Abstract: Data is encoded to be incrementally authenticable. A plaintext is used to generate a ciphertext that comprises a plurality of authentication tags. Proper subsets of the authentication tags are usable to authenticate respective portions of plaintexts obtained from the ciphertext. Portions of the plaintext can be obtained and authenticated without decrypting the complete ciphertext.

Abstract: Disclosed is secure decryption and business rule validation of encrypted confidential data within a hardware security module (HSM). The validation may include the use of a Bloom filter stored and executing within the HSM. The return order of encrypted data within the HSM as well as requests for external data relating to validation may be randomized to further harden against correlation attacks.

Abstract: Technology for provision and use of local metrics in a multi-tenant service provider environment is provided. In one example, a method may include receiving service provider environment metrics from a computing instance and receiving local metrics from a local machine in a multi-tenant service provider environment. The local metrics may be combined with the service provider environment metrics and provided for display together.

Abstract: A method of using a hardware security module and an adjunct application programming interface to harden tokenization security and encryption key rotation is disclosed. In various embodiments, the method comprises receiving encrypted data at a processor of a computer system, decrypting the encrypted data to cleartext in the processor, and issuing a unique token associated with the data.

Abstract: A technique for generating a web site in accordance with received data entry by: determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data. The web site data includes dynamic content data from an external data source, and the data entry may include a designation of such an external data source.

Abstract: Techniques are described for migrating data from a first table to a second table while transforming at least one characteristic of the data. Characteristics transformed may include one or more of an encryption key or method, a table schema, a data structure, or a storage infrastructure. Migration may be performed in two or more phases. A first phase may migrate and transform a majority of the data, such as data that is older than a certain threshold age. A second phase may migrate and transform the remaining, newer data. A status table may indicate which tables are active and are to be written to and read from during data writing and data consuming processes. Moreover, embodiments support data replication across multiple regions.

Abstract: Incremented authenticated encryption involves dividing a data stream to be encrypted into multiple data segments and encrypting each of the data segments. For each encrypted data segment, an authorization tag is generated. Each segment's authorization tag may be based on the corresponding segment's position in the sequence of data segments within the data stream. A segment authorization tag may be generated based on an segment initialization vector that may be incremented with each segment authorization tag. Each data segment may be encrypted independently of the others. Similarly, each encrypted data segment may be decrypted and authenticated independently of the others. Additionally, a final authentication tag may be generated. The final authentication tag may be used to authenticate all the data segments of the data stream as a whole.

Abstract: Disclosed is secure decryption and business rule validation of encrypted confidential data within a hardware security module (HSM). The validation may include the use of a Bloom filter stored and executing within the HSM. The return order of encrypted data within the HSM as well as requests for external data relating to validation may be randomized to further harden against correlation attacks.

Abstract: Disclosed is secure decryption and business rule validation of encrypted confidential data within a hardware security module (HSM). The validation may include the use of a Bloom filter stored and executing within the HSM. The return order of encrypted data within the HSM as well as requests for external data relating to validation may be randomized to further harden against correlation attacks.

Abstract: A technique for generating a web site in accordance with received data entry by: determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data. The web site data includes dynamic content data from an external data source, and the data entry may include a designation of such an external data source.

Abstract: A technique for generating links to a web page by: presenting a web page; defining one or more other web pages to include a link to the presented web page; and placing a link on at least one of the other web pages linking to the presented web page. A prompt for an acceptance of the link may be presented to the other web pages whereby a link is not added until the corresponding acceptance of the link is received.

Abstract: A method of using a hardware security module and an adjunct application programming interface to harden tokenization security and encryption key rotation is disclosed. In various embodiments, the method comprises receiving encrypted data at a processor of a computer system, decrypting the encrypted data to cleartext in the processor, and issuing a unique token associated with the data.

Abstract: A technique for generating links to a web page by: presenting a web page; defining one or more other web pages to include a link to the presented web page; and placing a link on at least one of the other web pages linking to the presented web page. A prompt for an acceptance of the link may be presented to the other web pages whereby a link is not added until the corresponding acceptance of the link is received.

Abstract: A technique for generating a web site in accordance with received data entry by: determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data.

Abstract: A technique for generating a web site in accordance with received data entry by: determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data.

Abstract: A technique for generating a web site in accordance with received data entry by: determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data. The web site data includes dynamic content data from an external data source, and the data entry may include a designation of such an external data source.

Abstract: A technique for generating a web site in accordance with received data entry by: presenting a prompt for data entry; receiving a data entry in response to the prompt; presenting at least one additional prompt for data entry that is determined at least in part based upon the received data entry; receiving an additional data entry in response to each of the at least one additional prompts; determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data.

Abstract: A technique for generating links to a web page by: presenting a web page; defining one or more other web pages to include a link to the presented web page; and placing a link on at least one of the other web pages linking to the presented web page. A prompt for an acceptance of the link may be presented to the other web pages whereby a link is not added until the corresponding acceptance of the link is received.

Abstract: A technique for storing web site data in a plurality of storages, each for storing data to be used for defining a range of one of a plurality of web site dimensions, and storing a plurality of web site templates in a web site template storage, each of the web site templates including a set of characteristics for one or more of the plurality of web site dimensions, all of the characteristics for each of the web site dimensions at least in part defining a subset of the web site data stored in the storage corresponding to the dimension.

Abstract: A technique for generating a web site in accordance with received data entry by: determining at least one characteristic of at least one web site dimension of the web site based on the data entry; generating a multi-dimensional description of the web site based on the determined characteristics; retrieving web site data according to the generated multi-dimensional description of the web site; and generating the web site based upon the generated multi-dimensional description of the web site and the retrieved web site data.