DELAYED DATA ACCESS

摘要

A system uses information submitted in connection with a request to determine if and how to process the request. The information may be electronically signed by a requestor using a key such that the system processing the request can verify that the requestor has the key and that the information is authentic. The information may include information that identifies a holder of a key needed for processing the request, where the holder of the key can be the system or another, possibly third party, system. Requests to decrypt data may be processed to ensure that a certain amount of time passes before access to the decrypted data is provided, thereby providing an opportunity to cancel such requests and/or otherwise mitigate potential security breaches.

主权项

1. A computer-implemented method, comprising:
under the control of one or more computer systems configured with executable instructions,
receiving, to a service of a computing resource provider, a request to decrypt ciphertext using a key specified by the request, the request satisfying a set of one or more conditions sufficient for the request to be fulfilled;at a time during which the request is pending, transmitting one or more notifications of the request to one or more computer systems of a customer corresponding to the key;enabling the request to be aborted during pendency of the request;decrypting the ciphertext to obtain plaintext; andproviding the plaintext as a result of at least a predetermined amount of time having passed and the request not having been aborted.