System and method for using a separate device to facilitate authentication

摘要

A system that incorporates the subject disclosure may perform, for example, operations including receiving a request from a first device to access information content of a second device. The process further includes determining that the first device is authorized to access the information content according to authorization credentials, and determining a token associated with the request in response to determining that the first device is authorized to access the information content. The token is forwarded to the first device, and it is confirmed that the token was received at the first device. Access to the information content of the second device is authorized in response to confirming that the token was received at the first device. Other embodiments are disclosed.

主权项

1. A method comprising:
receiving, by a server comprising a processor, a request from a mobile communication device of a user to allow user access to an application program of a separate device, wherein the request is received by way of a first network; determining, by the server, credentials associated with the request; determining, by the server, that one of the user, the mobile communication device or both is authorized to access the application program based on the credentials; determining, by the server, a token in response to the determining that the one of the user, the mobile communication device or both is authorized to access the application program; forwarding, by the server, the token to the separate device by way of a second network, to obtain a separate device token, and forwarding, by the server, the token to the mobile communication device by way of the first network to obtain a mobile communication device token, wherein the mobile communication device forwards the mobile communication device token to the separate device by way of a third network; determining, by the server, a result of a comparison between the separate device token and the mobile communication device token; confirming, by the server, that the mobile communication device token was received at the separate device, based on the result of the comparison indicating a match between the mobile communication device token and the separate device token; and authorizing, by the server, access to the application program of the separate device in response to the confirming that the mobile device token was received at the separate device.