Secure access to restricted resource

Abstract

A system may generate an access number, provide the access number to a user via a telephone call, and provide the access number to an authentication server. The system may regulate access by the user to a restricted resource based on the access number provided to the user and the access number provided to the authentication server.

1 - 23 . (canceled) 
     
     
         24 . A method comprising:
 authenticating, by a first device, a user of a second device;   determining, by the first device, that the user is associated with a plurality of entities based on authenticating the user;   generating, by the first device, access data for providing access to one or more restricted resources associated with one or more of the plurality of entities; and   sending, by the first device, the access data to the second device and to a third device that is associated with the one or more of the plurality of entities to regulate access to a restricted resource, of the one or more restricted resources.   
     
     
         25 . The method of  claim 24 , further comprising:
 determining first identifying information associated with the second device;   determining second identifying information associated with the user based on the first identifying information; and   authenticating the user based on the first identifying information and the second identifying information.   
     
     
         26 . The method of  claim 25 , where generating the access data includes:
 generating a random string of characters; and   embedding the second identifying information in the random string of characters.   
     
     
         27 . The method of  claim 24 , where information identifying the user is embedded in the access data. 
     
     
         28 . The method of  claim 24 , further comprising:
 receiving, by the first device and from the second device, a selection identifying the one or more of the plurality of legal entities after determining that the user is associated with the plurality of entities, the access data being generated based on receiving the selection.   
     
     
         29 . The method of  claim 24 , where the plurality of entities includes a first entity and a second entity,
 where generating the access data includes:
 generating the access data for providing access to:
 a first restricted resource of the first entity, and 
 a second restricted resource of the second entity; and 
 
   where sending the access data includes:
 sending the access data to the second device, the third device, and a fourth device, the third device being associated with the first entity and the fourth device being associated with the second entity. 
   
     
     
         30 . The method of  claim 24 , where the plurality of entities includes a first entity and a second entity, and
 where generating the access data includes:
 generating the access data for providing access to:
 a first restricted resource of the first entity, and 
 a second restricted resource of the second entity, the third device being associated with the first entity and the second entity. 
 
   
     
     
         31 . A device comprising:
 a processor to:
 receive first information from a user device, 
 determine, based on the first information, that the user device is associated with:
 a first company associated with a first resource, and 
 a second company that is associated with a second resource, 
 
 generate access data for providing access to the first resource and the second resource based on determining that the user device is associated with the first company and the second company, and 
 transmit the access data to the user device and to one or more third devices that regulate access to the first resource and the second resource. 
   
     
     
         32 . The device of  claim 31 , where the processor is further to:
 determine, based on the first information, second information that identifies a user associated with the user device, and   generate the access data based on the first information and the second information.   
     
     
         33 . The device of  claim 32 , where, when generating the access data, the processor is further to:
 generate a random string of data, and   include at least one of the first information or the second information into the random string of data to generate the access data.   
     
     
         34 . The device of  claim 31 , where, when generating the access data, the processor is further to:
 include at least one of information identifying the user device or information identifying the user into randomized data to generate the access data.   
     
     
         35 . The device of  claim 31 , where the processor is further to:
 determine that the user device is associated with a third company,   provide information identifying the first company, the second company, and the third company to the user device,   receive a selection of the first company and the second company from the user device, and   generate the access data based on receiving the selection.   
     
     
         36 . The device of  claim 31 , where the one or more third devices comprise a network device associated with the first company and the second company. 
     
     
         37 . The device of  claim 31 , where the processor is further to:
 determine, based on the first information, information identifying the user device and information identifying a user of the user device, the access data including one or more of the information identifying the user device or the information identifying the user.   
     
     
         38 . A non-transitory computer-readable medium comprising:
 one or more instructions which, when executed by one or more processors, cause the one or more processors to:
 receive a request for access data from a user device associated with a user, 
 authenticate the user based on receiving the request, 
 determine that the user is associated with a first resource of a first company and a second resource of a second company based on authenticating the user, 
 generate the access data to enable the user to access the first resource and the second resource, and 
 transmit the access data to:
 the user device, 
 a first device associated with accessing the first resource, and 
 a second device that regulates access to the second resource. 
 
   
     
     
         39 . The non-transitory computer-readable medium of  claim 38 , further comprising:
 one or more instructions which, when executed by the processor, cause the processor to:
 determine first information that identifies the user device based on the request, 
 determine second information that identifies the user based on the first identifying information, 
 authenticate the user based on the first information and the second information, and 
 generate the access data based on authenticating the user. 
   
     
     
         40 . The non-transitory computer-readable medium of  claim 38 , where the one or more instructions to generate the access data include:
 one or more instructions to:
 embed information identifying the user into a random string of characters, the access data including the information identifying the user embedded into the random string of characters. 
   
     
     
         41 . The non-transitory computer-readable medium of  claim 38 , where the one or more instructions to generate the access data include:
 one or more instructions to generate random data, and   one or more instructions to embed information identifying the user and information identifying the user device into the generated random data.   
     
     
         42 . The non-transitory computer-readable medium of  claim 38 , further comprising:
 one or more instructions which, when executed by the processor, cause the processor to:
 determine that the user is associated with a third company, 
 provide information identifying the first company, information identifying the second company, and information identifying the third company to the user device, 
 receive, from the user device, a selection of the first company and a selection of the second company, and 
 generate the access data based on receiving the selection of the first company and the selection of the second company. 
   
     
     
         43 . The non-transitory computer-readable medium of  claim 38 , where the first device and the second device are included in an authentication server associated with the first resource and the second resource.