A data protection method for an in-vehicle infotainment, IVI, system, the method comprising: a backend server receiving user identification data; the backend server and the IVI system implementing a two phase user authentication using at least one user device; the IVI system (101, 201, 301) in response to a successful two phase user authentication creating a secure container within the IVI system (201, 301) for access by the user; characterized in that the two phase user authentication comprises: the backend server generating a unique token on the basis of the user identification data; the backend server transmitting the token to a device for presentation to the user; the IVI system (101, 201) receiving first user input data; the IVI system transmitting the first user input data to the backend server (102, 202); the backend server, in response to determining that the first user input data corresponds to the token: generating a one time password, OTP, on the basis of the token; and transmitting the OTP to the IVI system and to the user device; the IVI system (101, 201, 301) receiving second user input data and, in response to determining that the second user input data corresponds to the OTP: creating the secure container. a backend server receiving user identification data; the backend server and the IVI system implementing a two phase user authentication using at least one user device; the IVI system (101, 201, 301) in response to a successful two phase user authentication creating a secure container within the IVI system (201, 301) for access by the user; characterized in that the two phase user authentication comprises: the backend server generating a unique token on the basis of the user identification data; the backend server transmitting the token to a device for presentation to the user; the IVI system (101, 201) receiving first user input data; the IVI system transmitting the first user input data to the backend server (102, 202); the backend server, in response to determining that the first user input data corresponds to the token: generating a one time password, OTP, on the basis of the token; and transmitting the OTP to the IVI system and to the user device; the IVI system (101, 201, 301) receiving second user input data and, in response to determining that the second user input data corresponds to the OTP: creating the secure container. the backend server generating a unique token on the basis of the user identification data; the backend server transmitting the token to a device for presentation to the user; the IVI system (101, 201) receiving first user input data; the IVI system transmitting the first user input data to the backend server (102, 202); the backend server, in response to determining that the first user input data corresponds to the token: generating a one time password, OTP, on the basis of the token; and transmitting the OTP to the IVI system and to the user device; generating a one time password, OTP, on the basis of the token; and transmitting the OTP to the IVI system and to the user device; the IVI system (101, 201, 301) receiving second user input data and, in response to determining that the second user input data corresponds to the OTP: creating the secure container.