Patent ID: 11863559
Assignee: NCR CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 0:
1. A method comprising:
authenticating a service engineer in a first support session, wherein the first support session is a first authenticated support session;
receiving a request during the first support session from the service engineer requesting access to a user's account associated with a network service;
dynamically requesting an approval of a user associated with the user's account;
obtaining access permissions to enforce on the service engineer for a second support session with the service engineer during which the service engineer has access to the user's account based on receiving the approval from the user, wherein the access permissions include restricted read access on first account resources of the user's account and restricted write access on second account resources of the user's account, wherein the second support session is a second authenticated support session and is initiated from and within the first authenticated support session;
providing an access link to the service engineer during the first support session, wherein the access link comprises a token associated with the service engineer, the user's account, and the access permissions;
receiving the token when the service engineer activates the access link from and within the first support session;
obtaining the user's account, the approval, and the access permissions from the token associated with the access link; and
providing the service engineer access to the user's account in the second support session while enforcing the access permissions against the service engineer during the second support session.