Patents by Inventor Benjamin Samuel
Benjamin Samuel has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11343081Abstract: An HSM cluster includes a set of hardware security modules that maintain a set of cryptographic keys that are synchronized across the HSM cluster. Individual applications running on client computer systems access the HSM cluster using HSM cluster clients running on the client computer systems. The HSMs are accessed via a set of HSM cluster servers that monitor the synchronization of the cryptographic keys. Synchronization of the HSMs is maintained by the HSM cluster clients. The HSM cluster clients replicate key-addition and key-deletion operations across the HSM cluster. When a new key is created by a particular HSM, a prefix associated with the particular HSM is added to the identifier associated with the new key to avoid key-namespace collisions. If the set of cryptographic keys becomes unsynchronized across the HSM cluster, applications may continue read-only cryptographic operations while the HSM cluster is resynchronized by the HSM cluster clients.Type: GrantFiled: September 23, 2019Date of Patent: May 24, 2022Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Patent number: 10887294Abstract: A set of cryptographic keys are synchronized across a set of HSMs that are configured in an HSM cluster. The set of cryptographic keys is maintained in a synchronized state by HSM cluster clients running on client computer systems with corresponding client applications. If the HSM cluster becomes unsynchronized, an HSM cluster client attempts to lock the HSM cluster and reestablish synchronization of the cryptographic keys across the HSM cluster. HSMs within the HSM cluster are able to establish an encrypted communication channel to other HSMs without revealing the contents of their communications to their respective host computer systems. Individual HSMs in the HSM cluster may include features that assist the HSM cluster client in determining whether each HSM is up-to-date, identifying particular keys that are not up-to-date, and copying keys from one HSM to another HSM within the HSM cluster.Type: GrantFiled: May 31, 2019Date of Patent: January 5, 2021Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Patent number: 10764047Abstract: An HSM cluster includes a set of hardware security modules that maintain a set of cryptographic keys that are synchronized across the HSM cluster. Individual applications running on client computer systems access the HSM cluster using HSM duster clients running on the client computer systems. The HSMs are accessed via a set of HSM cluster servers that monitor the synchronization of the cryptographic keys. Synchronization of the HSMs is maintained by the HSM cluster clients. If the HSM cluster loses synchronization, an HSM cluster client resynchronizes the HSM cluster by acquiring a list of keys and key versions stored on each HSM, and generating an update map. Using the update map, the HSM client obtains, form various HSM in the HSM cluster, the latest versions of the out-of-date keys in an encrypted form. The HSM cluster client assembles and distributes updates to each HSM in the HSM cluster.Type: GrantFiled: April 15, 2019Date of Patent: September 1, 2020Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Publication number: 20200021430Abstract: An HSM cluster includes a set of hardware security modules that maintain a set of cryptographic keys that are synchronized across the HSM cluster. Individual applications running on client computer systems access the HSM cluster using HSM cluster clients running on the client computer systems. The HSMs are accessed via a set of HSM cluster servers that monitor the synchronization of the cryptographic keys. Synchronization of the HSMs is maintained by the HSM cluster clients. The HSM cluster clients replicate key-addition and key-deletion operations across the HSM cluster. When a new key is created by a particular HSM, a prefix associated with the particular HSM is added to the identifier associated with the new key to avoid key-namespace collisions. If the set of cryptographic keys becomes unsynchronized across the HSM cluster, applications may continue read-only cryptographic operations while the HSM cluster is resynchronized by the HSM cluster clients.Type: ApplicationFiled: September 23, 2019Publication date: January 16, 2020Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Patent number: 10439814Abstract: A resource generates and provides discovery configuration information to a network appliance. The network appliance validates the discovery configuration information, such as by validating a token within the discovery configuration information, then is configured using at least the discovery configuration information and passes at least a portion of the discovery configuration information to a network disjoint from that which connects the resource and the network appliance. This portion of discovery configuration information may include service advertisement information, routing information for traversing the network topology, and in some embodiments, the validation token.Type: GrantFiled: June 29, 2016Date of Patent: October 8, 2019Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel, Dalton James Nikitas
-
Publication number: 20190305951Abstract: A set of cryptographic keys are synchronized across a set of HSMs that are configured in an HSM cluster. The set of cryptographic keys is maintained in a synchronized state by HSM cluster clients running on client computer systems with corresponding client applications. If the HSM cluster becomes unsynchronized, an HSM cluster client attempts to lock the HSM cluster and reestablish synchronization of the cryptographic keys across the HSM cluster. HSMs within the HSM cluster are able to establish an encrypted communication channel to other HSMs without revealing the contents of their communications to their respective host computer systems. Individual HSMs in the HSM cluster may include features that assist the HSM cluster client in determining whether each HSM is up-to-date, identifying particular keys that are not up-to-date, and copying keys from one HSM to another HSM within the HSM cluster.Type: ApplicationFiled: May 31, 2019Publication date: October 3, 2019Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Patent number: 10425225Abstract: An HSM cluster includes a set of hardware security modules that maintain a set of cryptographic keys that are synchronized across the HSM cluster. Individual applications running on client computer