Optimistic key usage with correction
AssigneeAmazon Technologies, Inc.
InventorsMarcel Andrew Levy, Darren Ernest Canavor, Zachary Ganwise Fewtrell, Andrew Alphus Kimbrough, Jonathan Kozolchyk, Darin Keith McAdams, Pradeep Ramarao, Gregory Branchek Roth
Life of this patent
Estimating the term…
Abstract
Nodes in a distributed system utilize the same cryptographic key, where the cryptographic key is subject to a usage limit. The usage limit is allowed to be temporarily exceeded. When the usage limit is exceeded, results of exceeding the usage limit are corrected to mitigate the effects of exceeding the usage limit.
Claims20
A computer-implemented method, comprising:
- under control of one or more computer systems configured with executable instructions,
- causing a set of devices that have access to a first cryptographic key for cryptographic operations to replace the first cryptographic key with a second cryptographic key;
- determining an aggregated number of encryption operations performed by the set of devices using the first cryptographic key, a plurality of devices in the set contributing to the aggregated number of encryption operations;
- and
- as a result of the determined aggregated number exceeding a usage limit for the first cryptographic key, for a set of ciphertexts encrypted under the first cryptographic key, reencrypting the set of ciphertexts under the second cryptographic key such that:
- at a time after the set of ciphertexts is re-encrypted under the second cryptographic key, individual ciphertexts of the set of ciphertexts encrypted under the first cryptographic key are rendered inaccessible, the time based at least in part on an amount of time individual devices from the set of devices are limited to for utilizing the first cryptographic key to perform cryptographic operations;
- and
- a number of ciphertexts encrypted under the first cryptographic key that are persistently stored is below a limit corresponding to compliance with the usage limit.
A system, comprising at least one computing device configured to implement one or more services, wherein the one or more services are configured to:
- determine an aggregated usage amount for a first cryptographic key used by a set of devices, the aggregated usage amount based at least in part on individual usage of the first cryptographic key for performing cryptographic operations of a first type by individual devices of the set;
- and
- as a result of the determined aggregated usage amount exceeding a usage limit for the first cryptographic key, cause one or more corrective operations to be performed on at least outputs of cryptographic operations produced in excess of the usage limit such that, after performance of the one or more corrective operations, an amount of persistently stored outputs of the cryptographic operations of the first type generated using the first cryptographic key corresponds to compliance with the usage limit.
A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:
- detect an aggregated usage amount for a first cryptographic key used by a set of devices having exceeded a usage limit for the first cryptographic key, the aggregated usage amount based at least in part on individual usage of the first cryptographic key for performing cryptographic operations of a first type by individual devices of the set;
- and
- as a result of the detecting the aggregated usage amount having exceeded the usage limit for the first cryptographic key, cause modification to an amount of output of the cryptographic operations of the first type that are accessible based at least in part on an amount by which the usage limit was exceeded.
Dependencies are inferred from the claim text.