Secure validation using hardware security modules

US9053480B1 · kind B1 · utility

Assignee

• AMAZON TECHNOLOGIES, INC. · US

Inventors

• Jason Curtis Jenks · Lynnwood, US
• Brandon B. Low · Seattle, US
• Hanson Char · Mercer Island, US
• Peter S. Vosshall · Bainbridge Island, US
• Waylon Brunette · Seattle, US

Key dates

• Filing date: Sep 30, 2008
• Grant date: Jun 9, 2015
• Expiry date: Nov 21, 2028

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L9/3226
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Disclosed is secure decryption and business rule validation of encrypted confidential data within a hardware security module (HSM). The validation may include the use of a Bloom filter stored and executing within the HSM. The return order of encrypted data within the HSM as well as requests for external data relating to validation may be randomized to further harden against correlation attacks.