a network service via a packet-switched network. The client computer system identifies a role, permission, group, or other credential that is associated with the data packets, and attaches a credential identifier such as a digital signature to the packets before they are transmitted over the network. A network service receives the data packets, and is configured to filter or route the data packets to a recipient using the attached credential identifier. The network service can adjust the filtering or routing process to occur within a data link, network, transport, or application layer. In some examples, the filtering or routing is provided from within a hypervisor.
A non-transitory computer-readable storage medium having stored thereon executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least:
A system comprising a set of one or more processors and memory that implement one or more services, the one or more services:
A computer-implemented method, comprising:
Dependencies are inferred from the claim text.