Patent ID: 8151330

Claim:
A method, comprising: receiving, at a computer system, a request for a portion of user data stored at a data repository, wherein the user data is associated with a user; determining, at the computer system, whether the portion of user data can be provided to a source of the request without a temporary credential; when the portion of user data can be provided to the source without the temporary credential, determining, at the computer system, at least one type of credential to be required from the source, wherein the at least one type of credential includes a first authentication when the source is associated with the user and a second authentication when the source is not associated with the user; and when the portion of user data cannot be provided to the source without the temporary credential: sending the temporary credential to a particular device that is associated with the user, wherein the particular device is distinct from the source; and sending the portion of user data to the source selectively based on the temporary credential.