Providing devices as a service
AssigneeAmazon Technologies, Inc.
InventorsRobert Eric Fitzgerald, Andrew J. Doane, Alexander Edward Schoof, Christopher Steven Helma, Rui Min, Matthew A. Estes, Anand Mishra
Life of this patent
Estimating the term…
Abstract
Devices, such as hardware security modules, are provided as a service. A customer of a computing resource provider is able to request the addition of a device to a network of the customer hosted by the computing resource provider. The computing resource provider reconfigures a set of computing resources so that the devices of the customer are able to communicate with the device as if the device was in the customer's own network.
Claims24
A computer-implemented method, comprising:
- under the control of one or more computer systems configured with executable instructions,
- receiving, from a customer device remotely connected to a computing resource provider, a request to add a hardware security module hosted by the computing resource provider to a customer network that is hosted by the computing resource provider and remotely managed by the customer device;
- as a result of receiving the request, selecting a first hardware security module from a plurality of available hardware security modules local to the computing resource provider;
- creating, in the customer network, a network interface to another network in communication with the selected first hardware security module allocated to the customer device;
- and
- configuring the network interface and other network such that requests through the customer network addressed to the network interface are provided to the selected first hardware security module.
A computer-implemented method, comprising:
- under the control of one or more computer systems configured with executable instructions,
- receiving, from a customer device remote from the one or more computer systems, a request to add a device to a network;
- selecting, from a set of available devices hosted by and local to the one or more computer systems and usable to fulfill the request, a first device;
- allocating the selected first device to exclusive use by the customer device;
- and
- reconfiguring a set of computing resources of the one or more computing systems such that that the network includes a network interface to another network connecting the network interface and the first device and such that network traffic addressed to the network interface is forwarded over the other network to the selected first device.
A system, comprising:
- a set of computing resources that implements a network;
- a web server configured to receive requests;
- and
- a management subsystem configured to:
- receive a request via the web server to add a security module hosted by and local to the system, to the network having a corresponding set of network addresses, the request originating from a customer device remote to the system;
- and
- as a result of receiving the request, configure at least a subset of the set of computing resources such that one or more devices in the network can communicate with the security module by addressing communications to the security module with a network address from the set of network addresses.
One or more non-transitory computer-readable storage media having collectively stored thereon instructions that, when executed by one or more processors of a computer system, cause the computer system to:
- receive a remote request to add a security module to a network implemented by the computer system, the network being hosted on behalf of a third-party customer device and having a corresponding set of network addresses, the security module being local to and hosted on behalf of the third-party customer device;
- and
- as a result of receiving the request, cause reconfiguration of computing resources of a set of computing resources so that the communications to the security module are addressable using a network address from the corresponding set of network addresses.
Dependencies are inferred from the claim text.