Patent ID: 8856919
Filing Date: 2014-10-07
Classification: G06F,H04L

Abstract:
1. A method for authorizing operations of a remote server requested from a local user computer via a data communications network, the method comprising: connecting, via a computer interface of an authorization device, to the local user computer to facilitate communication with the remote server via the data communications network; using security data to establish, via the local user computer, a mutually authenticated connection for encrypted end-to-end communications between the authorization device and the server; collecting from the server, via the connection, information indicative of any operation requested via a connection to the server other than the mutually authenticated connection and requiring authorization by a user of the local user computer; and presenting the information to the user via a user interface of the authorization device to prompt for authorization of the operation, wherein the remote server stores rule data defining operations requiring authorization and checks whether authorization is required for the operation based on the stored rule data, wherein the remote server stores details of one or more operations awaiting authorization in a deferred operation log.