Server-to-device secure data exchange transactions

A device, comprising:

• one or more processors coupled to non-transitory memory, the one or more processors configured to:
• generate a device access token for an application executing on the device based on (i) a device identifier corresponding to the device and (ii) an account identifier corresponding to an account of a user;
• receive an account restriction applicable to the application;
• receive a transaction request from the application executing on the device;
• select a function call to carry out the transaction request based on the account restriction for the application;
• transmit, to a computing system and using the function call, the device access token to carry out the transaction request, causing the computing system to:
• (i) determine that the transaction request complies with the account restriction, and
• (ii) responsive to determining that the transaction request complies with the account restriction for the application, transmit an electronic message to the device corresponding to the transaction request;
• receive, from the computing system, the electronic message responsive to the transaction request;
• and
• provide, to the application, a response to the transaction request based on the electronic message.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors of a device, cause the one or more processors to perform operations comprising:

• generating a device access token for an application executing on the device based on (i) a device identifier corresponding to the device and (ii) an account identifier corresponding to an account of a user;
• receiving an account restriction applicable to the application;
• receiving a transaction request from the application executing on the device;
• selecting a function call to carry out the transaction request based on the account restriction for the application;
• transmitting, to a computing system and using the function call, the device access token to carry out the transaction request, causing the computing system to:
• (i) determine that the transaction request complies with the account restriction, and
• (ii) responsive to determining that the transaction request complies with the account restriction for the application, transmit an electronic message to the device corresponding to the transaction request;
• receiving, from the computing system, the electronic message responsive to the transaction request;
• and
• providing, to the application, a response to the transaction request based on the electronic message.