Social networking behavior-based identity system

Patent metadata

Field	Value
Publication number	US-10122727-B2
Application number	US-201514882881-A
Country	US
Kind code	B2
Filing date	Oct 14, 2015
Priority date	Dec 11, 2012
Publication date	Nov 6, 2018
Grant date	Nov 6, 2018

Abstract

Disclosed are various embodiments for a social networking behavior-based identity system that employs social networking data that a user has elected to share through an opt-in procedure. First social networking data is stored in association with a user identity. An assertion of the user identity is received from a client after the first social networking data is stored. Second social networking data is received in response to receiving the assertion of the user identity. An identity confidence level as to whether the user identity belongs to a user at the client is generated based at least in part on a comparison of the second social networking data with the first social networking data.

First claim

Therefore, the following is claimed:

1. A system, comprising:
at least one computing device; and
at least one application executable in the at least one computing device, wherein when executed the at least one application causes the at least one computing device to at least:
store first social networking data in association with a user identity, the first social networking data identifying a first circle of friends;
receive an assertion of the user identity from a client computing device associated with a user after the first social networking data is stored;
receive second social networking data that describes a second circle of friends in response to receiving the assertion of the user identity;
determine a degree of overlap between the first circle of friends and the second circle of friends;
send a verification request to the at least one member of the first circle of friends, the verification request soliciting a verification relative to the assertion of the user identity; and
approve or deny access by the client computing device to a secured resource associated with the user identity based at least in part on whether the degree of overlap between the first circle of friends and the second circle of friends meets a predetermined threshold and whether a verification response to the verification request is received from the at least one member of the first circle of friends.

2. The system of claim 1 , wherein when executed the at least one application further causes the at least one computing device to at least:
cause a user interface to be rendered via the client computing device in response to receiving the assertion of the user identity, the user interface eliciting social network account information;
receive the social network account information from the client computing device; and
request the second social networking data using the social network account information.

3. The system of claim 1 , wherein when executed the at least one application further causes the at least one computing device to at least:
cause a user interface to be rendered via the client computing device in response to receiving the assertion of the user identity, the user interface eliciting the second social networking data; and
wherein the second social networking data is received from the client computing device.

4. The system of claim 1 , wherein when executed the at least one application further causes the at least one computing device to at least:
determine whether the user identity belongs to the user at the client computing device based at least in part on the degree of overlap between the first circle of friends and the second circle of friends; and
wherein access to the secured resource by the client computing device is approved when a determination that the user identity belongs to the user meets a threshold of confidence.

5. The system of claim 1 , wherein when executed the at least one application further causes the at least one computing device to at least:
determine whether the user identity does not belong to the user at the client computing device based at least in part on the degree of overlap between the first circle of friends and the second circle of friends; and
wherein access to the secured resource by the client computing device is denied when a determination that the user identity does not belong to the user meets a threshold of confidence.

6. The system of claim 1 , wherein access to the secured resource by the client computing device is approved or denied further based at least in part on a reputation of at least one member of the second circle of friends.

7. The system of claim 1 , wherein access to the secured resource by the client computing device is approved or denied further based at least in part on whether a single payment instrument has been used to pay for a first shipment to at least one member of the first circle of friends and a second shipment to at least one member of the second circle of friends.

8. The system of claim 1 , wherein the verification request presents geolocation data associated with the client computing device.

9. The system of claim 1 , wherein the verification request presents information provided by the user at the client computing device.

10. A method, comprising:
storing, via at least one of one or more computing devices, first social networking data in association with a user identity, the first social networking data identifying a first circle of friends;
receiving, via at least one of the one or more computing devices, an assertion of the user identity from a client computing device associated with a user after the first social networking data is stored;
receiving, via at least one of the one or more computing devices, second social networking data that describes a second circle of friends in response to receiving the assertion of the user identity;
determining, via at least one of the one or more computing devices, a degree of overlap between the first circle of friends and the second circle of friends;
sending, via at least one of the one or more computing devices, a verification request to the at least one member of the first circle of friends, the verification request soliciting a verification relative to the assertion of the user identity; and
approving or denying, via at least one of the one or more computing devices, access by the client computing device to a secured resource associated with the user identity based at least in part on whether the degree of overlap between the first circle of friends and the second circle of friends meets a predetermined threshold and whether a verification response to the verification request is received from the at least one member of the first circle of friends.

11. The method of claim 10 , further comprising:
causing, via at least one of the one or more computing devices, a user interface to be rendered via the client computing device in response to receiving the assertion of the user identity, the user interface eliciting social network account information;
receiving, via at least one of the one or more computing devices, the social network account information from the client computing device; and
requesting, via at least one of the one or more computing devices, the second social networking data using the social network account information.

12. The method of claim 10 , further comprising:
causing, via at least one of the one or more computing devices, a user interface to be rendered via the client computing device in response to receiving the assertion of the user identity, the user interface eliciting the second social networking data; and
wherein the second social networking data is received from the client computing device.

13. The method of claim 10 , further comprising:
determining, via at least one of the one or more computing devices, whether the user identity belongs to the user at the client computing device based at least in part on the degree of overlap between the first circle of friends and the second circle of friends; and
wherein access to the secured resource by the client computing device is approved when a determination that the user identity belongs to the user meets a threshold of confidence.

14. The method of claim 10 , further comprising:
determining, via at least one of the one or more computing devices, whether the user identity does not belong to the user at the client computing device based at least in part on the degree of overlap between the first circle of friends and the second circle of friends; and
wherein access to the secured resource by the client computing device is denied

Assignees

• Amazon Tech Inc

Inventors

• Johansson Jesper Mikael
• Stathakopoulos George Nikolaos
• Canavor Darren Ernest

Classifications

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title