# US 10,872,142 B1 · Localized identity management in limited communication networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,872,142 B1 - Document ID: US10872142B1 - Status: Granted - Kind: B1 - Application number: 15/910,873 - Filed: 2018-03-02 - Granted: 2020-12-22 - Earliest claimed: 2018-03-02 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Rahul Sharma; Sanjeev Krishnan; Timothy Wells Hunt - Web page: https://patentgrep.com/patent/US10872142B1 ## CPC - G06F 21/44: Program or device authentication - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods are described for management of data transmitted between computing devices in a communication network. An administrative component can configure one or more devices in the communication path of messages to be exchanged by devices to interpret codes embedded in the communication messages. A receiving device can review incoming messages for one or more processing codes or instructions that are embedded in the portion of the communication typically utilized solely to identify the subject matter of the communication, generally referred to as the topic portion of the communication. The receiving devices can then process the embedded codes to determine how the communication message will be routed or otherwise processed. ## Claims ### Claim 1 A system for managing access to computing devices comprising: at least one coordinated device having a first processor and a first memory, the at least one coordinated device configured to transmit requests to access computing device local resources associated with the at least one coordinated device, wherein individual requests require processing result based on evaluation of authentication and authorization information and wherein the at least one coordinated device is associated with limited functionality that cannot authenticate requests to access the computing device resources; and, a coordinator service having a second processor and a second memory, wherein the coordinator service is configured to: receive a request from the at least one coordinated device for accessing the computing device resources associated with the at least one coordinated device; determine service availability for a network-based service for processing the received request based on at least one of network connectivity, availability of secure transmissions, and criteria defining conditions for the coordinator service to transmit requests to the network-based service; evaluate local authentication and authorization information based on unavailability of the network-based service; generate a processing result regarding the evaluation of the local authentication and authorization information; and transmit the processing result responsive to the received request to the at least one coordinated device. ### Claim 2 (depends on 1) The system as recited in claim 1, wherein the coordinator service is further configured to: transmit a request for accessing the computing device resources to the network-based service based on a determination of service availability; and receive a processing result regarding evaluation of authorization and authentication information from the network-based service. ### Claim 3 (depends on 1) The system as recited in claim 1, wherein the coordinator service is further configured to: transmit a request for the local authorization and authentication information to the network-based service; receive the requested authorization and authentication information; and encrypt the requested authorization and authentication information based on a user key. ### Claim 4 (depends on 3) The system as recited in claim 3, wherein the received authorization and authentication information includes expiration information. ### Claim 5 (depends on 1) The system as recited in claim 1, wherein evaluating the local authentication and authorization information based on unavailability of the network-based service includes evaluating expiration information. ### Claim 6 A method for managing computing devices comprising: receiving, at a coordinator device, a request from a coordinated device for accessing local computing device resources associated with the coordinated device; evaluating, at the coordinator device, local authentication and authorization information based on unavailability of a network-based service, wherein the unavailability is based on one or more of network connectivity, availability of secure transmissions, and criteria defining conditions for the coordinator device to transmit requests to the network-based service; generating, at the coordinator device, a processing result regarding the evaluation of the local authentication and authorization information; and transmitting, by the coordinator device, the processing result responsive to the received request. ### Claim 7 (depends on 6) The method as recited in claim 6 further comprising determining network-based service availability based on at least one policy. ### Claim 8 (depends on 7) The method as recited in claim 7 further comprising transmitting a request for authentication and authorization based on the determination of network-based service availability. ### Claim 9 (depends on 6) The method as recited in claim 6 further comprising: transmitting a request for authorization and authentication information to the network-based service; receiving the requested authorization and authentication information. ### Claim 10 (depends on 9) The method as recited in claim 9, wherein the requested authorization and authentication information includes processing information. ### Claim 11 (depends on 10) The method as recited in claim 10, wherein the processing information includes expiration information. ### Claim 12 (depends on 10) The method as recited in claim 10, wherein the processing information includes service availability determination criteria. ### Claim 13 (depends on 9) The method as recited in claim 9, wherein the requested authorization and authentication information is associated with a hierarchical structure defining individual users and one or more associated groups. ### Claim 14 (depends on 9) The method as recited in claim 9, wherein the requested authorization and authentication information is encrypted. ### Claim 15 (depends on 6) The method as recited in claim 6, wherein the processing result includes an authentication token. ### Claim 16 (depends on 6) The method as recited in claim 6, wherein the processing result includes at least one of an authentication token validation or an authentication token renewal. ### Claim 17 (depends on 6) The method as recited in claim 6, wherein the processing result include an authentication token renewal. ### Claim 18 A method for managing computing devices comprising: receiving, at a coordinator device, a request for accessing computing device resources associated with a coordinated device, wherein the coordinator device is independent of the coordinated device and a network-based authentication service; determining, at the coordinator device, availability of the network-based authentication service based on at least one of network connectivity, availability of secure transmissions, and criteria defining conditions for transmission of the request to the network-based authentication service; and determining, at the coordinator device, to process the request using local authentication and authorization information based on unavailability of the network-based authentication service. ### Claim 19 (depends on 18) The method as recited in claim 18 further comprising transmitting a request for authentication and authorization based on a determination of network-based authentication service availability. ### Claim 20 (depends on 19) The method as recited in claim 19, wherein the requested authorization and authentication information includes processing information including at least one of expiration information or service availability determination criteria. ### Claim 21 (depends on 18) The method as recited in claim 18 further comprising: transmitting a request for authorization and authentication information to the network-based authentication service; and receiving the requested authorization and authentication information. ### Claim 22 (depends on 18) The method as recited in claim 18, further comprising generating a processing result, wherein the processing result includes at least one of an authentication token, an authentication token validation, or an authentication token renewal.