Method and system for access authorisation

A system for authorising access to data associated with a user and hosted at a data server, the system comprising:

• an application server configured to receive, from a first device, a request to access the data associated with the user and transmit an authorisation request associated with the request to an authorisation server;
• an authorisation server configured to receive the authorisation request from the application server;
• and
• a second device associated with the user configured to execute an authorisation application and a second application associated with the data server;
• wherein the authorisation server is configured to:
• transmit the authorisation request to the authorisation application executed on the second device;
• and
• wherein the second device is configured to:
• send, by the authorisation application in response to receiving the authorisation request, a redirect authorisation request to the second application;
• authorise, by the second application, the request in dependence on an authorisation input from the user at the second device;
• and
• in response to the authorisation, provide, by the second application, an access token to the application server via the authorisation server, the access token being configured to enable access by the application server to the data associated with the user.

A computing device for authorising access to data associated with a user and hosted at a data server, the device comprising:

• one or more processors;
• and
• a memory storing computer executable instructions therein which, when executed by the one or more processors, cause the one or more processors to:
• execute an authorisation application;
• execute a second application associated with a data server hosting the data associated with the user;
• receive, through the authorisation application, an authorisation request from an authorisation server, wherein the authorisation request is indicative of a request by an application server to access the data associated with the user;
• send, by the authorisation application in response to receiving the authorisation request, a redirect authorisation request to the second application;
• authorise, by the second application, the request in dependence on an authorisation input from the user;
• and
• in response to the authorisation, transmit, by the second application, an access token to the application server via the authorisation server, the access token being configured to enable access by the application server to the data associated with the user.

A computer-readable data storage medium storing computer-readable instructions which, when executed by one or more processors, perform a method of:

• receiving, at an application server from a first device, a request to access data associated with the user, the data being hosted at a data server;
• providing, by the application server, an authorisation request to an authorisation server;
• transmitting the authorisation request from the authorisation server to an authorisation application executed on a second device associated with the user;
• and
• sending, by the authorisation application executed on the second device in response to receiving the authorisation request, a redirect authorisation request to a second application executed on the second device, the second application being associated with the data server;
• authorising, at the second device by the second application, the request in dependence on an authorisation input from the user at the second device;
• and
• in response to the authorisation of the request, providing, by the second application, an access token to the application server via the authorisation server, the access token being configured to enable access by the application server to the data associated with the user.