Secure mobile initiated authentication

A computer-implemented method, comprising:

• registering a mobile computing device and a user of the mobile computing device to establish a record to support user initiated authentication on the mobile computing device to access another computing device different from the mobile computing device;
• receiving, from the mobile computing device, a request to authorize the user to access a second computing device and, in association with the request, first data indicative of a value;
• receiving second data indicative of an identifier generated by the second computing device;
• in response to identifying a correspondence between the value and the identifier, determining whether the user of the mobile computing device is permitted to access the second computing device based on the record;
• in response to determining the user of the mobile computing device is permitted to access the second computing device, requesting, from the second computing device, a credential;
• transmitting the credential and a policy associated with the second computing device to the mobile computing device;
• receiving, from the mobile computing device, a request to access the second computing device and, in association with the request, authentication data;
• verifying the authentication data complies with the policy;
• and
• transmitting, to the second computing device, based on the verifying, instructions to permit user access to the second computing device.

A system, the system comprising:

• a server system comprising a non-transitory computer readable medium storing computer program instructions that when executed by one or more processors effectuate operations comprising:
• registering a secondary computing device and a user of the secondary computing device to establish a record to support user initiated authentication on the secondary computing device to access a primary computing device different from the secondary computing device;
• receiving a request to authorize the user to access the primary computing device and, in association with the request, first data indicative of a value;
• receiving second data indicative of an identifier generated by the primary computing device;
• determining whether the user of the secondary computing device is permitted to access the primary computing device based on the record in response to identifying a correspondence between the value and the identifier,
• receiving an authentication request to access the primary computing device and, in association with the authentication request, authentication data;
• verifying the authentication data complies with a policy;
• and
• permitting, based on the verifying, user access on the primary computing device;
• a mobile computing device comprising a non-transitory computer readable medium storing computer program instructions that when executed by one or more processors effectuate operations comprising:
• transmitting third data for verifying results of authentication of the user determined by the mobile computing device for registering the mobile computing device as the secondary computing device;
• determining, in response to a request to login the user on the primary computing device, authentication data indicative of a result of authentication of the user on the mobile computing device based on obtained input corresponding to the user and a credential maintained by the mobile computing device;
• and
• transmitting the authentication data in association with the authentication request to cause the server system to permit the user access on the primary computing device.