US 11,144,923 B1Granted

Progressive authorization of information based on confidences of user identities

AssigneeAmazon Technologies, Inc.

InventorsMark Griffith, Richard Koehler, Lakshmi Saligram

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and techniques are disclosed for progressive authorization of information. One of the methods includes obtaining information from a user device indicating a user identity of a user operating the user device, the user device being in communication with a content server. A confidence associated with the user identity of the user is determined. Requests from the content server for profile information associated with the user identity are responded to, such that authorization levels of requested profile information are determined to be satisfied based on the confidence. Upon a positive determination, use of the requested profile information is granted. Upon a negative determination, prompts for additional identifying information are provided on the user device.

Claims18

Dependent claims

A method comprising:

by a progressive authorization determination system that comprises one or more computers,
maintaining, in association with an account of a particular user, user profile information of the particular user;
receiving consent from the particular user to provide the user profile information to a content server;
subsequent to receiving the consent, monitoring identifying information, obtained from a user device over a first network connection, indicative of whether the particular user is operating the user device, wherein the user device detects the identifying information and accesses a content item hosted by the content server, wherein the content server is separate from, and is registered with, the progressive authorization determination system, and is configured to use profile information obtained from the progressive authorization determination system to provide content to users that are registered with the progressive authorization determination system, wherein the content item comprises code that, when executed by the user device, causes the user device to send at least some of the identifying information directly to the progressive authorization determination system;
determining, based on the identifying information, a confidence associated with the user device being operated by the particular user;
accessing the profile information of the particular user, and enabling access, by the content server over a second network connection, to a first portion of said profile information, the first portion associated with an authorization threshold satisfied based on the determined confidence;
receiving, based on one or more user actions associated with the content item, a request by the content server for a second portion of the profile information, the second portion associated with an authorization threshold greater than the satisfied authorization threshold;
determining whether the determined confidence satisfies the greater authorization threshold;
and
if the determined confidence satisfies the greater authorization threshold, enabling access, by the content server, to the second portion of the profile information, or
if the determined confidence does not satisfy the greater authorization threshold, causing the user device to provide one or more prompts for additional identifying information, the additional identifying information enabling the progressive authorization determination system to determine whether to provide the content server with access to the second portion of the profile information.

8 more elements

A method comprising:

by a system of one or more computers,
storing, in a data repository of the system, user profile information of a user, wherein storing the user profile information comprises storing a first portion of the user profile information in association with a first confidence threshold, and storing a second portion of the user profile information in association with a second confidence threshold that is higher than the first confidence threshold;
receiving consent from the user to provide the user profile information to a merchant;
after receiving the consent, obtaining, from a user device, information associated with the user, the user device being in communication with a content server that hosts interactive content of the merchant, wherein the interactive content comprises executable code that, when executed by the user device, causes the user device to send at least some of said information associated with the user to the system, wherein the user device and the content server are both registered with, and separate from, the system;
determining, based on the obtained information associated with the user, a confidence associated with the user device being operated by the user;
and
responding to one or more requests, from the content server, for profile information associated with the user, wherein responding comprises:
comparing the confidence to the first and second confidence thresholds;
in response to determining that the confidence satisfies the first confidence threshold, providing the content server access to the first portion of the user profile information;
and
in response to determining that the confidence satisfies the second confidence threshold, providing the content server access to the second portion of the user profile information.

8 more elements

Non-transitory computer storage media storing instructions that when executed by a system of one or more computers, cause the system to perform operations comprising:

obtaining information, from a user device, indicating a user identity of a user operating the user device, the user device being in communication with a content server, and the content server hosting interactive content, the interactive content comprising executable code that, when executed by the user device, causes the user device to send at least some of said information directly to the system, wherein the user device and the content server are both registered with, and separate from, the system;
storing, in a data repository of the system, user profile information of the user, wherein storing the user profile information comprises storing a first portion of the user profile information in association with a first confidence threshold, and storing a second portion of the user profile information in association with a second confidence threshold that is higher than the first confidence threshold;
receiving consent from the user to provide the user profile information to an entity associated with the content server;
determining, based on the obtained information, a confidence associated with the user identity of the user;
and
responding to one or more requests, from the content server, for profile information associated with the user identity, wherein responding comprises:
comparing the confidence to the first and second confidence thresholds;
in response to determining that the confidence satisfies the first confidence threshold, providing the content server access to the first portion of the user profile information in accordance with said consent;
and
in response to determining that the confidence satisfies the second confidence threshold, providing the content server access to the second portion of the user profile information.

7 more elements

Dependencies are inferred from the claim text.