Method and system for verifying an access request

A method of verifying a request for access to data, the method comprising:

• generating at a first module a password and outputting the generated password via an interface of the first module;
• receiving at a second module a password associated with the request for data via an interface of the second module, said received secret corresponding to the password generated by the first module;
• validating at the second module said received password;
• and
• enabling access to the requested data at the second module,
• wherein the first and second modules share a secret that has been uniquely assigned to the first and second modules for use in generation and validation of a said password, and
• wherein the first module is communicatively disconnected from the second module.

A system for use in verifying a request for data received at a device as a request originating from a human in possession of the device, the system comprising:

• a first module arranged to generate a password and output the generated password via an interface of the first module;
• a second module arranged to receive a password associated with the request for data and validate the received password, and to enable access to data, wherein said received password is received via an interface of the second module and corresponds to the password generated by the first module,
• wherein the first module and the second module are composite parts of the device, and
• wherein the first module is communicatively disconnected from the second module.

A method of verifying a request for data received at a device as a request originating from a human in possession of the device, the method comprising:

• generating at a first module a password and outputting the generated password via an interface of the first module;
• receiving at a second module a password associated with the request for data via an interface of the second module, said received secret corresponding to the password generated by the first module;
• validating at the second module the received password;
• and
• enabling access to data at the second module, wherein the first module and the second module are composite parts of the device, and wherein the first module is communicatively disconnected from the second module.