Amazon Technologies, Inc.

Microsoft Technology Licensing, LLC

Haizhi Xu

Yicong Wang

Pavel Anatolievich Dournov

Ajay Mani

Ashish B Shah

Todd F Pfleiger

Luis Irun-Briz

Aaron-Kenneth Karl Rehaag

Akram Hassan

Pavithra Tyamagondlu Nagesharao

David Wood

Yun Bai

Shreekant Balasaheb Waphare

Xi Wang

Todd Pfleiger

Ashish Shah

A provider network is configured to provide continuous workflow service for an open-ended number of workflows using non-persistent threads. The provider network includes a workflow translator service configured to receive workflows defined according to multiple workflow domain specific languages and translate the received workflows into a particular domain specific language used by the workflow service to execute workflows. In some cases, the provider network includes a workflow handling service and a workflow evaluation service. The workflow handling service may receive indications of task completion events related to respective workflows, and in turn may send non-blocking requests for workflow decisions from the workflow evaluation service. In generating a workflow decision, the workflow evaluation service may determine resources for executing a workflow.

Workflow service with translator

A user can be authenticated to a mobile computing device using an authentication process that recognizes the user and verifies that an actual human being is attempting to be authenticated, in order to minimize the ability of another person to spoof the authentication process. A model of a user can be generated and stored in the cloud, enabling that model to be synchronized across various devices. A user accessing one of these devices can have infrared image information captured, which can be used with a facial recognition process, to recognize the user, and with a human verification process, to verify that the facial information corresponds to a human user. Various approaches such as visual analysis and thermal imaging can be used to verify that the human user being recognized is interactive with the device.

Image analysis for user authentication

A user can be authenticated to any of a number of computing devices using an authentication process that recognizes the user and verifies that an actual human being is attempting to be authenticated, in order to minimize the ability of another person to spoof the authentication process. A model of a user can be generated and stored in the cloud, enabling that model to be synchronized across various devices. A user accessing one of these devices can have image information captured, which can be used with a facial recognition process, to recognize the user, and with a human verification process, to verify that the facial information corresponds to a human user. Various approaches such as visual analysis, three-dimensional imaging, and thermal imaging can be used to verify that the human user being recognized is interactive with the device.

A transaction is authorized using an authentication process that prompts the user to perform an action in view of a camera or sensor. The process identifies the user and verifies that the user requesting the transaction is a living human being. The user is identified using image information which is processed utilizing facial recognition. The device verifies that the image information corresponds to a living human using one or more human-verification processes. The device prompts the user to perform an action to confirm the transaction, and causes the transaction to be performed after verifying performance of the action by the identified user.

A distributed application may be updated by using information provided by the application to determine grouping, sequencing, and whether or not to advance an update sequence. The application may provide input to an update sequence, and may cause the update sequence to repair one or more replicas prior to updating. The update mechanism may be used to change the distributed application topology as well as make changes to the application executable code, application configuration, quest operating system, virtual machine, and host systems, among others. In some cases, the distributed application may use a quorum to determine which version is current, and the quorum may change during the update process.

Coordinated upgrades in distributed systems

Subject matter described herein is directed to reallocating an application component from a faulty data-center resource to a non-faulty data-center resource. Background monitors identify data-center resources that are faulty and schedule migration of application components from the faulty data-center resources to non-faulty data-center resources. Migration is carried out in an automatic manner that allows an application to remain available. Thresholds are in place to control a rate of migration, as well as, detect when resource failure might be resulting from data-center-wide processes or from an application failure.

Growing community of inventors

Seattle, WA, United States of America

Haizhi Xu