Credential synchronization management

Patent metadata

Field	Value
Publication number	US-10878080-B2
Application number	US-201715666778-A
Country	US
Kind code	B2
Filing date	Aug 2, 2017
Priority date	Dec 22, 2014
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

Disclosed are various embodiments for replicating authentication data between computing devices. A computing device detects a change to a user account made by a first client device associated with the user account. The computing device then determines that a second client device associated with the user account comprises locally stored authentication data that fails to reflect the change. The computing device then sends an update to the second client device.

First claim

Therefore, the following is claimed:

1. A system, comprising:
a first computing device comprising a processor and a memory; and
machine readable instructions stored in the memory that, when executed by the processor, cause the first computing device to at least:
receive an account initialization message from a second computing device, the account initialization message comprising a list of authentication states and an account identifier;
initialize a user account based at least in part on the list of authentication states and the account identifier received from the second computing device, the user account comprising a flag that indicates whether the user account has been changed;
detect a change to the user account made by the second computing device associated with the user account based at least in part on periodically checking the flag to determine whether the user account has been changed, the change comprising a modification of the list of authentication states stored in conjunction with the user account;
determine that the change to the user account made by the second computing device is valid;
determine that a third computing device associated with the user account comprises a locally stored list of authentication states that fails to reflect the modification of the list of authentication states; and
send an update to the third computing device, the update comprising the modification of the list of authentication states stored in conjunction with the user account.

2. The system of claim 1 , wherein the machine readable instructions that cause the first computing device to determine that the third computing device comprises the locally stored list of authentication states that fails to reflect the modification of the list of authentication states further cause the first computing device to:
send a request to the third computing device for a copy of the locally stored list of authentication states; and
compare the copy of the locally stored list of authentication states to the list of authentication states in response to receipt of the copy of the locally stored list of authentication states from the third computing device.

3. The system of claim 1 , wherein the machine readable instructions that cause the first computing device to determine that the third computing device comprises the locally stored list of authentication states that fails to reflect the modification of the list of authentication states cause the first computing device to determine that the third computing device comprises the locally stored list of authentication states that fails to reflect the modification of the list of authentication states in response to a network connection from the third computing device.

4. The system of claim 1 , wherein the list of authentication states comprises at least one of an authentication token and a cookie.

5. The system of claim 1 , wherein the machine readable instructions further cause the first computing device to at least validate the account initialization message.

6. The system of claim 1 , wherein the machine readable instructions that cause the first computing device to determine that the change to the user account made by the second computing device is valid further cause the first computing device to at least determine that the second computing device is included in a list of authorized devices associated with the user account.

7. A system, comprising:
a first computing device comprising a processor and a memory; and
machine readable instructions stored in the memory that, when executed by the processor, cause the first computing device to at least:
receive an account initialization message from a second computing device, the account initialization message comprising a list of authentication credentials and an account identifier;
initialize a user account based at least in part on the list of authentication credentials and the account identifier received from the second computing device, the user account comprising a flag that indicates that the user account has been changed;
detect a change to the user account made by the second computing device associated with the user account by periodically checking the flag that indicates that the user account has been changed, the change comprising a modification of the list of authentication credentials stored in conjunction with the user account;
determine that the change to the user account made by the second computing device is valid;
determine that a third computing device associated with the user account comprises a locally stored list of authentication credentials that fails to reflect the modification of the list of authentication credentials; and
send an update to the third computing device, the update comprising the modification of the list of authentication credentials stored in conjunction with the user account.

8. The system of claim 7 , wherein the machine readable instructions that cause the first computing device to determine that the third computing device comprises the locally stored list of authentication credentials that fails to reflect the modification of the list of authentication credentials further cause the first computing device to:
send a request to the third computing device for a copy of the locally stored list of authentication credentials; and
compare the copy of the locally stored list of authentication credentials to the list of authentication credentials in response to receipt of the copy of the locally stored list of authentication credentials from the third computing device.

9. The system of claim 7 , wherein the machine readable instructions that cause the first computing device to send the update to the third computing device further cause the first computing device to send the update in response to a request from the third computing device for the update.

10. The system of claim 7 , wherein:
the machine readable instructions further cause the first computing device to verify that the third computing device is authorized to receive the update; and
the machine readable instructions that cause the first computing device to send the update to the third computing device further cause the first computing device to send the update in response to a verification that the third computing device is authorized to receive the update.

11. The system of claim 7 , wherein the list of authentication credentials comprises an authentication credential that comprises a combination of a username and a password.

12. The system of claim 7 , wherein the machine readable instructions further cause the first computing device to at least validate the account initialization message.

13. A computer-implemented method, comprising:
receiving, by a first computing device, an account initialization message from a second computing device, the account initialization message comprising a list of certificates and an account identifier;
initializing, by the first computing device, a user account based at least in part on the list of certificates and the account identifier received from the second computing device, the user account comprising a flag that indicates that the user account has been changed;
detecting, by the first computing device, a change to the user account made by the second computing device associated with the user account by periodically checking the flag that indicates that the user account has been changed, the change comprising a modification of the list of certificates stored in conjunction with the user account;
determining, by the first computing device, that the change to the user account made by the second computing device is valid;
determin

Assignees

• Amazon Tech Inc

Inventors

• Hitchcock Daniel Wade
• Canavor Darren Ernest
• Johansson Jesper Mikael

Classifications

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title