Method and system for secure automatic login through a mobile device

A method for authorizing automatic login of a user to a reserved area of an information resource delivered by a web server, the method comprising:

• at a first user device, through a software application installed and running in the first user device, connecting to the web server for retrieving the information resource, and sending to an authentication server an identifier of the information resource and an identifier of the user;
• at the authentication server, based on said identifier of the information resource and on said identifier of the user, sending to a second user device an authorization request for authorizing the automatic login, the second user device being associated with the user and storing access credentials for logging in said reserved area of the information resource;
• at the second user device, notifying to the user the authorization request, and upon confirmation of the authorization request by the user on the second user device, making available to the web server the access credentials stored in the second user device, and
• at the web server, performing the automatic login to the reserved area of the information resource based on the access credentials made available by the second user device.

A system for authorizing automatic login of a user to a reserved area of an information resource, the system comprising:

• a web server;
• an authentication server;
• a first user device configured to connect, through a software application installed and running in the first user device, to the web server for retrieving the information resource, and to send to the authentication server an identifier of the information resource and an identifier of the user;
• a second user device associated with the user and storing access credentials for logging in said reserved area of the information resource,
• wherein the authentication server is configured to send, based on said identifier of the information resource and on said identifier of the user, an authorization request to the second user device for authorizing the automatic login,
• wherein the second user device is configured to notify to the user the authorization request, and upon confirmation of the authorization request by the user on the second user device, to make available to the web server the access credentials stored in the second user device, and wherein
• the web server is configured to perform the automatic login to the reserved area of the information resource based on the access credentials made available by the second user device.