| 摘要 |
<p>A method and system is provided for authorizing an action on a resource such as an account, wherein the action requires the authority of an unauthenticated authorizing party. An authorization request is received at a trusted third party such as a bank from a requesting party. The authorization request includes a resource operator specifying said action and an identifier for providing an identifying link to said authorizing party. The authorization request is stored. A pre-existing authentication channel established between the authorizing party and the trusted third party is used to authenticate the authorizing party. The authorization request is provided to the authorizing party, and the authorization response can then be received from the authorizing party.</p> |
