Systems and methods for authenticating data access requests
A computer-implemented method is disclosed. The method includes: authenticating a user for login to a service for a first authenticated user session; in response to authenticating the user, sending, to a client device associated with the user, a first data string associated with a first validity period; receiving, from the client device after expiry of the first authenticated user session, a data access request to access protected data, the data access request including the first data string; validating the first data string based on checking the first validity period; and in response to determining that the first data string is valid, transmitting, to the client device, a data access response including at least a subset of the requested protected data.
1. A computing system, comprising:
a processor; and
a memory coupled to the processor, the memory storing instructions that, when executed by the processor, configure the processor to:
authenticate a user for login to a service for a first authenticated user session;
in response to authenticating the user, send, to a client device associated with the user, a first data string associated with a first validity period;
receive, from the client device after expiry of the first authenticated user session, a data access request to access protected data, the data access request including the first data string;
validate the first data string based on checking the first validity period; and
in response to determining that the first authenticated user session has expired and that the first data string is valid, transmit, to the client device, a data access response including at least a subset of the requested protected data.
2. The computing system of claim 1 , wherein the instructions, when executed, further configure the processor:
in response to determining that the first data string is not valid, transmit, to the client device, an instruction to request login credentials from the user of the client device.
3. The computing system of claim 1 , wherein the first validity period defines an expiry date set as a predetermined number of days from a time of receipt of a login request to log the user in to the service.
4. The computing system of claim 1 , wherein the instructions, when executed, further configure the processor to encrypt the first data string prior to sending the first data string to the client device, and wherein validating the first data string comprises decrypting the encrypted first data string.
5. The computing system of claim 1 , wherein the first data string comprises a version identifier that is stored in the memory, and wherein validating the first data string is based on checking a version associated with the first data string.
6. The computing system of claim 1 , wherein the instructions, when executed, further configure the processor to:
authenticate the user for login to the service for a second authenticated user session subsequent to the first authenticated user session;
in response to authenticating the user for the second authenticated user session, generate a second data string different from the first data string; and
send, to the client device, the second data string and an instruction to replace any currently valid data string stored at the client device with the second data string.
7. The computing system of claim 1 , wherein the data access response includes at least the subset of the requested protected data in response to determining that access of the protected data is a permitted operation in a non-authenticated user session.
8. The computing system of claim 1 , wherein validating the first data string comprises determining that a current date falls within the first validity period.
9. The computing system of claim 1 , wherein the data access request comprises a request to retrieve real-time quotes for one or more tradeable objects, and wherein the instructions, when executed, further configure the processor to transmit, to a remote data source, a query for real-time quotes data.
10. The computing system of claim 1 , wherein the first data string is associated with a predetermined set of operations, and wherein the instructions, when executed, further configure the processor to:
receive, via the communications module from the client device, a request to perform a first operation; and
in response to determining that the first operation is not among the predetermined set of operations associated with the first data string, transmit, to the client device, an instruction to request login credentials from a user of the client device.
11. A computer-implemented method, comprising:
authenticating a user for login to a service for a first authenticated user session;
in response to authenticating the user, sending, to a client device associated with the user, a first data string associated with a first validity period;
receiving, from the client device after expiry of the first authenticated user session, a data access request to access protected data, the data access request including the first data string;
validating the first data string based on checking the first validity period; and
in response to determining that the first authenticated user session has expired and that the first data string is valid, transmitting, to the client device, a data access response including at least a subset of the requested protected data.
12. The method of claim 11 , further comprising:
in response to determining that the first data string is not valid, transmitting, to the client device, an instruction to request login credentials from the user of the client device.
13. The method of claim 11 , wherein the first validity period defines an expiry date set as a predetermined number of days from a time of receipt of a login request to log the user in to the service.
14. The method of claim 11 , further comprising encrypting the first data string prior to sending the first data string to the client device, and wherein validating the first data string comprises decrypting the encrypted first data string.
15. The method of claim 11 , wherein the first data string comprises a version identifier that is stored in the memory, and wherein validating the first data string is based on checking a version associated with the first data string.
16. The method of claim 11 , further comprising:
authenticating the user for login to the service for a second authenticated user session subsequent to the first authenticated user session;
in response to authenticating the user for the second authenticated user session, generating a second data string different from the first data string; and
sending, to the client device, the second data string and an instruction to replace any currently valid data string stored at the client device with the second data string.
17. The method of claim 11 , wherein the data access response includes at least the subset of the requested protected data in response to determining that access of the protected data is a permitted operation in a non-authenticated user session.
18. The method of claim 11 , wherein validating the first data string comprises determining that a current date falls within the first validity period.
19. The method of claim 11 , wherein the data access request comprises a request to retrieve real-time quotes for one or more tradeable objects, and wherein the instructions, when executed, further configure the processor to transmit, to a remote data source, a query for real-time quotes data.
20. The method of claim 11 , wherein the first data string is associated with a predetermined set of operations, and wherein the method further comprises:
receiving, from the client device, a request to perform a first operation;
in response to determining that the first operation is not among the predetermined set of operations associated with the first data string, transmitting, to the client device, an instruction to request login credentials from a user of the client device.