Patent ID: 9491183
Filing Date: 2016-11-08
CPC Classification: G06F,H04L

Claim Text:
1. A system for controlling access to computing resources provided by a plurality of computing devices of a provider network, the system comprising: at least one computing node; at least one memory having stored thereon computer readable instructions that, upon execution by the system, cause the system at least to: authenticate a user associated with a computing device, the user being associated with one or more of the computing resources of the provider network; process a request, received from the computing device, for access to one or more of the computing resources associated with the user; receive geographic information usable to determine an approximate geographic location of the computing device; assigning a confidence weight to the geographic information, wherein geographic information from a provider verifiable source is assigned a higher confidence weight than geographic information from other sources; determine the approximate geographic location of the computing device based at least in part on the geographic information; access geographic policy information for the user, wherein: determine that the user is authorized to access the one or more requested computing resources based at least in part on the approximate geographic location of the computing device and the geographic policy information; and allow access to the one or more requested computing resources in response to the determining that the user is authorized.