公开(公告)号：US10536436B1

公开(公告)日：2020-01-14

申请号：US15192744

申请日：2016-06-24

Applicant: Amazon Technologies, Inc.

Inventor： Marc R. Barbour ,  Ruchith Udayanga Fernando

IPC: H04L9/00 ,  H04L29/06

Abstract: A computer-implemented service uses information associated with a client device to generate a first shared secret. The service receives, from the client, a claim of access to a second shared secret and determines whether the first shared secret and the second shared secret match. If the shared secrets match, the service uses the first shared secret to encrypt a one-time password. The service provides the encrypted one-time password to the client device. The client device transmits a claim of access to the one-time password, which the service uses to determine whether the claim of access to the one-time password indicates access to the one-time password. If the claim of access to the one-time password indicates that the client device has access to the one-time password, the service allows the client device to access the service.