US 12,381,884 B1
Time-based credential validity period reduction
Blake P Hess, Lake Forest Park, WA (US); Marcel Andrew Levy, Seattle, WA (US); and Chandan Kundapur, Portland, OR (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Sep. 30, 2022, as Appl. No. 17/937,394.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/108 (2013.01) [H04L 63/102 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more storage devices to implement a credential management repository to store validity time period information or replacement time information for a plurality of credentials; and
one or more processors and one or more memories to store computer-executable instructions that, if executed, cause the one or more processors to implement a credential management system to, for respective credential holders of a plurality of credential holders:
determine to renew a current version of a time-based security credential for the respective credential holder;
responsive to the determination to renew, determine a validity time period length for a renewed version of the time-based security credential based on:
a validity time period length for the current version of the time-based security credential, and
one or more renewal completion metrics for the respective credential holder, wherein the one or more renewal completion metrics measure one or more characteristics of one or more completions of one or more renewals of one or more time-based security credentials;
obtain on behalf of the respective credential holder, from a credential authority, the renewed version of the time-based security credential having the determined validity time period length; and
return the renewed version of the time-based security credential to the respective credential holder, wherein receipt of the renewed version of the time-based security credential initiates performance of a credential deployment process at the respective credential holder to update use of the current version of the time-based security credential to the renewed version of the time-based security credential.