Shared device secure access

A mobile device comprising:

• a memory and a processor configured to cooperate with said memory to perform the following:
• establish a communications channel with a shared computing terminal, with the shared computing terminal being accessible to a plurality of users other than a user of the mobile device,
• in response to authentication of the user of the mobile device with a remote computing device, receive a code from the remote computing device,
• provide the code to the shared computing terminal via the communications channel to enable the shared computing terminal to request a temporary access token from the remote computing device, with the temporary access token being used by the shared computing terminal to launch a computing session with the remote computing device without transfer of a long-lived access token of the user from the mobile device to the shared computing terminal,
• receive a challenge from the remote computing device in response to the request for the temporary access token, and
• provide a challenge response to the challenge along with the long-lived access token to the remote computing device, with the challenge response and the long-lived access token being used by the remote computing device to authenticate the user of the mobile device.

A non-transitory computer readable medium for a mobile device, and with the non-transitory computer readable medium having a plurality of computer executable instructions for causing the mobile device to perform steps comprising:

• establishing a communications channel between the mobile device and a shared computing terminal, with the shared computing terminal being accessible to a plurality of users other than a user of the mobile device;
• in response to authentication of the user of the mobile device with a remote computing device, receiving a code from the remote computing device;
• providing the code to the shared computing terminal via the communications channel to enable the shared computing terminal to request a temporary access token from the remote computing device, with the temporary access token being used by the shared computing terminal to launch a computing session with the remote computing device without transfer of a long-lived access token of the user from the mobile device to the shared computing terminal;
• receiving a challenge from the remote computing device in response to the request for the temporary access token;
• and
• providing a challenge response to the challenge along with the long-lived access token to the remote computing device, with the challenge response and the long-lived access token being used by the remote computing device to authenticate the user of the mobile device.