Trust metrics on shared computers
Particular embodiments of a verification authority associated with a web service may receive a request to access the web service. The request may comprise data uniquely identifying a client device. The request may have been received from a shared device, wherein the shared device is configured for use by a plurality of users. The verification authority may access a social graph of a user associated with the client device to determine whether one or more social-networking users have previously accessed the shared device. The verification authority may then transmit to the client device information indicating which of the social-networking users have previously accessed the shared device.
1. A method comprising:
by a verification authority associated with a virtualized computing resource, receiving a request to access the virtualized computing resource, wherein the request comprises authentication data uniquely identifying a user associated with a client device, wherein the request was generated by the client device;
by the verification authority, accessing a social graph of the user associated with the client device to determine whether one or more social-networking users have previously accessed a shared device, and wherein the shared device is configured for use by a plurality of social-networking users;
by the verification authority, verifying the user associated with the client device is allowed to access the virtualized computing resource based on the authentication data received from the client device and information from the social graph indicating at least one or more of the social-networking users have previously accessed the shared device; and
by the verification authority, upon verifying the user associated with the client device is allowed to access the virtualized computing resource, sending a digital certification to the client device allowing the client device access to the virtualized computing resource.
2. The method of claim 1 , further comprising:
determining whether an account on a social-networking system for each of the social-networking users had been compromised subsequent to accessing the shared device; and
transmitting, to the client device for display, a trust-based metric indicating a number of the social-networking users whose account was compromised subsequent to accessing the shared device.
3. The method of claim 2 , wherein the trust-based metric comprises data from an extended social graph of the user associated with the client device, wherein the extended social graph comprises users not directly connected to the user associated with the client device.
4. The method of claim 2 , further comprising:
determining whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.
5. The method of claim 1 , wherein the information indicating the social-networking users that accessed the shared device comprises an image of each of the social-networking users that previously accessed the shared device.
6. The method of claim 1 , wherein the shared device is registered with the verification authority.
7. The method of claim 1 , wherein the request to access the virtualized computing resource further comprises a digital credential uniquely identifying the client device.
8. The method of claim 1 , wherein the request to access the virtualized computing resource comprises a request to access the virtualized computing resource by transmitting data through the shared device.
9. The method of claim 1 , further comprising establishing the verification authority associated with the virtualized computing resource.
10. The method of claim 1 , wherein the virtualized computing resource comprises an allocation of usage of one or more computers or network access points.
11. One or more computer-readable non-transitory storage media embodying software that is operable when executed by one or more processors to:
establish a verification authority associated with a virtualized computing resource;
by a verification authority associated with a virtualized computing resource, receiving a request to access the virtualized computing resource, wherein the request comprises authentication data uniquely identifying a user associated with a client device, wherein the request was generated by the client device;
by the verification authority, accessing a social graph of the user associated with the client device to determine whether one or more social-networking users have previously accessed a shared device, and wherein the shared device is configured for use by a plurality of social-networking users;
by the verification authority, verifying the user associated with the client device is allowed to access the virtualized computing resource based on the authentication data received from the client device and information from the social graph indicating at least one or more of the social-networking users have previously accessed the shared device; and
by the verification authority, upon verifying the user associated with the client device is allowed to access the virtualized computing resource, sending a digital certification to the client device allowing the client device access to the virtualized computing resource.
12. The media of claim 11 , further comprising software that is operable when executed by the one or more processors to:
determine whether an account on a social-networking system for each of the social-networking users had been compromised subsequent to accessing the shared device; and
transmit, to the client device for display, a trust-based metric indicating a number of the social-networking users whose account was compromised subsequent to accessing the shared device.
13. The media of claim 12 , wherein the trust-based metric comprises data from an extended social graph of the user associated with the client device, wherein the extended social graph comprises users not directly connected to the user associated with the client device.
14. The media of claim 12 , further comprising software that is operable when executed by the one or more processors to:
determine whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.
15. The media of claim 11 , wherein the information indicating the social-networking users that accessed the shared device comprises an image of each of the social-networking users that previously accessed the shared device.
16. The media of claim 11 , wherein the shared device is registered with the verification authority.
17. The media of claim 11 , wherein request to access the virtualized computing resource further comprises a digital credential uniquely identifying the client device.
18. The media of claim 11 , wherein the request to access the virtualized computing resource comprises a request to access the virtualized computing resource by transmitting data through the shared device.
19. A system of a verification authority, comprising: one or more processors; and a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to:
receive a request to access the virtualized computing resource, wherein the request comprises authentication data uniquely identifying a user associated with a client device, wherein the request was generated by the client device;
access a social graph of the user associated with the client device to determine whether one or more social-networking users have previously accessed a shared device, and wherein the shared device is configured for use by a plurality of social-networking users;
verify the user associated with the client device is allowed to access the virtualized computing resource based on the authentication data received from the client device and information from the social graph indicating at least one or more of the social-networking users have previously accessed the shared device; and
send a digital certification to the client device allowing the client device access to the virtualized computing resource.
20. The system of claim 19 , the processors being further operable when executing the instructions to:
determine whether an account on a social-networking system for each of the social-networking users had been compromised subsequent to accessing the shared device; and
display on the display a trust-based metric indicating a number of the social-networking users whose account was compromised subsequent to accessing the shared device.
21. The system of claim 20 , wherein the trust-based metric comprises data from an extended social graph of the user associated with the client device, wherein the extended social graph comprises users not directly connected to the user associated with the client device.