US 12,242,593 B1
Testing for unchanged passwords in IoT devices
Eknath Venkataramani, Seattle, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Dec. 6, 2021, as Appl. No. 17/543,593.
Int. Cl. G06F 21/46 (2013.01)
CPC G06F 21/46 (2013.01) 20 Claims
OG exemplary drawing
 
15. One or more non-transitory computer-accessible storage media storing program instructions that when executed on or across one or more processors of an edge device of a local network cause the edge device to:
receive, from a remote provider network via a secure connection, a default password assigned to the edge device of a client of the provider network, wherein the default password is stored at the remote provider network and associated with the edge device based on previous reception of the default password from the client by an interface of the remote provider network;
combine, by an agent of the edge device of the local network, a salt string with the default password previously assigned to the edge device and that was received by the edge device via the connection from the remote provider network to generate a salted default password;
apply a hashing algorithm to the salted default password to generate a first hashed string;
determine that a second hashed string at the edge device generated from a password that is currently assigned to the edge device matches the first hashed string generated from the default password received from the provider network, wherein the default password is stored at the remote provider network and associated with the edge device based on the previous reception of the default password from the client by the interface of the remote provider network; and
in response to the determination that the second hashed string generated from the password that is currently assigned to the edge device matches the first hashed string generated from the default password received from the provider network, wherein the default password is stored at the remote provider network and associated with the edge device based on the previous reception of the default password from the client by the interface of the remote provider network, send by the agent of the edge device of the local network to the provider network an indication that the default password is currently assigned to the edge device for password-based access.