Remote authorization of access to account data

摘要

An authentication request from a first client device may be received. The authentication request may identify an account. A second client device associated with the account may be determined. An authentication query may be transmitted to the second client device. An authentication response may be received from the second client device. The authentication response may authorize the first client device to access data associated with the account. At least some of the data associated with the account may be transmitted to the first client device.

主权项

1. A method comprising:
receiving, at a computing system, an authentication request from a limited modality client device, where the limited modality client device exhibits limited input or output capabilities, where the authentication request identifies an account accessible to the computing system and is transmitted in response to the limited modality client device attempting to access data associated with the account, where the authentication request includes a user identifier associated with the account, and where the user identifier is associated with a first application executing on the limited modality client device, where the authentication request is originated from a second application executing on the limited modality client device, and where the second application is not authorized to access the data associated with the account; based on the limited modality client device exhibiting limited input or output capabilities, identifying, by the computing system, a rich-modality client device associated with the account, where the rich-modality client device exhibits input or output capabilities that are greater than those of the limited modality client device, and where the rich-modality client device is authorized to access the data associated with the account; transmitting, by the computing system, an authentication query to the rich modality client device, where the authentication query requests authorization for the limited modality client device to access the data associated with the account; receiving, by the computing system, an authentication response from the rich modality client device, where the authentication response authorizes the limited modality client device to access the data associated with the account; and based on the authentication response from the rich modality client device, transmitting, by the computing system, at least some of the data associated with the account to the limited modality client device.