Amazon Technologies, Inc.

Myles Conley

Aaron Brown

Jesper Mikael Johansson

Srikanth Mantha

Aaron Cop

Disclosed are various embodiments providing user authentication through registered device communications. An authentication request is received from a client device. A user is authenticated for access to a user account based at least in part on the client device providing the authentication token. The authentication token is generated by the client device or by one or more other computing devices and sent to the client device. The client device encrypts the authentication token based at least in part on a user authenticating factor and stores the encrypted authentication token on the client device.

User authentication through registered device communications

Disclosed are various embodiments providing user authentication through registered device communications. An authentication token is generated for a user account. The authentication token is embedded within a digital content item. The digital content item is sent to a first client device that is registered to the user account. A user is authenticated for access to the user account based at least in part on the user providing the authentication token embedded within the digital content item.

Devices in an environment may be transitioned to a low power state based on calendar data or other types of user input. User input indicating a first device, a time period, and a set of conditions is received. When the time period occurs, device data from one or more devices in the environment is used to determine whether the set of conditions is met. If the conditions are met, an instruction from a device outside of the environment is provided to the first device to cause the first device to enter a low power state, during which the device is no longer accessible to other devices outside of the environment. After a lapse of the time period, a change in conditions, or in response to manual input provided to the first device, the first device returns to an operational state.

Distributed electrical power management system

A message relay service receives, from a third-party mass delivery service, an electronic message that includes an electronic address of an entity and obscured data, where the plaintext data of the obscured data is unattainable by third-party mass delivery service. The message relay service identifies, based at least in part on the entity's electronic address and the obscured data, permissions usable to determine if the entity is authorized to transmit the electronic message. If the entity is authorized to transmit the message, the message relay service de-obscures the obscured data to obtain the plaintext data. The message relay service transmits the electronic message including the plaintext data to a recipient specified in the electronic message.

Secure message service for managing third-party dissemination of sensitive information

A data notarization service receives a request to provide certified data to a recipient. The request may be received from the recipient or from an authorizing entity. In response to the request, the data notarization service acquires the requested data, and applies one or more selected certifications to the requested data to produce certified data. The data notarization service signs the certified data with a notarization. The certifications are selected based at least in part on certification preferences specified by the recipient, and the notarization is applied in accordance with notarization preferences specified by the recipient. The notarized and certified data is provided to the recipient in accordance with an authorization received by the authorizing entity. The authorization may impose limits on when the data is provided and the content of the data provided.

Cryptographically provable data certification and provenance

A message relay service receives, from an electronic message service, an electronic message that includes obscured data that cannot be de-obscured by a third-party mass delivery service and an electronic address for the electronic message service. The message relay service de-obscures the obscured data to obtain plaintext data for inclusion in the electronic message. The message relay service replaces the electronic address for the electronic message service with an electronic address for a specified recipient and causes the electronic message including the plaintext data to be transmitted to the specified recipient.

Secure message service for preventing dissemination of sensitive information to third-parties

A secure messaging system identifies sensitive or restricted content within electronic messages such as E-mail, SMS or MMS text messages, or social network messages, and stores files including such content in a secure folder or bucket. After a first electronic message is identified as including sensitive or restricted content, a file including the sensitive or restricted content is stored in the secure folder or bucket, and a second electronic message including a link to the file or the secure folder or bucket is sent to each of the intended recipients of the first electronic message. When a recipient selects the link, the sensitive or restricted content is provided to the recipient over a secure connection (e.g., an SSL connection) rather than via E-mail. Additionally, recipients of the second electronic message may be authenticated by any method, e.g., an access policy and/or a single or multi-level authentication process.

Growing community of inventors

Seattle, WA, United States of America

Myles Conley