Patent ID: 11882126
Assignee: THE TORONTO-DOMINION BANK
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 10:
11. A computer-implemented method, comprising:
receiving, via an application server associated with a first application, a request for the first application to perform a first access operation for accessing a user account at a protected resource;
determining that the first access operation is not among permitted user account operations for the first application in connection with the user account; and
in response to determining that the first access operation is not among the permitted user account operations:
generating a request for a one-time authorization for the first application to perform the first access operation;
sending, to a client device, the request for the one-time authorization;
receiving, via the client device, an indication of the requested one-time authorization;
generating an access token authorizing a one-time access of the user account by the first application to perform the first access operation based on the indication of one-time authorization, the access token indicating an access permission for the first application to access the user account; and
grant, to the first application, one-time access to the user account, the granting comprising transmitting the access token to the application server associated with the first application.