IP Library Granted Patent US 10,693,885
Granted Patent B2
US 10,693,885 · App. 16/150,852 · Granted Jun 23, 2020

Social networking behavior-based identity system

Inventors: Jesper Mikael Johansson (Redmond, WA); George Nikolaos Stathakopoulos (Seattle, WA); Darren Ernest Canavor (Redmond, WA)
Assignee: AMAZON TECHNOLOGIES, INC.
H04L63/102G06F21/6245H04L63/08H04L63/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,693,885
App. No.
16/150,852
Granted
Jun 23, 2020
Kind
B2
Abstract

Disclosed are various embodiments for a social networking behavior-based identity system that employs social networking data that a user has elected to share through an opt-in procedure. An assertion of a user identity is received from a client. It is determined whether the assertion of the user identity specifies a correct security credential. Social networking data identifying a circle of friends is received. It is determined whether the user identity belongs to a user at the client based at least in part on a reputation of one or more members of the circle of friends and whether the assertion of the user identity specifies the correct security credential.

Claims (49)

1. A method, comprising:

receiving, via at least one of one or more computing devices, an assertion of a user identity from a client;

determining, via at least one of the one or more computing devices, whether the assertion of the user identity specifies a correct security credential associated with the user identity;

receiving, via at least one of the one or more computing devices, social networking data in response to receiving the assertion of the user identity, the social networking data identifying a circle of friends;

determining, via at least one of the one or more computing devices, whether the user identity belongs to a user at the client based at least in part on a reputation of at least one member of the circle of friends and whether the assertion of the user identity specifies the correct security credential associated with the user identity; and

determining, via at least one of the one or more computing devices, the reputation of the at least one member of the circle of friends based at least in part on whether the at least one member of the circle of friends is determined to be in a country or region associated with fraud.

2. The method of claim 1 , further comprising:

causing, via at least one of the one or more computing devices, a user interface to be rendered via the client in response to receiving the assertion of the user identity, the user interface eliciting social network account information;

receiving, via at least one of the one or more computing devices, the social network account information from the client; and

requesting, via at least one of the one or more computing devices, the social networking data using the social network account information.

3. The method of claim 1 , further comprising:

causing, via at least one of the one or more computing devices, a user interface to be rendered via the client in response to receiving the assertion of the user identity, the user interface eliciting the social networking data; and

wherein the social networking data is received from the client.

4. The method of claim 1 , further comprising:

obtaining, via at least one of the one or more computing devices, a security credential reset request from the client for the user identity;

sending, via at least one of the one or more computing devices, a reset token to an email address associated with the user identity; and

wherein the correct security credential corresponds to the reset token.

5. The method of claim 1 , further comprising approving, via at least one of the one or more computing devices, access by the client to a secured resource associated with the user identity in response to a determination that the user identity belongs to the user.

6. The method of claim 1 , further comprising denying, via at least one of the one or more computing devices, access by the client to a secured resource associated with the user identity in response to a determination that the user identity does not belong to the user.

7. The method of claim 1 , further comprising determining, via at least one of the one or more computing devices, the reputation of the at least one member of the circle of friends based at least in part on at least one of: a membership status, an account longevity, an order history, a number of endorsements by other users, or ratings of item reviews authored by the at least one member of the circle of friends.

8. A system, comprising:

at least one computing device; and

at least one application executable in the at least one computing device, wherein when executed the at least one application causes the at least one computing device to at least:

receive an assertion of a user identity from a client;

determine whether the assertion of the user identity specifies a correct security credential associated with the user identity;

receive social networking data identifying a circle of friends;

determine whether the user identity belongs to a user at the client based at least in part on a reputation of at least one member of the circle of friends and whether the assertion of the user identity specifies the correct security credential associated with the user identity; and

determine the reputation of the at least one member of the circle of friends based at least in part on ratings of item reviews authored by the at least one member of the circle of friends, wherein the ratings are associated with the item reviews being rated as helpful.

9. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least:

generate a user interface rendered via the client in response to receiving the assertion of the user identity, the user interface eliciting social network account information;

receive the social network account information from the client; and

request the social networking data using the social network account information.

10. The system of claim 8 , wherein the social networking data is received from the client.

11. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least:

obtain a security credential reset request from the client for the user identity;

send a reset token to an email address associated with the user identity; and

wherein the correct security credential corresponds to the reset token.

12. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least approve access by the client to a secured resource associated with the user identity in response to a determination that the user identity belongs to the user.

13. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least deny access by the client to a secured resource associated with the user identity in response to a determination that the user identity does not belong to the user.

14. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least determine the reputation of the at least one member of the circle of friends based at least in part on a number of endorsements of the at least one member of the circle of friends by other users.

15. A non-transitory computer-readable medium embodying a program executable in at least one computing device, wherein when executed the program causes the at least one computing device to at least:

receive an assertion of a user identity from a client;

determine that the assertion of the user identity specifies a correct security credential associated with the user identity;

receive social networking data from the client indicating a circle of friends;

determine a reputation of at least one member of the circle of friends based at least in part on ratings of item reviews authored by the at least one member of the circle of friends, wherein the ratings are associated with the item reviews being rated as helpful; and

determine whether the user identity belongs to a user at the client based at least in part on the reputation.

16. The non-transitory computer-readable medium of claim 15 , wherein the social networking data includes social network account information for requesting data describing the circle of friends.

17. The non-transitory computer-readable medium of claim 15 , wherein the assertion of the user identity corresponds to a security credential reset token.

18. The non-transitory computer-readable medium of claim 15 , wherein the reputation is based at least in part on an account longevity associated with the at least one member of the circle of friends.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 3, 2018
From: JOHANSSON, JESPER MIKAEL; STATHAKOPOULOS, GEORGE NIKOLAOS; CANAVOR, DARREN ERNEST
To: AMAZON TECHNOLOGIES, INC.
Reel/Frame 047657/0360 →
Continuity (3)
Division 14882881 · Oct 14, 2015
Continuation 13711259 · Dec 11, 2012
Related Publication 20190036939A1 · Jan 31, 2019