Integrated physical security control system for computing resources
AssigneeAmazon Technologies, Inc.
InventorsKevin C. Miller, Peter C. Beckman
Life of this patent
Estimating the term…
Abstract
A computing data center that contains a set of physically isolatable units of computing resources for which a physical security exception action plan is to be provided. Upon determining that a security event has occurred for one or more physically isolatable units, the computing data center implements physical security settings on potentially affected computing resources so that a physical security exception action plan can be met. The computing data center may, for example, remove data from the physically isolatable units and make the removed data available elsewhere.
Claims22
A computing data center configured to provide computing resources, the computing data center comprising:
- one or more physically isolatable units comprising discrete physical computing assets;
- a computing device comprising at least one processor and a memory communicatively coupled to said processor when said computing device is operational, said memory having stored therein computer readable instructions that, upon execution by the computing device, cause the computing device to at least:
- provide, in the computing data center, one or more computing resources on behalf of a user within the one or more physically isolatable units;
- based at least in part on physical data security preferences received from the user, identify a set of the computing resources for which a physical security exception action plan is to be applied and identify physical computing assets that are providing the identified set of computing resources for which the physical security exception plan is to be applied;
- determine that a security exception at the one or more physically isolated units associated with the identified physical computer assets has occurred;
- and
- in response to the determination, and according to the physical security exception action plan, remove the identified set of computing resources from within the one or more physically isolatable units.
A computer-implemented method of securing computing resources, the method comprising:
- allocating, by a computing device, one or more computing resources available for access by a user, the computing resources associated with one or more physically isolatable units and the computing resources associated with one or more user options for physical data security of the computing resources;
- determining, by the computing device, that a physical event has occurred in at least one of the physically isolatable units;
- and
- in response to said determining, causing, by the computing device, at least one of the one or more computing resources running within the at least one of the physically isolatable units to be inaccessible.
A system comprising:
- at least one processor, a memory communicatively coupled to said processor when said system is operational, said memory having stored therein computer instructions that upon execution by the at least one processor cause:
- based at least in part on physical data security preferences received from a user, identifying one or more computing resources for which a physical security exception action plan is to be provided, the one or more computing resources being hosted on behalf of the user;
- determining that a physical security exception has occurred;
- identifying physical computing assets that are providing the identified computing resources for which the physical security exception action plan is to be provided;
- and
- in response to said determining, implementing the physical security exception action plan on the identified computing resources.
A non-transitory computer readable storage medium comprising:
- instructions for allowing access to one or more computing resources by a user;
- instructions for identifying a set of the computing resources for which a physical security exception action plan is to be provided based on user's physical security preferences;
- instructions for determining that a physical event has occurred;
- and
- instructions for, in response to said determining, applying the physical security exception action plan to the identified set of computing resources based on a location of the physical event and a location of computing assets providing the set of the computing resources.
Dependencies are inferred from the claim text.