Supporting a fixed transaction rate with a variably-backed logical cryptographic key

摘要

A system and method for receiving requests for performing cryptographic operations with a virtual key having a plurality of actual keys associated with the virtual key, determining which actual key of the plurality of actual keys to use for the cryptographic operation, performing the cryptographic operation using the actual key, and providing the result of performing the cryptographic operation.

主权项

1. A computer-implemented method, comprising:
under the control of one or more computer systems that execute instructions,
providing an application programming interface through which requests may be submitted to cause performance of cryptographic operations using a cryptographic key associated with a key identifier;determining an individual cryptographic key usage rate limit;receiving an application pro ramming interface request specifying a key identifier usage rate associated with the key identifier;determining, based at least in part on the individual cryptographic key usage rate limit and the key identifier usage rate, a minimum number of cryptographic keys for a set of cryptographic keys associated with the key identifier such that, as the cryptographic operations are distributed among individual cryptographic keys of the set as part of processing requests associated with the key identifier, usage rates corresponding to each individual cryptographic key of the set are at or below the individual cryptographic key usage rate limit; andcausing the set of cryptographic keys to have at least the minimum number of keys determined.