Patent ID: 11916895
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A non-transitory computer-readable storage medium storing executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:
as a result of evaluating a set of parameters of a digital certificate, identify by a network connected device service, an identified digital certificate cluster that is associated with a customer of a plurality of customers of the network connected device service, the identified digital certificate cluster comprising one of a set of existing digital certificate clusters when the existing digital certificate cluster corresponds to the set of parameters, the identified digital certificate cluster comprising a new digital certificate cluster when none of the set of existing digital certificate clusters corresponds to the set of parameters;
add, by the network connected device service, the digital certificate to the identified digital certificate cluster;
determine, by the network connected device service, an anomalous certificate confidence score based on a quantity of certificates in the identified digital certificate cluster and a size of the identified digital certificate cluster;
as a result of an amount of digital certificates that are associated with the customer exceeding a first threshold value, determine, by the network connected device service, that the digital certificate is anomalous based on the anomalous certificate confidence score; and perform, by the network connected device service, a security operation as a result of the determination that the digital certificate is anomalous, wherein the first threshold value is determined based at least in part on weights of individual parameters of the set of parameters that are specified by the customer.