PROVISIONING ACCOUNT CREDENTIALS VIA A TRUSTED CHANNEL

• US 20170195314A1
• Filed: 03/23/2017
• Published: 07/06/2017
• Est. Priority Date: 06/21/2013
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: STRAND, WILLIAM ALEXANDER, NGUYEN, LUAN KHAI, JOHANSSON, JESPER MIKAEL
• Granted Patent: US 10,057,251 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Disclosed are various embodiments for provisioning account credentials via a trusted channel. An account configuration manager automatically determines a credential reset format that is associated with an account. The account configuration manager then automatically requests a security credential reset for the account using the credential reset format. A security credential communication is received via a trusted channel of communication that is linked to the account for reset purposes. The account configuration manager parses the security credential communication to determine a security credential for the account.

Claims

1. A non-transitory computer-readable medium embodying a program executable in at least one computing device, wherein when executed the program causes the at least one computing device to at least:

automatically determine a credential reset format that is associated with an account;

automatically request a security credential reset for the account using the credential reset format;

receive a security credential communication via an email account that is linked to the account for reset purposes; and

parse the security credential communication to determine a security credential for the account.

2. The non-transitory computer-readable medium of claim 1, wherein automatically determining the credential reset format further comprises requesting the credential reset format from a service provider corresponding to the account.

3. The non-transitory computer-readable medium of claim 1, wherein automatically determining the credential reset format further comprises requesting the credential reset format from a third-party server.

4. The non-transitory computer-readable medium of claim 1, wherein automatically determining the credential reset format further comprises selecting the credential reset format from a plurality of credential reset formats bundled with the program.

5. A system, comprising:

at least one computing device; and

an account configuration manager executable in the at least one computing device, wherein when executed the account configuration manager causes the at least one computing device to at least;

automatically determine a credential reset format that is associated with an account;

automatically request a security credential reset for the account using the credential reset format;

receive a security credential communication via a trusted channel of communication that is linked to the account for reset purposes; and

parse the security credential communication to determine a security credential for the account.

6. The system of claim 5, wherein the credential reset format defines a uniform resource locator (URL) and a format for specifying an identifier for the account.

7. The system of claim 5, wherein the credential reset format defines a format for providing respective answers to one or more knowledge-based questions.

8. The system of claim 5, wherein the security credential communication comprises an email message.

9. The system of claim 5, wherein the security credential communication is parsed based at least in part on the credential reset format.

10. The system of claim 5, wherein when executed the account configuration manager further causes the at least one computing device to at least request the credential reset format from a service provider associated with the account.

11. The system of claim 5, wherein when executed the account configuration manager further causes the at least one computing device to at least automatically determine the credential reset format by automatically attempting to use individual ones of a plurality of different credential reset formats to request the security credential reset.

12. The system of claim 5, wherein when executed the account configuration manager further causes the at least one computing device to at least select the credential reset format from a plurality of credential reset formats bundled with the account configuration manager.

13. A method, comprising:

automatically requesting, via at least one of one or more computing devices, a security credential reset for an account using individual ones of a plurality of different credential reset formats until a request for the security credential reset is successful;

receiving, via at least one of the one or more computing devices, a security credential communication via a trusted channel of communication that is linked to the account for reset purposes; and

parsing, via at least one of the one or more computing devices, the security credential communication to determine a security credential for the account.

14. The method of claim 13, further comprising receiving, via at least one of the one or more computing devices, metadata included in the security credential communication indicating a communication format employed for the security credential communication.

15. The method of claim 13, further comprising parsing, via at least one of the one or more computing devices, a communication from a credential management endpoint using one or more of the plurality of different credential reset formats to determine a type of knowledge-based question being asked to complete the security credential reset.

16. The method of claim 13, further comprising receiving, via at least one of the one or more computing devices, feedback from a credential management endpoint associated with the account indicating whether the request for the security credential reset is successful.

17. The method of claim 13, further comprising loading, via at least one of the one or more computing devices, the individual ones of the plurality of different credential reset formats from a local data store.

18. The method of claim 13, further comprising receiving, via at least one of the one or more computing devices, the individual ones of the plurality of different credential reset formats from a third-party server.

19. The method of claim 13, wherein the security credential comprises a temporary password.

20. The method of claim 13, further comprising:

automatically generating, via at least one of the one or more computing devices, a new security credential for the account; and

automatically establishing, via at least one of the one or more computing devices, the new security credential for the account using the security credential.