Amazon Technologies, Inc.

Max Harwell Funderburk

Jesper Mikael Johansson

Darren Ernest Canavor

Mian Zainulabadin Khurrum

Kripa Shankar Karukurichi Subramanian

Jon Arron McClintock

Daniel Wade Hitchcock

Harsha Ramalingam

Bharath Kumar Bhimanaik

Jason Christopher Rudmann

Zachary Damen Wolfe

Brian Dang

Robert James Hanson

Mathew Persons Jack

Methods and systems are provided for restoring access for user accounts when suspicious activity is detected. The methods and systems identify any potential suspicious activity or potential misuse associated with a user account. The user account has account privileges associated with a network service. The methods and systems sends a notification to a network application to indicate that account privileges associated with the user account are limited. In response to the notification, a series of tasks to restore access to the user account may be performed.

Verification of credential reset

Disclosed are various embodiments for detecting malicious activity through the use of inert input parameters to a web service or web page. A service request is received from a client computing device via a service endpoint. A modification is detected to an expected parameter in the service request. The expected parameter is configured to be inert in effect with respect to the service when the expected parameter has not been modified. One or more actions are initiated in response to the modification.

Inert parameters for detection of malicious activity

Methods and systems are provided for verifying reset of credentials for user accounts. The methods and systems receive a request to change a credential associated with a user account. The user account has account privileges associated with a network service. The methods and systems send a reset notification to a network application maintaining separate credentials associated with the user account to inform a valid owner or user of the account that a credential has been reset. The methods and systems manage availability of at least a restricted subset of the account privileges until a reset verification is received from a valid owner or user.

User input into a user interface is symbolically represented to increase security. User input received into a user interface and a mapping is applied to the user input. A result of the mapping is provided. The user interface may be updated to include the result of the mapping and/or may be provided to another device, such as over a short range communication channel. A person who views or otherwise has access to the user interface does not obtain the user input, but the result of the mapping indicates whether the user input was provided correctly.

Symbolic feedback for user input

Techniques described herein provide customized user interfaces to users of clients based on the context of the client. For instance, the techniques may receive parameters that relate to specific client contexts, may transmit the parameters to a content scheduler, and may receive a schedule for serving context-specific user interface to the users. In response to receiving the content schedule, the techniques serve the context-specific content in scheduled locations of the customized user interface to the user.

Customizing user interfaces for multiple different clients

Methods and systems are provided for verifying reset of credentials for user accounts. The methods and systems receive a request to change a credential associated with a user account. The user account has account privileges associated with a network service. The methods and systems set the user account to a cool-down status and send a reset notification to one or more trusted access points associated with the user account to inform a valid owner or user of the account that a credential has been reset. The methods and systems manage availability of at least a restricted subset of the account privileges for a cool-down time period or until a reset verification is received from a valid owner or user.

Input received into a first component of a user interface is mirrored in another component of the user interface. The first component of the user interface is monitored and changes to the first component are caused to occur in the second component. The first component may be configured to receive user input for an authentication claim.

Input mirroring

A user account may be throttled to restrict access once aberrant behavior is detected. Upon receiving a request to access the user account, a determination of whether the user account is in a throttled state may be made. In some aspects, when the user account is not in a throttled state, user account access may be determined based at least in part on an access credential. Further, in some aspects, when the user account is in a throttled state, user account access may be determined based at least in part on an access credential and other client information associated with the user account.

Growing community of inventors

Seattle, WA, United States of America

Max Harwell Funderburk