Patent ID: 11888980
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 0:
1. A computer-implemented method, comprising:
receiving a first request for a first cryptographic operation to be performed on behalf of a first account of a service provider;
forwarding information for the first request to an allocated security module instance of a plurality of security module instances operating on a hardware security module;
loading a first key bundle including a customer certificate and a public module key into the allocated security module instance, the first key bundle encrypted using a security key, the security key being a key installed onto the hardware security module by a third-party other than the service provider;
decrypting, at the allocated security module instance, the first key bundle using the security key;
verifying, using the first key bundle, an identity of the first account associated with the first request;
performing the first cryptographic operation on behalf of the first account in the allocated security module instance; and
deleting the first key bundle from the allocated security module instance, wherein one or more subsequent cryptographic operations for at least one other account of the service provider are able to be performed on the allocated security module instance.