Secure authentication for accessing remote resources
Methods, systems, and apparatus, including computer program products, for secure authentication for accessing remote resources are disclosed. In some implementations, a user is authenticated for a first time on an interface using a first communications channel; the user is authenticated a second time on the interface using a second communications channel; access privileges are determined based on authenticating the user for the second time; and a random Uniform Resource Locator (URL) is generated based on the access privileges, where the random URL is single-use and indirectly associated with a requested resource.
1 . A method for enabling a first device to access resources, the method comprising, at the first device:
providing, to a second device, a request to access at least one resource through the second device, wherein the request includes user account credentials;
receiving a message that includes a first secure value, wherein the message is received in response to the second device authenticating the user account credentials;
generating a second secure value that is based on at least the first secure value;
receiving, from the second device, instructions for accessing the at least one resource, wherein the instructions are received in response to the second device authenticating the second secure value; and
accessing the at least one resource using the instructions.
2 . The method of claim 1 , further comprising, subsequent to generating the second secure value:
providing the second secure value to the second device.
3 . The method of claim 1 , wherein the second secure value is provided to the second device over a second communications channel that is different from a first communications channel over which the request is transmitted.
4 . The method of claim 1 , further comprising:
displaying the second secure value on a display device with which the first device is communicably coupled.
5 . The method of claim 1 , wherein the instructions expire after a threshold amount of time lapses relative to the at least one resource being accessed by the first device.
6 . The method of claim 1 , wherein the first and second secure values comprise randomized numerical codes.
7 . The method of claim 1 , wherein the instructions comprise a single-use uniform resource locator (URL).
8 . A non-transitory computer readable storage medium storing instructions that, when executed by at least one processor included in a first device, cause the first device to carry out steps that include:
providing, to a second device, a request to access at least one resource through the second device, wherein the request includes user account credentials;
receiving a message that includes a first secure value, wherein the message is received in response to the second device authenticating the user account credentials;
generating a second secure value that is based on at least the first secure value;
receiving, from the second device, instructions for accessing the at least one resource, wherein the instructions are received in response to the second device authenticating the second secure value; and
accessing the at least one resource using the instructions.
9 . The non-transitory computer readable storage medium of claim 8 , wherein the steps further include, subsequent to generating the second secure value:
providing the second secure value to the second device.
10 . The non-transitory computer readable storage medium of claim 8 , wherein the second secure value is provided to the second device over a second communications channel that is different from a first communications channel over which the request is transmitted.
11 . The non-transitory computer readable storage medium of claim 8 , wherein the steps further include:
displaying the second secure value on a display device with which the first device is communicably coupled.
12 . The non-transitory computer readable storage medium of claim 8 , wherein the instructions expire after a threshold amount of time lapses relative to the at least one resource being accessed by the first device.
13 . The non-transitory computer readable storage medium of claim 8 , wherein the first and second secure values comprise randomized numerical codes.
14 . The non-transitory computer readable storage medium of claim 8 , wherein the instructions comprise a single-use uniform resource locator (URL).
15 . A first device, comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the first device to carry out steps that include:
providing, to a second device, a request to access at least one resource through the second device, wherein the request includes user account credentials;
receiving a message that includes a first secure value, wherein the message is received in response to the second device authenticating the user account credentials;
generating a second secure value that is based on at least the first secure value;
receiving, from the second device, instructions for accessing the at least one resource, wherein the instructions are received in response to the second device authenticating the second secure value; and
accessing the at least one resource using the instructions.
16 . The first device of claim 15 , wherein the steps further include, subsequent to generating the second secure value:
providing the second secure value to the second device.
17 . The first device of claim 15 , wherein the second secure value is provided to the second device over a second communications channel that is different from a first communications channel over which the request is transmitted.
18 . The first device of claim 15 , wherein the steps further include:
displaying the second secure value on a display device with which the first device is communicably coupled.
19 . The first device of claim 15 , wherein the instructions expire after a threshold amount of time lapses relative to the at least one resource being accessed by the first device.
20 . The first device of claim 15 , wherein the first and second secure values comprise randomized numerical codes.