Digital certificate management
AssigneeAmazon Technologies, Inc.
InventorNima Sharifi Mehr
Life of this patent
Estimating the term…
Abstract
A client establishes a communication session with a service by negotiating a first cipher suite from a plurality of available cipher suites to secure communications over the first communication session. A cipher suite strength measure from the first cipher suite is recorded to a database and when the customer attempts to negotiate a second cipher suite to secure communications over a second communication session, the second cipher suite strength measure is compared to the database of strength measurements to determine whether the second cipher suite is at least as secure as the previously used cipher suites.
Claims20
A computer-implemented method comprising:
- negotiating, with a computer system, a first cipher suite to secure communications;
- recording the first cipher suite in association with the computer system;
- obtaining, from the computer system, a selection of a second cipher suite;
- generating, as a result of the first cipher suite being recorded in association with the computer system and based at least in part on a ranking of the first cipher suite relative to at least the second cipher suite, a determination whether to use the second cipher suite to communicate with the computer system;
- and
- communicating with the computer system according to the determination.
A system, comprising:
- one or more processors;
- and
- memory with instructions that, as a result of being executed by the one or more processors, cause the system to:
- negotiate, with a computing device, a first cipher suite to secure communications;
- record the first cipher suite in association with the computing device;
- obtain, from the computing device, a selection of a second cipher suite;
- and
- reject the second cipher suite as a result of the first cipher suite being recorded in association with the computing device and based at least in part on a ranking of the first cipher suite relative to at least the second cipher suite.
A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:
- obtain, from a computing device, a selection of a second cipher suite;
- generate, as a result of a first cipher suite being recorded in association with the computing device and based at least in part on a ranking of the first cipher suite relative to at least the second cipher suite, a determination whether to use the second cipher suite to communicate with the computing device;
- and
- communicate with the computing device according to the determination.
Dependencies are inferred from the claim text.