Providing remote access to service devices to facilitate secure transactions

A computer-implemented method comprising:

• receiving, from a first mobile device, a first request to perform a function of an Internet of Things (IoT) service device, the IoT service device comprising hardware and positioned in a location associated with a service provider, and the first request including a user account associated with the service provider;
• in response to receiving the first request, authenticating the first mobile device by:
• accessing a database comprising a plurality of registered devices and a plurality of user accounts, wherein each registered device of the plurality of registered devices is associated with a user account of the plurality of user accounts in the database;
• and
• determining, based on the database, that the first mobile device is a registered mobile device associated with the user account;
• receiving, from a second mobile device, a second request to perform the function, the second mobile device being an authorized device associated with the service provider;
• authenticating the second mobile device based on the second mobile device being the authorized device associated with the service provider;
• and
• in response to authenticating the first mobile device and to authenticating the second mobile device, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the function, wherein the function involves a secure transaction between the IoT service device and the user account.

A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:

• receiving, from a first mobile device, a first request to perform a function of an Internet of Things (IoT) service device, the IoT service device comprising hardware and positioned in a location associated with a service provider, and the first request including a user account associated with the service provider;
• in response to receiving the first request, authenticating the first mobile device by:
• accessing a database comprising a plurality of registered devices and a plurality of user accounts, wherein each registered device of the plurality of registered devices is associated with a user account of the plurality of user accounts in the database;
• and
• determining, based on the database, that the first mobile device is a registered mobile device associated with the user account;
• receiving, from a second mobile device, a second request to perform the function, the second mobile device being an authorized device associated with the service provider;
• authenticating the second mobile device based on the second mobile device being the authorized device associated with the service provider;
• and
• in response to authenticating the first mobile device and to authenticating the second mobile device, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the function, wherein the function involves a secure transaction between the IoT service device and the user account.