US 11,997,222 B1
Certificate authority
Peter Zachary Bowen, Bainbridge Island, WA (US); Todd Lawrence Cignetti, Ashburn, VA (US); Preston Anthony Elder, III, Fairfax, VA (US); Brandonn Gorman, Seattle, WA (US); Ronald Andrew Hoskinson, Herndon, VA (US); Jonathan Kozolchyk, Seattle, WA (US); Kenneth Lawler, Seattle, WA (US); Marcel Andrew Levy, Seattle, WA (US); Kyle Benjamin Schultheiss, Centreville, VA (US); Sandeep Shantharaj, Herndon, VA (US); Param Sharma, Haymarket, VA (US); and Jose Maria Silveira Neto, Herndon, VA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Apr. 28, 2022, as Appl. No. 17/732,362.
Application 17/732,362 is a continuation of application No. 16/018,004, filed on Jun. 25, 2018, granted, now 11,323,274.
Claims priority of provisional application 62/652,240, filed on Apr. 3, 2018.
Int. Cl. H04L 9/32 (2006.01); H04L 9/08 (2006.01)
CPC H04L 9/3268 (2013.01) [H04L 9/0897 (2013.01); H04L 9/3247 (2013.01); H04L 9/3297 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
obtaining, via a webpage provided by a console service, a first request to create a private certificate authority, the first request including one or more properties of the private certificate authority;
creating the private certificate authority by allocating a set of computing resources;
causing the private certificate authority to be associated with a Hardware Security Module (HSM) based at least in part on the one or more properties, the HSM storing a private key that is usable by the private certificate authority to create or manage one or more digital certificates;
obtaining an indication of a permission that controls access to the private certificate authority;
obtaining, via the webpage provided by the console service, a second request to create a digital certificate from the private certificate authority, wherein the second request comprises a selection of the private certificate authority from a plurality of private certificate authorities that include two or more private certificate authorities that are chained to form a hierarchy; and
as a result of determining that the second request is associated with the permission, causing the private certificate authority to:
create the digital certificate; and
sign the digital certificate using the private key from the HSM.