Trust metrics on shared computers

Patent metadata

Field	Value
Publication number	US-9912656-B2
Application number	US-201514754590-A
Country	US
Kind code	B2
Filing date	Jun 29, 2015
Priority date	Jul 3, 2012
Publication date	Mar 6, 2018
Grant date	Mar 6, 2018

Abstract

Particular embodiments of a verification authority associated with a web service may receive a request to access the web service. The request may comprise data uniquely identifying a client device. The request may have been received from a shared device, wherein the shared device is configured for use by a plurality of users. The verification authority may access a social graph of a user associated with the client device to determine whether one or more social-networking users have previously accessed the shared device. The verification authority may then transmit to the client device information indicating which of the social-networking users have previously accessed the shared device.

First claim

What is claimed is:

1. A method comprising:
by a verification authority associated with a web service, receiving a request to access the web service, wherein the request was generated by a client device, wherein the request comprises authentication data provided by a shared device to the client device, and wherein the shared device is configured for use by a plurality of users;
by the verification authority, accessing a social graph of a user associated with the client device to determine whether one or more social-networking users have previously accessed the shared device;
by the verification authority, transmitting to the client device information indicating which of the social-networking users have previously accessed the shared device; and
by the verification authority, upon verifying the authentication data received from the client device, allowing access to the web service by the client device.

2. The method of claim 1 , further comprising:
determining whether an account on a social-networking system for each of the social-networking users had been compromised subsequent to accessing the shared device; and
transmitting, to the client device for display, a trust-based metric indicating a number of the social-networking users whose account was compromised subsequent to accessing the shared device.

3. The method of claim 2 , wherein the trust-based metric comprises data from an extended social graph of the user associated with the client device, wherein the extended social graph comprises users not directly connected to the user associated with the client device.

4. The method of claim 2 , further comprising:
determining whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.

5. The method of claim 1 , wherein the information indicating the social-networking users that accessed the shared device comprises an image of each of the social-networking users that previously accessed the shared device.

6. The method of claim 1 , wherein the shared device is registered with the verification authority.

7. The method of claim 1 , wherein the request to access the web service further comprises a digital credential uniquely identifying the client device.

8. The method of claim 1 , wherein the request to access the web service comprises a request to access the web service by transmitting data through the shared device.

9. The method of claim 1 , further comprising establishing the verification authority associated with the web service.

10. The method of claim 1 , wherein allowing access to the web service by the client device comprises allowing the client device to access the web service through the shared device.

11. The method of claim 1 , wherein verifying the authentication data received from the client device comprises comparing the authentication data with verification data associated with the shared device.

12. One or more computer-readable non-transitory storage media embodying software that is operable when executed by one or more processors to:
establish a verification authority associated with a web service;
by the verification authority, receive a request to access the web service, wherein the request was generated by a client device, wherein the request comprises authentication data provided by a shared device to the client device, and wherein the shared device is configured for use by a plurality of users;
by the verification authority, access a social graph of a user associated with the client device to determine whether one or more social-networking users have previously accessed the shared device;
by the verification authority, transmit to the client device information indicating which of the social-networking users have previously accessed the shared device; and
by the verification authority, upon verifying the authentication data received from the client device, allow access to the web service by the client device.

13. The media of claim 12 , further comprising software that is operable when executed by the one or more processors to:
determine whether an account on a social-networking system for each of the social-networking users had been compromised subsequent to accessing the shared device; and
transmit, to the client device for display, a trust-based metric indicating a number of the social-networking users whose account was compromised subsequent to accessing the shared device.

14. The media of claim 13 , wherein the trust-based metric comprises data from an extended social graph of the user associated with the client device, wherein the extended social graph comprises users not directly connected to the user associated with the client device.

15. The media of claim 13 , further comprising software that is operable when executed by the one or more processors to:
determine whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.

16. The media of claim 12 , wherein the information indicating the social-networking users that accessed the shared device comprises an image of each of the social-networking users that previously accessed the shared device.

17. The media of claim 12 , wherein the shared device is registered with the verification authority.

18. The media of claim 12 , wherein request to access the web service further comprises a digital credential uniquely identifying the client device.

19. The media of claim 12 , wherein the request to access the web service comprises a request to access the web service by transmitting data through the shared device.

20. A system of a verification authority, comprising:
one or more processors; and
a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to:
receive a request to access the web service, wherein the request was generated by a client device, wherein the request comprises authentication data provided by a shared device to the client device, and wherein the shared device is configured for use by a plurality of users;
access a social graph of a user associated with the client device to determine whether one or more social-networking users have previously accessed the shared device;
transmit to the client device information indicating which of the social-networking users have previously accessed the shared device; and
upon verifying the authentication data received from the client device, allow access to the web service by the client device.

Assignees

• Facebook Inc

Inventors

• St Clair Luke

Classifications

• G06Q10/40

  Business processes related to social networking or social networking services · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L51/32

  Electricity · mapped topic

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• G06F21/44

  Program or device authentication · CPC title