Patent ID: 11888994
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computer-implemented method to determine a public key infrastructure (PKI) hierarchy, comprising:
obtaining, from a client device, a plurality of infrastructure information associated with a network system for which the PKI hierarchy is to be deployed;
processing, by a PKI creation service, a plurality of stored PKI information and the plurality of infrastructure information;
determining, based at least in part on the processing of the plurality of stored PKI information and the plurality of infrastructure information, a PKI template defining a first configuration of a first PKI hierarchy, wherein the first configuration specifies at least a first certificate authority (CA) hierarchy;
generating, by the PKI creation service, a first configurable representation of the first configuration of the first PKI hierarchy defined by the PKI template;
sending, for presentation on the client device, the first configurable representation of the first configuration of the first PKI hierarchy;
obtaining, from the client device, an interaction with the first configurable representation of the first PKI hierarchy indicating a modification to the first configuration of the first PKI hierarchy;
generating, by the PKI creation service in response to the interaction, an updated PKI template including the modification to the first configuration of the first PKI hierarchy, the updated PKI template defining a second configuration of a second PKI hierarchy, wherein the second configuration specifies at least a second CA hierarchy;
generating, by the PKI creation service, a second configurable representation of the second configuration of the second PKI hierarchy;
sending, for presentation on the client device, the second configurable representation of the second configuration of the second PKI hierarchy;
obtaining, from the client device, an indication of an acceptance of the second configuration of the second PKI hierarchy; and
providing, by the PKI creation service, the second PKI hierarchy as the PKI hierarchy.