公开(公告)号：US20150089616A1

公开(公告)日：2015-03-26

申请号：US14557222

申请日：2014-12-01

Applicant: Amazon Technologies, Inc.

Inventor： Dominique I. Brezinski ,  Benjamin S. Kirzhner ,  Emilia S. Buneci ,  Martin M. O'Reilly ,  Cyrus J. Durgin ,  Lane R. LaRue

IPC: H04L29/06

CPC classification number: H04L63/08 ,  G06F21/31 ,  G06F21/32 ,  G06F21/42 ,  G06F2221/2103 ,  G07C9/00166 ,  H04L63/10

Abstract: Techniques for user authentication are disclosed. In some situations, the techniques include receiving, from a client device, an authentication request to access a network resource, the request including a user identifier, obtaining a security credential associated with the user identifier contained in the received request, generating an authorization code based on the obtained security credential, providing to the client device instructions to obtain first information corresponding to the generated authorization code, receiving, from the client device, the first information provided in response to the provided instructions, and, when the first information received from the client device corresponds to at least a portion of the generated authorization code, authorizing the client device to access the network resource.

Abstract translation: 公开了用于用户认证的技术。 在某些情况下，这些技术包括从客户端设备接收访问网络资源的认证请求，该请求包括用户标识符，获得与接收到的请求中包含的用户标识符相关联的安全凭证，生成基于授权码的授权码 在获得的安全凭证上，向客户端提供指令以获得对应于所生成的授权码的第一信息，从客户端设备接收响应于所提供的指令而提供的第一信息，以及当从 客户端设备对应于所生成的授权码的至少一部分，授权客户端设备访问网络资源。

公开(公告)号：US10404683B2

公开(公告)日：2019-09-03

申请号：US14930481

申请日：2015-11-02

Applicant: Amazon Technologies, Inc.

Inventor： Jesper M. Johansson ,  Dominique I. Brezinski ,  Kenneth L. Hamer

IPC: G06F12/14 ,  H04L29/06 ,  G06F21/00 ,  H04L9/08 ,  G06F21/46

Abstract: A password application system receives a credential for a first privilege of a plurality of privileges whereby the first privilege corresponds to a first set of credential requirements and the plurality of privileges have a second privilege that corresponds to a different set of credential requirements. The system determines whether the credential for the first privilege satisfies the first set of credential requirements. If the credential satisfies this set of credential requirements, the system enables the credential to be used for access in accordance with the first privilege.

公开(公告)号：US09178866B2

公开(公告)日：2015-11-03

申请号：US14557222

申请日：2014-12-01

Applicant: Amazon Technologies, Inc.

Inventor： Dominique I. Brezinski ,  Benjamin S. Kirzhner ,  Emilia S. Buneci ,  Martin M. O'Reilly ,  Cyrus J. Durgin ,  Lane R. LaRue

IPC: H04L29/06 ,  G06F21/31 ,  G06F21/32 ,  G06F21/42 ,  G07C9/00

CPC classification number: H04L63/08 ,  G06F21/31 ,  G06F21/32 ,  G06F21/42 ,  G06F2221/2103 ,  G07C9/00166 ,  H04L63/10

Abstract: Techniques for user authentication are disclosed. In some situations, the techniques include receiving, from a client device, an authentication request to access a network resource, the request including a user identifier, obtaining a security credential associated with the user identifier contained in the received request, generating an authorization code based on the obtained security credential, providing to the client device instructions to obtain first information corresponding to the generated authorization code, receiving, from the client device, the first information provided in response to the provided instructions, and, when the first information received from the client device corresponds to at least a portion of the generated authorization code, authorizing the client device to access the network resource.

Abstract translation: 公开了用于用户认证的技术。 在某些情况下，这些技术包括从客户端设备接收访问网络资源的认证请求，该请求包括用户标识符，获得与接收到的请求中包含的用户标识符相关联的安全凭证，生成基于授权码的授权码 在获得的安全凭证上，向客户端提供指令以获得对应于所生成的授权码的第一信息，从客户端设备接收响应于所提供的指令而提供的第一信息，以及当从 客户端设备对应于所生成的授权码的至少一部分，授权客户端设备访问网络资源。

公开(公告)号：US20160057128A1

公开(公告)日：2016-02-25

申请号：US14930481

申请日：2015-11-02

Applicant: Amazon Technologies, Inc.

Inventor： Jesper M. Johansson ,  Dominique I. Brezinski ,  Kenneth L. Hamer

IPC: H04L29/06

CPC classification number: H04L63/083 ,  G06F21/46 ,  H04L9/085 ,  H04L9/0863 ,  H04L9/0897 ,  H04L63/0846 ,  H04L63/102

Abstract: A password application system receives a credential for a first privilege of a plurality of privileges whereby the first privilege corresponds to a first set of credential requirements and the plurality of privileges have a second privilege that corresponds to a different set of credential requirements. The system determines whether the credential for the first privilege satisfies the first set of credential requirements. If the credential satisfies this set of credential requirements, the system enables the credential to be used for access in accordance with the first privilege.

Abstract translation: 密码应用系统接收用于多个权限的第一特权的证书，由此第一权限对应于第一组凭证要求，并且所述多个权限具有对应于不同证书要求集合的第二权限。 该系统确定第一个权限的凭证是否满足第一组凭据要求。 如果凭证满足这组凭证要求，则该系统使得该证书可以根据第一特权用于访问。

公开(公告)号：US08925062B1

公开(公告)日：2014-12-30

申请号：US14080599

申请日：2013-11-14

Applicant: Amazon Technologies, Inc.

Inventor： Dominique I. Brezinski ,  Benjamin S. Kirzhner ,  Emilia S. Buneci ,  Martin M. O'Reilly ,  Cyrus J. Durgin ,  Lane R. LaRue

IPC: G06F7/04 ,  G06F21/32 ,  G06F21/31 ,  H04L29/06 ,  G07C9/00

CPC classification number: H04L63/08 ,  G06F21/31 ,  G06F21/32 ,  G06F21/42 ,  G06F2221/2103 ,  G07C9/00166 ,  H04L63/10

Abstract: Techniques for user authentication are disclosed. In some situations, the techniques include receiving, from a client device, an authentication request to access a network resource, the request including a user identifier, obtaining a security credential associated with the user identifier contained in the received request, generating an authorization code based on the obtained security credential, providing to the client device instructions to obtain first information corresponding to the generated authorization code, receiving, from the client device, the first information provided in response to the provided instructions, and, when the first information received from the client device corresponds to at least a portion of the generated authorization code, authorizing the client device to access the network resource.

Abstract translation: 公开了用于用户认证的技术。 在某些情况下，这些技术包括从客户端设备接收访问网络资源的认证请求，该请求包括用户标识符，获得与接收到的请求中包含的用户标识符相关联的安全凭证，生成基于授权码的授权码 在获得的安全凭证上，向客户端提供指令以获得对应于所生成的授权码的第一信息，从客户端设备接收响应于所提供的指令而提供的第一信息，以及当从 客户端设备对应于所生成的授权码的至少一部分，授权客户端设备访问网络资源。