Patent ID: 11916895
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computer-implemented method, comprising:
obtaining, by a network connected device service, a digital certificate of a network-connected device, the digital certificate usable by the network connected device service to authenticate the network-connected device, the digital certificate comprising a set of parameters;
identifying, by the network connected device service, an identified digital certificate cluster of a set of digital certificate clusters associated with a customer of a plurality of customers of the network connected device service, the identified digital certificate cluster comprising one of a set of existing digital certificate clusters when the existing digital certificate cluster corresponds to the set of parameters of the digital certificate, the identified digital certificate cluster comprising a new digital certificate cluster when none of the set of existing digital certificate clusters corresponds to the set of parameters;
adding, by the network connected device service, the digital certificate to the identified digital certificate cluster;
as a result of an amount of digital certificates that are associated with an organizational unit exceeding a threshold, determining, by the network connected device service, that the digital certificate is anomalous based at least in part on a quantity of certificates in the identified digital certificate cluster, wherein the threshold is determined based at least in part on weights of individual parameters of the set of parameters that are specified by the customer; and
as a result of determining that the digital certificate is anomalous, generating, by the network connected device service, information that indicates that the digital certificate is anomalous.