US 11,777,911 B1
Presigned URLs and customer keying
Gregory Branchek Roth, Seattle, WA (US); and Eric Jason Brandwine, Haymarket, VA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Sep. 15, 2021, as Appl. No. 17/476,300.
Application 14/992,599 is a division of application No. 14/037,282, filed on Sep. 25, 2013, granted, now 9,237,019, issued on Jan. 12, 2016.
Application 17/476,300 is a continuation of application No. 16/171,227, filed on Oct. 25, 2018, granted, now 11,146,538.
Application 16/171,227 is a continuation of application No. 15/786,322, filed on Oct. 17, 2017, granted, now 10,412,059, issued on Sep. 10, 2019.
Application 15/786,322 is a continuation of application No. 14/992,599, filed on Jan. 11, 2016, granted, now 9,819,654, issued on Nov. 14, 2017.
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 9/32 (2006.01); H04L 67/02 (2022.01)
CPC H04L 63/0428 (2013.01) [H04L 9/321 (2013.01); H04L 9/3247 (2013.01); H04L 63/10 (2013.01); H04L 63/102 (2013.01); H04L 63/108 (2013.01); H04L 63/123 (2013.01); H04L 67/02 (2013.01); H04L 63/168 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A non-transitory computer-readable storage medium storing instructions that are executable by one or more processors of a computer system to cause the computer system to:
obtain, from a customer of a service provider, a signed uniform resource locator (URL) to give time-limited read or write access to a resource of the service provider, the signed URL signed by a first cryptographic key of the customer to generate a signature of the URL, the signed URL comprising information indicating an operation to be performed, the operation comprising storing or retrieving data, expiration information to indicate when the signed URL expires to no longer be usable for submission to access the resource, and a path to the resource, wherein the first cryptographic key is a private key;
add an unsigned portion to the signed URL, the unsigned portion comprising a second encryption key; and
use the signed URL comprising the unsigned portion to access the resource.