Patent ID: 8176533

Claim:
A method implemented by a portable computing device, comprising: receiving, by the portable computing device from a first remote client over a network, a first HTTP request to access a protected resource on the portable computing device, wherein the first HTTP request comprises a first client credential; making a first determination, based on the first client credential, that the first remote client can access the protected resource; based on the first determination: invoking a user interface to prompt a first user of the portable computing device to provide a first user credential, wherein the user interface is separate and distinct from the first remote client; obtaining the first user credential from the first user; making a second determination, based upon the first user credential, that the first user is an authorized user of the portable computing device; based on the second determination: obtaining a confirmation from the first user that the first remote client is authorized to access the protected resource; and allowing the first remote client to access the protected resource based on the confirmation.