systems access the HSM cluster using HSM cluster clients running on the client computer systems. The HSMs are accessed via a set of HSM cluster servers that monitor the synchronization of the cryptographic keys. Synchronization of the HSMs is maintained by the HSM cluster clients. The HSM cluster clients replicate key-addition and key-deletion operations across the HSM cluster. When a new key is created by a particular HSM, a prefix associated with the particular HSM is added to the identifier associated with the new key to avoid key-namespace collisions. If the set of cryptographic keys becomes unsynchronized across the HSM cluster, applications may continue read-only cryptographic operations while the HSM cluster is resynchronized by the HSM cluster clients.Type: GrantFiled: December 14, 2016Date of Patent: September 24, 2019Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Publication number: 20190238333Abstract: An HSM cluster includes a set of hardware security modules that maintain a set of cryptographic keys that are synchronized across the HSM cluster. Individual applications running on client computer systems access the HSM cluster using HSM duster clients running on the client computer systems. The HSMs are accessed via a set of HSM cluster servers that monitor the synchronization of the cryptographic keys. Synchronization of the HSMs is maintained by the HSM cluster clients. If the HSM cluster loses synchronization, an HSM cluster client resynchronizes the HSM cluster by acquiring a list of keys and key versions stored on each HSM, and generating an update map. Using the update map, the HSM client obtains, form various HSM in the HSM cluster, the latest versions of the out-of-date keys in an encrypted form. The HSM cluster client assembles and distributes updates to each HSM in the HSM cluster.Type: ApplicationFiled: April 15, 2019Publication date: August 1, 2019Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Patent number: 10313123Abstract: A set of cryptographic keys are synchronized across a set of HSMs that are configured in an HSM cluster. The set of cryptographic keys is maintained in a synchronized state by HSM cluster clients running on client computer systems with corresponding client applications. If the HSM cluster becomes unsynchronized, an HSM cluster client attempts to lock the HSM cluster and reestablish synchronization of the cryptographic keys across the HSM cluster. HSMs within the HSM cluster are able to establish an encrypted communication channel to other HSMs without revealing the contents of their communications to their respective host computer systems. Individual HSMs in the HSM cluster may include features that assist the HSM cluster client in determining whether each HSM is up-to-date, identifying particular keys that are not up-to-date, and copying keys from one HSM to another HSM within the HSM cluster.Type: GrantFiled: December 14, 2016Date of Patent: June 4, 2019Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Patent number: 10263778Abstract: An HSM cluster includes a set of hardware security modules that maintain a set of cryptographic keys that are synchronized across the HSM cluster. Individual applications running on client computer systems access the HSM cluster using HSM cluster clients running on the client computer systems. The HSMs are accessed via a set of HSM cluster servers that monitor the synchronization of the cryptographic keys. Synchronization of the HSMs is maintained by the HSM cluster clients. If the HSM cluster loses synchronization, an HSM cluster client resynchronizes the HSM cluster by acquiring a list of keys and key versions stored on each HSM, and generating an update map. Using the update map, the HSM client obtains, form various HSM in the HSM cluster, the latest versions of the out-of-date keys in an encrypted form. The HSM cluster client assembles and distributes updates to each HSM in the HSM cluster.Type: GrantFiled: December 14, 2016Date of Patent: April 16, 2019Assignee: Amazon Technologies, Inc.Inventors: Benjamin Philip Grubin, Benjamin Samuel
-
Publication number: 20090156687Abstract: Discovery and characterization of an apicomplexan Fab I gene and encoded enzyme and discovery of the triclosan as a lead compound, provide means to rationally design novel inhibitory compositions useful for prevention and treatment of apicomplexan related diseases.Type: ApplicationFiled: November 5, 2007Publication date: June 18, 2009Inventors: Rima McLeod, Michael Kirisits, Dennis Kyle, Douglas G. Mack, Wilbur Milhous, Stephen Muench, Ernest J. Mui, Sean Prigge, John Rafferty, David Rice, Craig W. Roberts, Benjamin Samuel
-
Publication number: 20050142113Abstract: This invention relates uses of components of plant-like metabolic pathways not including psbA or PPi phosphofructokinase and not generally operative in animals or encoded by the plastid DNA, to develop compositions that interfere with Apicomplexan growth and survival. Components of the pathways include enzymes, transit peptides and nucleotide sequences encoding the enzymes and peptides, or promoters of these nucleotide sequences to which antibodies, antisense molecules and other inhibitors are directed. Diagnostic and therapeutic reagents and vaccines are developed based on the components and their inhibitors.Type: ApplicationFiled: April 14, 2004Publication date: June 30, 2005Inventors: Rima McLeod, Craig Roberts, Fiona Roberts, Jennifer Johnson, Michael Kirisits, David Ferguson, Russell Lyons, Ernest Mui, Doug Mack, Benjamin Samuel, Piotr Gornicki, Ellen Zuther
-
Patent number: 6737237Abstract: This invention relates uses of Toxoplasma gondii chorismate synthase, a component components of plant-like metabolic pathways not including psbA or PPi phosphofructokinase and not generally operative in animals or encoded by the plastid DNA, in assays to develop compositions that interfere with Apicomplexan growth and survival. Components of the pathways include enzymes, transit peptides and nucleotide sequences encoding the enzymes and peptides, or promoters of these nucleotide sequences to which antibodies, antisense molecules and other inhibitors are directed. Diagnostic and therapeutic reagents and vaccines are developed based on T. gondii chorismate synthase and its inhibitors.Type: GrantFiled: August 3, 2000Date of Patent: May 18, 2004Assignee: Apicomplexan Therapeutics, LLCInventors: Rima L. McLeod, Craig W. Roberts, Fiona Roberts, Jennifer J. Johnson, Michael Kirisits, David Ferguson, Russell Lyons, Ernest Mui, Doug Mack, Benjamin Samuel, Piotr Gornicki, Ellen Zuther