Amazon Technologies, Inc.

Other

Brad Lee Campbell

Daniel Wade Hitchcock

Bharath Kumar Bhimanaik

Daniel W Hitchcock

Darren Ernest Canavor

Harsha Ramalingam

Robert James Hanson

Joshua Lee Davis

Owen G Griffiths

Harsha Ramalingham

Daniel Hitchock

Disclosed are various embodiments for managing security credentials for an authentication management client on a client device. In one non-limiting example, a computing device is configured to receive an authentication request from an authentication management client of a client and determine an affinity of the authentication management client based at least in part on the authentication request. The computing device is configured to determine that the authentication management client is supported based at least in part on the affinity. The computing device is configured to generate a session for the authentication management client based at least in part on a security credential being received from the authentication management client.

Managing security credentials

Disclosed are various embodiments for resetting security credentials for an authentication management client on a client device. In one non-limiting example, the authentication management client is configured to receive encrypted account data associated with a user from an authentication management service and decrypt the encrypted account data using a master security credential. The decrypted account data is stored as client account data associated with the client device. The authentication management client is configured to receive a request to reset a plurality of security credentials in the client account data. At least one of the plurality of security credentials in the client account data are reset.

Resetting managed security credentials

Disclosed are various embodiments for account management using a portable data store. In one embodiment, an authentication client is stored in a portable data store. In response to receiving a master security credential from the user, the authentication client decrypts encrypted account data stored in the portable data store. The authentication client detects that a network site is being accessed. The authentication client automatically provides a corresponding security credential to the network site.

Account management using a portable data store

Devices and methods are provided for used segmented impact analysis to determine high-valued computer-based actions. The device may determine a first user account associated with performance of a first computer-based action and a second computer-based action associated with a network-accessible resource. The device may determine a second user account associated with performance of the first computer-based action, but not with the second computer-based action. The device may determine a first value for the first user account, the first value based on the performance of the second computer-based action. The device may determine a second value for the second user account, the second value based on the failure to perform the second computer-based action. The device may determine a third value, wherein the third value is a difference between the first value and the second value. The device may send the third value with a product recommendation.

Online product subscription recommendations based on a customers failure to perform a computer-based action and a monetary value threshold

Disclosed are various embodiments for updating account data with multiple account providers. Account management logic determines that data associated with a user has been updated. A validation procedure is performed on the updated data. Multiple accounts of the user that may use the data are determined. The accounts are with multiple account providers. Corresponding account update requests for the accounts are sent to the account providers. The account update requests specify the data that has been updated.

Updating account data for multiple account providers

Disclosed are various embodiments that provide account information, such as usernames and passwords, to applications. Respective account information is stored for multiple accounts. A user interface is rendered that facilitates a user selection of a particular application from multiple applications. A particular account is identified in response to the user selection. One or more operations are initiated to create a runtime association between an instance of the particular application and the account information corresponding to the particular account.

Providing account information to applications

A security panel framing system having a base frame; a base plate under a base frame bottom side, the base plate having a stopper; a hollow inner channel defined by the base frame; a wedge having a wedge top side, and a wedge bottom side; a wedge wall extending between the wedge top side and the wedge bottom side; a reinforced end at the wedge bottom side; wherein the reinforced end and a bottom wedge lip are configured to be held in place by the stopper; a cap configured to be associated with the wedge; and wherein the wedge is configured to sit at a base plate front side leaving a gap between the wedge back side and the base frame, the gap being configured to receive a security panel, such that the security panel is snugly encased by the base frame and the wedge.

Security panel framing system and method

A security panel framing system adapted to be mounted onto a frame having a glass, the system having: a wedge having: an upper wedge lip; a wedge wall extending between a wedge top side and a wedge bottom side; a reinforced wedge end at the wedge bottom side; and a lower wedge lip; a cap adapted to be associated with the wedge, having: a first prong adapted to fit onto the upper wedge lip; a second prong adapted to fit between the lower wedge lip and the reinforced wedge end; and a return flange; wherein the system is assembled together when the cap is associated with the wedge front side; such that the return flange extends underneath the wedge bottom side; such that the wedge is adapted to be associated with a security panel mounted to the frame, such that the security panel protects the glass within the frame.

Disclosed are various embodiments for sharing network site account information among multiple users. Account information for a network site account is received from a first user at a first client. An indication is received from the first user that the account information is to be shared with a second user. The second user is authenticated at a second client. The account information is transferred to the second client.

Sharing account information among multiple users

Disclosed are various embodiments for updating account data with multiple account providers. Account management logic determines that personal information associated with a user has been updated. Multiple accounts of the user that may use the personal information are determined. The accounts are with multiple account providers. Corresponding account update requests for the accounts are sent to the account providers. The account update requests specify the personal information that has been updated.

Validation data, such as an image selected by a merchant, is rendered on a mobile device of a customer to provide the merchant confirmation that payment for an item submitted through the mobile device of the customer was in fact received by the merchant. The merchant may establish an account on a network-accessible computing device (e.g., in the 'cloud') that includes the validation data. The customer authorizes payment to the merchant from the mobile device using the network connectivity of the mobile device. When the payment is received by the merchant, the network-accessible computing device sends the validation data to the customer's mobile device. The merchant may be confident that he or she has in fact received an electronic payment from the customer when the validation data is presented on the mobile device. Techniques to prevent reuse and copying of the validation data are also discussed.

Merchant verification of in-person electronic transactions

Disclosed are various embodiments for managing accounts for network sites. In one embodiment, account information is automatically removed from a client when a logout is performed. In another embodiment, encrypted account information and an authentication client that decrypts the account information are stored upon a portable data store that is removably attached to a computing device. In yet another embodiment, a first user may indicate that account information is to be shared with a second user.

Account management for network sites

Disclosed are various embodiments for network site account management using a proxy server. A request for a secured resource on a network site is generated based at least in part on stored account information in response to receiving an initial request for the secured resource from a client. The request is sent to the network site. The secured resource is sent to the client in response to receiving the secured resource from the network site.

Proxy server-based network site account management

Disclosed are various embodiments for management functions relating to security credentials. Account data, which includes multiple security credentials for multiple network sites for a user, is stored in an encrypted form. A request to temporarily change the account data is obtained from a client. The request specifies a master security credential for accessing the account data. In response to the request, the multiple security credentials for the account data are changed to a single temporary security credential, as specified by a user. After an expiration period expires, the multiple security credentials are automatically reset to a plurality of different security credentials.

Growing community of inventors

Seattle, WA, United States of America

Brad Lee Campbell