Matthew A Estes

US Patent:

20200052911, Feb 13, 2020

Filed:

Oct 21, 2019

Appl. No.:

16/659074

Inventors:

- Seattle WA, US
David Ripton - Ashburn VA, US
Mikhail Denisenko - North Potomac MD, US
Robert Eric Fitzgerald - Aldie VA, US
Matthew Allen Estes - Aldie VA, US
Tyler Eckstein - Arlington VA, US

International Classification:

H04L 9/32
H04L 9/30
H04L 9/14

Abstract:

Digital certificates include pointers to remote certificate information stores that maintain usage information associated with digital certificates. The pointers provide a mechanism for enabling the remote certificate information stores to be queried for usage information associated with a particular digital certificate. The usage information can be used to determine a validity of the digital certificate.

US Patent:

20190349206, Nov 14, 2019

Filed:

Jul 26, 2019

Appl. No.:

16/523908

Inventors:

- Seattle WA, US
Andrew Jeffrey Doane - Vienna VA, US
Matthew Allen Estes - Herndon VA, US
Alexander Edward Schoof - Herndon VA, US
Robert Eric Fitzgerald - Herndon VA, US
Peter Zachary Bowen - Bainbridge Island WA, US

International Classification:

H04L 9/32
H04L 9/08

Abstract:

A method and apparatus for distributing cryptographic material are disclosed. In the method and apparatus, cryptographic material is obtained and it is determined that the cryptographic material is to be made available for use by one or more computing resources. The cryptographic material is then sent to one or more secure modules, whereby a secure module of the one or more secure modules is programmatically accessible to a computing resource of the one or more computing resources and programmatic access enables the computing resource to request performance of one or more cryptographic operations using the cryptographic material while exporting the cryptographic material to the computing resource is denied.

US Patent:

20180152448, May 31, 2018

Filed:

Jan 23, 2018

Appl. No.:

15/878203

Inventors:

- Seattle WA, US
Andrew J. Doane - Vienna VA, US
Alexander Edward Schoof - Herndon VA, US
Christopher Steven Helma - Herndon VA, US
Rui Min - Fairfax VA, US
Matthew A. Estes - Aldie VA, US
Anand Mishra - Herndon VA, US

International Classification:

H04L 29/06
H04L 29/08
G06F 21/60
H04L 12/24

Abstract:

Devices, such as hardware security modules, are provided as a service. A customer of a computing resource provider is able to request the addition of a device to a network of the customer hosted by the computing resource provider. The computing resource provider reconfigures a set of computing resources so that the devices of the customer are able to communicate with the device as if the device was in the customer's own network.

US Patent:

20160359853, Dec 8, 2016

Filed:

Aug 22, 2016

Appl. No.:

15/243757

Inventors:

- Seattle WA, US
Andrew J. Doane - Vienna VA, US
Alexander Edward Schoof - Herndon VA, US
Christopher Steven Helma - Herndon VA, US
Rui Min - Fairfax VA, US
Matthew A. Estes - Aldie VA, US
Anand Mishra - Herndon VA, US

International Classification:

H04L 29/06
H04L 12/24
H04L 29/08

Abstract:

Devices, such as hardware security modules, are provided as a service. A customer of a computing resource provider is able to request the addition of a device to a network of the customer hosted by the computing resource provider. The computing resource provider reconfigures a set of computing resources so that the devices of the customer are able to communicate with the device as if the device was in the customer's own network.

US Patent:

20140282936, Sep 18, 2014

Filed:

Mar 14, 2013

Appl. No.:

13/830114

Inventors:

Amazon Technologies, Inc. - , US
Andrew J. Doane - Vienna VA, US
Alexander Edward Schoof - Herndon VA, US
Christopher Steven Helma - Herndon VA, US
Rui Min - Fairfax VA, US
Matthew A. Estes - Aldie VA, US
Anand Mishra - Herndon VA, US

International Classification:

H04L 29/06

US Classification:

726 6, 709221, 726 3

Abstract:

Devices, such as hardware security modules, are provided as a service. A customer of a computing resource provider is able to request the addition of a device to a network of the customer hosted by the computing resource provider. The computing resource provider reconfigures a set of computing resources so that the devices of the customer are able to communicate with the device as if the device was in the customer's own network.