# US 10,484,390 B2 · Verification of credential reset > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,390 B2 - Document ID: US10484390B2 - Status: Granted - Kind: B2 - Application number: 15/959,068 - Filed: 2018-04-20 - Published: 2018-08-23 - Granted: 2019-11-19 - Earliest claimed: 2015-12-15 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Jesper Mikael Johansson; Max Harwell Funderburk; Mian Zainulabadin Khurrum; Kripa Shankar Karukurichi Subramanian - Web page: https://patentgrep.com/patent/US10484390B2 ## CPC - H04L 63/102: {Entity profiles} - G06F 21/31: User authentication - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods and systems are provided for verifying reset of credentials for user accounts. The methods and systems receive a request to change a credential associated with a user account. The user account has account privileges associated with a network service. The methods and systems send a reset notification to a network application maintaining separate credentials associated with the user account to inform a valid owner or user of the account that a credential has been reset. The methods and systems manage availability of at least a restricted subset of the account privileges until a reset verification is received from a valid owner or user. ## Claims ### Claim 1 A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of execution by one or more processors of a computer system, cause the computer system to at least: receive a request to change a credential associated with a user account, the user account having account privileges associated with a network service; grant the request to change the credential associated with the user account; restrict access to the account privileges; cause a notification of the request to change the credential to be presented by a network application that is different from an application from which the request was issued; and restore access to the account privileges as a result of a response to the notification having been received. ### Claim 2 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the instructions further comprise instructions that cause the computer system to verify the response based at least in part on whether the response was received from the same device to which the notification was sent. ### Claim 3 (depends on 2) The non-transitory computer-readable storage medium of claim 2, wherein, as a result of the response being received from the same device to which the notification was presented, the instructions cause the computer system to determine whether the same device is a trusted device. ### Claim 4 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the instructions that cause the computer system to cause the notification to be presented further cause the computer system to select the network application from a set of trusted access points. ### Claim 5 (depends on 4) The non-transitory computer-readable storage medium of claim 4, wherein the instructions further cause the computer system to remove a trusted access point from the set of trusted access points as a result of non-use of the trusted access point. ### Claim 6 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein, as a result of the response being received from a different device to which the notification was presented, the instructions cause the computer system to restore a privilege. ### Claim 7 A computer-implemented method, comprising: receiving a request to change a credential associated with a user account, the user account having account privileges associated with a network service, the request associated with a first network application operating on one or more computing devices; causing a notification of the request to change the credential to be presented by a second network application operating on the one or more computing devices; and managing availability of at least a restricted subset of the account privileges based on a reset verification received in response to the notification from the second network application. ### Claim 8 (depends on 7) The method of claim 7, further comprising selecting the second network application from a plurality of trusted access points. ### Claim 9 (depends on 7) The method of claim 7, wherein causing the notification to be presented is performed to cause the notification to be presented on a different device from which the request to change the credential was received. ### Claim 10 (depends on 7) The method of claim 7, wherein managing availability of at least the restricted subset of the account privileges comprises restoring the at least the restricted subset of the account privileges as a result of the reset verification being verified. ### Claim 11 (depends on 7) The method of claim 7, further comprising managing a set of trusted access points, comprising a trusted access point corresponding to the second network application, according to results of monitoring usage of at least a subset of the set of trusted access points. ### Claim 12 (depends on 7) The method of claim 7, further comprising further restricting privileges of the user account as a result of the reset verification indicating denial of the request to change the credential. ### Claim 13 (depends on 7) The method of claim 7, wherein managing availability of at least a restricted subset of the account privileges comprises: granting access, between the notification and the reset verification, to first account privileges; and denying access, between the notification and the reset verification, to second account privileges. ### Claim 14 A system, comprising: at least one processor; and a memory coupled to the at least one processor, wherein the memory stores program instructions, wherein the program instructions are executable by the at least one processor to: grant a request to change a credential associated with a user account the user account having account privileges associated with a network service; restrict access to the account privileges; cause a notification of the request to change the credential to be presented by a network application associated with the user account, the network application being a different application from which the request was issued; and restrict access to the account privileges until receipt of a reset verification, in response to the notification, from the network application. ### Claim 15 (depends on 14) The system of claim 14, wherein causing the notification of the request to change the credential to be presented by the network application comprises selecting the network application based at least in part on a device on which the network application runs. ### Claim 16 (depends on 15) The system of claim 15, wherein the device is different from another device from which the request was received. ### Claim 17 (depends on 14) The system of claim 14, wherein the notification comprises a challenge to which a response can be provided to cause the reset verification to be issued. ### Claim 18 (depends on 14) The system of claim 14, wherein the program instructions are further executable to restore a privilege as a result of the reset verification indicating approval of changing the credential. ### Claim 19 (depends on 14) The system of claim 14, wherein the program instructions are further executable to further restrict privileges of the user account as a result of failure to receive a reset notification indicating approval of changing the credential. ### Claim 20 (depends on 14) The system of claim 14, wherein the program instructions are further executable to: grant access, between the notification and the reset verification, to unrestricted account privileges that include at least one of viewing preexisting digital content stored in connection with the user account or performing one-click transactions; and deny access, between the notification and the reset verification, to restricted account privileges.