Social networking behavior-based identity system

Patent metadata

Field	Value
Publication number	US-10693885-B2
Application number	US-201816150852-A
Country	US
Kind code	B2
Filing date	Oct 3, 2018
Priority date	Dec 11, 2012
Publication date	Jun 23, 2020
Grant date	Jun 23, 2020

Abstract

Disclosed are various embodiments for a social networking behavior-based identity system that employs social networking data that a user has elected to share through an opt-in procedure. An assertion of a user identity is received from a client. It is determined whether the assertion of the user identity specifies a correct security credential. Social networking data identifying a circle of friends is received. It is determined whether the user identity belongs to a user at the client based at least in part on a reputation of one or more members of the circle of friends and whether the assertion of the user identity specifies the correct security credential.

First claim

Therefore, the following is claimed:

1. A method, comprising:
receiving, via at least one of one or more computing devices, an assertion of a user identity from a client;
determining, via at least one of the one or more computing devices, whether the assertion of the user identity specifies a correct security credential associated with the user identity;
receiving, via at least one of the one or more computing devices, social networking data in response to receiving the assertion of the user identity, the social networking data identifying a circle of friends;
determining, via at least one of the one or more computing devices, whether the user identity belongs to a user at the client based at least in part on a reputation of at least one member of the circle of friends and whether the assertion of the user identity specifies the correct security credential associated with the user identity; and
determining, via at least one of the one or more computing devices, the reputation of the at least one member of the circle of friends based at least in part on whether the at least one member of the circle of friends is determined to be in a country or region associated with fraud.

2. The method of claim 1 , further comprising:
causing, via at least one of the one or more computing devices, a user interface to be rendered via the client in response to receiving the assertion of the user identity, the user interface eliciting social network account information;
receiving, via at least one of the one or more computing devices, the social network account information from the client; and
requesting, via at least one of the one or more computing devices, the social networking data using the social network account information.

3. The method of claim 1 , further comprising:
causing, via at least one of the one or more computing devices, a user interface to be rendered via the client in response to receiving the assertion of the user identity, the user interface eliciting the social networking data; and
wherein the social networking data is received from the client.

4. The method of claim 1 , further comprising:
obtaining, via at least one of the one or more computing devices, a security credential reset request from the client for the user identity;
sending, via at least one of the one or more computing devices, a reset token to an email address associated with the user identity; and
wherein the correct security credential corresponds to the reset token.

5. The method of claim 1 , further comprising approving, via at least one of the one or more computing devices, access by the client to a secured resource associated with the user identity in response to a determination that the user identity belongs to the user.

6. The method of claim 1 , further comprising denying, via at least one of the one or more computing devices, access by the client to a secured resource associated with the user identity in response to a determination that the user identity does not belong to the user.

7. The method of claim 1 , further comprising determining, via at least one of the one or more computing devices, the reputation of the at least one member of the circle of friends based at least in part on at least one of: a membership status, an account longevity, an order history, a number of endorsements by other users, or ratings of item reviews authored by the at least one member of the circle of friends.

8. A system, comprising:
at least one computing device; and
at least one application executable in the at least one computing device, wherein when executed the at least one application causes the at least one computing device to at least:
receive an assertion of a user identity from a client;
determine whether the assertion of the user identity specifies a correct security credential associated with the user identity;
receive social networking data identifying a circle of friends;
determine whether the user identity belongs to a user at the client based at least in part on a reputation of at least one member of the circle of friends and whether the assertion of the user identity specifies the correct security credential associated with the user identity; and
determine the reputation of the at least one member of the circle of friends based at least in part on ratings of item reviews authored by the at least one member of the circle of friends, wherein the ratings are associated with the item reviews being rated as helpful.

9. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least:
generate a user interface rendered via the client in response to receiving the assertion of the user identity, the user interface eliciting social network account information;
receive the social network account information from the client; and
request the social networking data using the social network account information.

10. The system of claim 8 , wherein the social networking data is received from the client.

11. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least:
obtain a security credential reset request from the client for the user identity;
send a reset token to an email address associated with the user identity; and
wherein the correct security credential corresponds to the reset token.

12. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least approve access by the client to a secured resource associated with the user identity in response to a determination that the user identity belongs to the user.

13. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least deny access by the client to a secured resource associated with the user identity in response to a determination that the user identity does not belong to the user.

14. The system of claim 8 , wherein when executed the at least one application further causes the at least one computing device to at least determine the reputation of the at least one member of the circle of friends based at least in part on a number of endorsements of the at least one member of the circle of friends by other users.

15. A non-transitory computer-readable medium embodying a program executable in at least one computing device, wherein when executed the program causes the at least one computing device to at least:
receive an assertion of a user identity from a client;
determine that the assertion of the user identity specifies a correct security credential associated with the user identity;
receive social networking data from the client indicating a circle of friends;
determine a reputation of at least one member of the circle of friends based at least in part on ratings of item reviews authored by the at least one member of the circle of friends, wherein the ratings are associated with the item reviews being rated as helpful; and
determine whether the user identity belongs to a user at the client based at least in part on the reputation.

16. The non-transitory computer-readable medium of claim 15 , wherein the social networking data includes social network account information for requesting data describing the circle of friends.

17. The non-transitory computer-readable medium of claim 15 , wherein the assertion of the user identity corresponds to a security credential reset token.

18. The non-transitory computer-r

Assignees

• Amazon Tech Inc

Inventors

• Johansson Jesper Mikael
• Stathakopoulos George Nikolaos
• Canavor Darren Ernest

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title