# US 10,313,339 B1 · Secure activation of authentication devices based on communications received via designated communication channels > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,339 B1 - Document ID: US10313339B1 - Status: Granted - Kind: B1 - Application number: 15/376,494 - Filed: 2016-12-12 - Granted: 2019-06-04 - Earliest claimed: 2016-12-12 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Conor Power; Jon Arron McClintock; Dean H. Saxe; Tushaar Sethi - Web page: https://patentgrep.com/patent/US10313339B1 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 63/0838: {using one-time-passwords} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/10: {for controlling access to devices or network resources} - H04W 4/35: for the management of goods or merchandise - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A delivery verification service receives an electronic message that indicates delivery of an authentication device. In response to receiving the electronic message, the delivery verification service identifies, based at least in part on the electronic message, a set of attributes of a recipient to which the authentication device was delivered. Based at least in part on these attributes of the recipient, the delivery verification service determines whether to activate the authentication device. If the delivery verification service determines that the authentication device can be activated, the delivery verification service causes the authentication device to be enabled. ## Claims ### Claim 1 A computer-implemented method, comprising: receiving an electronic message, from a computing device of an entity tasked with delivering an authentication device to a physical location, that indicates delivery of the authentication device to the physical location, the authentication device delivered in a deactivated state; evaluating the electronic message to identify a set of attributes of a recipient to which the authentication device was delivered at the physical location; determining, based at least in part on the set of attributes, to activate the authentication device; and causing the authentication device to be activated. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, further comprising: receiving a second electronic message that indicates delivery of a second authentication device to a second physical location; evaluating the second electronic message to identify a second set of attributes of a second recipient to which the second authentication device was delivered at the second physical location; determining, based at least in part on the second set of attributes, that the second recipient is not authorized to utilize the second authentication device; and preventing activation of the second authentication device. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein: the set of attributes include biometric information of the recipient; and determining to activate the authentication device includes evaluating the biometric information to determine that the biometric information corresponds to an authorized user of the authentication device. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein: the set of attributes include a code provided by an authorized user of the authentication device; and determining to activate the authentication device includes evaluating the code to determine that the code is valid. ### Claim 5 A system, comprising at least one computing device configured to implement one or more services, wherein the one or more services are configured to: identify, based at least in part on an electronic message that indicates delivery of an authentication device, a set of attributes of a recipient to which the authentication device was delivered, where the electronic message is obtained from a courier responsible for delivering the authentication device; determine, based at least in part on the set of attributes, to activate the authentication device; and cause the authentication device to be activated. ### Claim 6 (depends on 5) The system of claim 5, wherein: the set of attributes include one or more handwriting recognition vectors generated based at least in part on a signature provided by the recipient of the authentication device; and a determination to activate the authentication device is made as a result of a determination that the one or more handwriting recognition vectors correspond to an authorized user of the authentication device. ### Claim 7 (depends on 5) The system of claim 5, wherein the one or more services are further configured to transmit a notification to a device management service to indicate that activation of the authentication device is permitted to cause the authentication device to be enabled. ### Claim 8 (depends on 5) The system of claim 5, wherein: the electronic message is generated by a computing device of a physical storage location to which the authentication device was delivered; and the electronic message specifies biometric information of the recipient obtained by the computing device of the physical storage location and a code used to access the physical storage location. ### Claim 9 (depends on 5) The system of claim 5, wherein: the set of attributes include a code; and the one or more services are further configured to determine to activate the authentication device as a result of the code corresponding to a second code provided by an authorized user of the authentication device. ### Claim 10 (depends on 5) The system of claim 5, wherein the electronic message is generated by an unmanned vehicle in response to delivering the authentication device to a physical location and determining, based at least in part on authentication information of the recipient of the authentication device captured via sensors associated with the unmanned vehicle, that the recipient is authorized to receive the authentication device. ### Claim 11 (depends on 5) The system of claim 5, wherein the one or more services are further configured to transmit a request to a device management service to transmit an activation signal to the authentication device to cause the authentication device to be enabled. ### Claim 12 (depends on 5) The system of claim 5, wherein: the set of attributes include a time at which the authentication device was delivered; and the one or more services are further configured to determine to activate the authentication device as a result of a determination, based at least in part on the time, that an activation period for the authentication device has not elapsed. ### Claim 13 A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least: evaluate, in response to obtaining an electronic message that indicates delivery of a device that can be authenticated, the electronic message to identify a set of attributes of a recipient of the device, where the electronic message is received from a computing device of a delivery courier tasked with delivering the device to a physical location; determine, based at least in part on the set of attributes, that the device can be activated; and enable activation of the device. ### Claim 14 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein the instructions that cause the computer system to enable activation of the device further cause the computer system to transmit a request to a device management service to cause the device management service to transmit an activation signal to the device. ### Claim 15 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein the instructions that cause the computer system to enable activation of the device further cause the computer system to transmit a notification to a device management service to indicate that activation of the device is permitted in response to a signal from the device. ### Claim 16 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein the instructions further cause the computer system to disable other devices that can be authenticated and utilized by the recipient in response to an indication that the device has been activated. ### Claim 17 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein the instructions further cause the computer system to: evaluate, in response to receiving a second electronic message that indicates delivery of a second device, the second electronic message to identify a second set of attributes of a second recipient of the second device; determine, based at least in part on the set of attributes, that the recipient of the second device was not authorized to receive the second device; and initiate an activation period for the second device to enable an authorized user of the second device to submit a request to activate the second device during the activation period. ### Claim 18 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein: the set of attributes include biometric information of the recipient; and the instructions that cause the computer system to determine that the device can be activated further cause the computer system to evaluate the biometric information to determine that the biometric information corresponds to an authorized user of the device. ### Claim 19 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein: the set of attributes include a code provided by the recipient; and the instructions that cause the computer system to determine that the device can be activated further cause the computer system to determine that the code provided by the recipient corresponds to the code provided by an authorized user of the device. ### Claim 20 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein: the set of attributes include credential information obtained from the recipient; and the instructions that cause the computer system to determine that the device can be activated further cause the computer system to evaluate the credential information to determine that the credential information corresponds to an authorized user of the device.