Patent ID: 8191161

Claim:
One or more device-readable memory devices or storage devices including device-executable instructions for performing the following steps: receiving, from a mobile user device, a first indication of an intent to access a protected resource; initiating a key exchange with the mobile user device in response to receiving the first indication from the mobile user device; automatically obtaining one or more keys from the mobile user device via the key exchange, wherein the one or more keys provide security credentials of a user; verifying whether the one or more keys automatically obtained via the key exchange are valid; receiving a first keyholder verification that is entered by the user into the mobile device; checking validity of the first keyholder verification, the first keyholder verification having an associated expiration policy; authorizing access to the protected resource at a first time, provided the first keyholder verification and the one or more keys automatically obtained via the key exchange are valid; and subsequent to the first time: receiving, from the mobile user device, a second indication of an intent to further access the protected resource; determining whether the first keyholder verification has expired based on the associated expiration policy automatically obtaining the one or more keys from the mobile user device again; when the first keyholder verification has expired, causing the user to be prompted to enter a second keyholder verification to the mobile device before allowing the further access to the protected resource; and when the first keyholder verification has not expired, allowing the further access to the protected resource without causing the user to be prompted to enter the second keyholder verification, provided the one or more keys are still valid and are used for the further access by the mobile user device, wherein the expiration policy comprises a number of times the one or more keys may be used to access the protected resource without the second keyholder verification.