Verification of credential reset

Patent metadata

Field	Value
Publication number	US-10484390-B2
Application number	US-201815959068-A
Country	US
Kind code	B2
Filing date	Apr 20, 2018
Priority date	Dec 15, 2015
Publication date	Nov 19, 2019
Grant date	Nov 19, 2019

Abstract

Methods and systems are provided for verifying reset of credentials for user accounts. The methods and systems receive a request to change a credential associated with a user account. The user account has account privileges associated with a network service. The methods and systems send a reset notification to a network application maintaining separate credentials associated with the user account to inform a valid owner or user of the account that a credential has been reset. The methods and systems manage availability of at least a restricted subset of the account privileges until a reset verification is received from a valid owner or user.

First claim

What is claimed is:

1. A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of execution by one or more processors of a computer system, cause the computer system to at least:
receive a request to change a credential associated with a user account, the user account having account privileges associated with a network service;
grant the request to change the credential associated with the user account;
restrict access to the account privileges;
cause a notification of the request to change the credential to be presented by a network application that is different from an application from which the request was issued; and
restore access to the account privileges as a result of a response to the notification having been received.

2. The non-transitory computer-readable storage medium of claim 1 , wherein the instructions further comprise instructions that cause the computer system to verify the response based at least in part on whether the response was received from the same device to which the notification was sent.

3. The non-transitory computer-readable storage medium of claim 2 , wherein, as a result of the response being received from the same device to which the notification was presented, the instructions cause the computer system to determine whether the same device is a trusted device.

4. The non-transitory computer-readable storage medium of claim 1 , wherein the instructions that cause the computer system to cause the notification to be presented further cause the computer system to select the network application from a set of trusted access points.

5. The non-transitory computer-readable storage medium of claim 4 , wherein the instructions further cause the computer system to remove a trusted access point from the set of trusted access points as a result of non-use of the trusted access point.

6. The non-transitory computer-readable storage medium of claim 1 , wherein, as a result of the response being received from a different device to which the notification was presented, the instructions cause the computer system to restore a privilege.

7. A computer-implemented method, comprising:
receiving a request to change a credential associated with a user account, the user account having account privileges associated with a network service, the request associated with a first network application operating on one or more computing devices;
causing a notification of the request to change the credential to be presented by a second network application operating on the one or more computing devices; and
managing availability of at least a restricted subset of the account privileges based on a reset verification received in response to the notification from the second network application.

8. The method of claim 7 , further comprising selecting the second network application from a plurality of trusted access points.

9. The method of claim 7 , wherein causing the notification to be presented is performed to cause the notification to be presented on a different device from which the request to change the credential was received.

10. The method of claim 7 , wherein managing availability of at least the restricted subset of the account privileges comprises restoring the at least the restricted subset of the account privileges as a result of the reset verification being verified.

11. The method of claim 7 , further comprising managing a set of trusted access points, comprising a trusted access point corresponding to the second network application, according to results of monitoring usage of at least a subset of the set of trusted access points.

12. The method of claim 7 , further comprising further restricting privileges of the user account as a result of the reset verification indicating denial of the request to change the credential.

13. The method of claim 7 , wherein managing availability of at least a restricted subset of the account privileges comprises:
granting access, between the notification and the reset verification, to first account privileges; and
denying access, between the notification and the reset verification, to second account privileges.

14. A system, comprising:
at least one processor; and
a memory coupled to the at least one processor, wherein the memory stores program instructions, wherein the program instructions are executable by the at least one processor to:
grant a request to change a credential associated with a user account the user account having account privileges associated with a network service;
restrict access to the account privileges;
cause a notification of the request to change the credential to be presented by a network application associated with the user account, the network application being a different application from which the request was issued; and
restrict access to the account privileges until receipt of a reset verification, in response to the notification, from the network application.

15. The system of claim 14 , wherein causing the notification of the request to change the credential to be presented by the network application comprises selecting the network application based at least in part on a device on which the network application runs.

16. The system of claim 15 , wherein the device is different from another device from which the request was received.

17. The system of claim 14 , wherein the notification comprises a challenge to which a response can be provided to cause the reset verification to be issued.

18. The system of claim 14 , wherein the program instructions are further executable to restore a privilege as a result of the reset verification indicating approval of changing the credential.

19. The system of claim 14 , wherein the program instructions are further executable to further restrict privileges of the user account as a result of failure to receive a reset notification indicating approval of changing the credential.

20. The system of claim 14 , wherein the program instructions are further executable to:
grant access, between the notification and the reset verification, to unrestricted account privileges that include at least one of viewing preexisting digital content stored in connection with the user account or performing one-click transactions; and
deny access, between the notification and the reset verification, to restricted account privileges.

Assignees

• Amazon Tech Inc

Inventors

• Johansson Jesper Mikael
• Funderburk Max Harwell
• Khurrum Mian Zainulabadin
• Karukurichi Subramanian Kripa Shankar

Classifications

• G06F21/31

  User authentication · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L67/22

  Electricity · mapped topic

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title