Cloud Account Correlation for Credential Reuse Risk Detection

The patent merges multiple user accounts across different cloud environments (development, staging, production) by detecting common identifying information such as email addresses, phone numbers, or physical addresses. This creates a unified view of a single user's accounts, enabling the system to identify credential reuse patterns and apply coordinated security controls across all associated accounts, thereby maintaining operational boundaries while mitigating credential reuse risks.

The patent implements a universal security monitoring system that operates across multiple isolated cloud environments (development, staging, production) by detecting and correlating user accounts through common identifying information. This multi-functional approach enables the system to maintain environment isolation through separate IAM configurations while simultaneously providing unified security monitoring, threat detection, and coordinated response capabilities across all environments, thereby reducing monitoring complexity without compromising isolation.

The patent applies preliminary anti-action by proactively identifying user accounts with relaxed authentication mechanisms in development environments and detecting their association with accounts in more secure environments (staging, production). The system preemptively flags these connections and applies coordinated security controls, such as alerting security personnel or automatically enforcing stricter policies, to prevent attackers from using the relaxed development account as an entry point to compromise higher-value targets in secured environments.