Secure inter-service communications in a cloud computing system

A method, comprising:

• receiving, by a computing device, a request for computing resources from a client device, the request including a digital signature and signature version information, the signature version information being separate from the digital signature and including a value;
• validating, by the computing device, the signature version information of the received request based on a comparison of the value of the signature version information with a range of signature values, the range of signature values indicative of requests from client devices authorized to communicate with the computing device;
• and
• providing, by the computing device, the client device with access to the computing resources in response to validation of the signature version information and validation of the signature version information.

A computing device;

• comprising:
• a memory;
• and
• a processor coupled to the memory and configured to:
• receive a request for computing resources from a client device, the request including a digital signature and signature version information, and the signature version information being separate from the digital signature and including a value;
• validate the signature version information of the received request based on a comparison of the value of the signature version information with a range of signature values, the range of signature values indicative of requests from client devices authorized to communicate with the computing device;
• and
• provide the client device with access to the computing resources in response to validation of the signature version information and verification of the digital signature with a public key.

A method, comprising:

• generating, by the client device, a request for computing resources, the request including a pseudo-random number and signature version information;
• generating, by the client device, a digital signature for the request, the generation of the digital signature including use of a private key to sign the request and the pseudo-random number included with the request, and the signature version information being excluded from the digital signature;
• and
• communicating, by the client device, the request to a computing device to enable the client device to access the computing resources without transmission of the private key.

A client device, comprising:

• a memory;
• and
• a processor coupled to the memory and configured to:
• generate a request for computing, resources, the request including a pseudo-random number and signature version information;
• generate a digital signature for the request, the generation of the digital signature including use of a private key to sign the request and the pseudo-random number included with the request, and the signature version information being excluded from the digital signature;
• and
• communicate request to a computing device to enable the client device to access the computing resources without transmission of the private key.