Access to vaulted credentials using login computer, mobile computing device, and manager computing device

A computer-implemented method comprising:

• transmitting an access request message from a login computer to a password management server, wherein the access request message identifies a requested resource and the login computer;
• receiving, responsive to the access request message, an access response from the password management server, wherein the access response includes a session identifier (ID) linked to both the login computer and the requested resource;
• displaying an encoded image that contains the session ID to a mobile computing device via an electronic display of the login computer;
• and
• receiving vaulted credentials from the password management server responsive to receipt of the following in the password management server:
• a value indicative of the session ID, decoded from the encoded image, and a user ID, both received from the mobile computing device;
• and
• a value indicative of a confirmation code, decoded from a different encoded image, received from a manager computing device that authorizes release of the vaulted credentials for the user ID;
• wherein the mobile computing device and the manager computing device are different computing devices.

A computer-implemented method comprising:

• reading, by a mobile computing device, an encoded image from an electronic display of a login computer, wherein the encoded image includes a session identifier (ID) linked to both the login computer and a requested resource;
• decoding, by the mobile computing device, the encoded image to obtain the session ID;
• transmitting, from the mobile computing device to a password management server, a user ID, and a value indicative of the session ID, to request release of vaulted credentials for the requested resource to the login computer or to the mobile computing device;
• receiving a confirmation code from the password management server which indicates that approval is needed to release the vaulted credentials to the login computer or to the mobile computing device for the user ID;
• and
• transferring the confirmation code to a manager computing device to request the approval for release of the vaulted credentials to the login computer or to the mobile computing device.

A computing device comprising:

• a transceiver in a password management server;
• and
• a controller in the password management server, wherein the controller comprises circuitry configured to:
• receive, via the transceiver, an access request message from a login computer at which a resource that requires vaulted credentials has been requested, wherein the access request message identifies the requested resource and the login computer;
• generate a session identifier (ID) that is linked to the login computer and to the requested resource;
• transmit, via the transceiver, the session ID to the login computer;
• receive a user ID and a value indicative of the session ID from a mobile computing device;
• determine whether the user ID is authorized to access the requested resource;
• and
• if the user ID is not authorized to access the requested resource:
• transmit a confirmation code to the mobile computing device, wherein the confirmation code is linked to the user ID and the requested resource;
• and
• transmit the vaulted credentials to the login computer or to the mobile computing device only if an approval message indicative of the confirmation code is received from a manager computing device that authorizes release of the vaulted credentials for the user ID;
• wherein the mobile computing device and the manager computing device are different computing devices.

A computing device comprising:

• a controller in a login computer, wherein the controller comprises circuitry configured to:
• transmit an access request message from the login computer to a password management server, wherein the access request message identifies a requested resource and the login computer;
• and
• receive, responsive to the access request message, an access response from the password management server, wherein the access response includes a session identifier (ID) linked to the login computer and the requested resource;
• and
• an electronic display operatively connected to the login computer and configured to display an encoded image that contains the session ID to a mobile computing device;
• wherein the controller is further configured to receive vaulted credentials from the password management server responsive to receipt of the following in the password management server:
• a value indicative of the session ID, decoded from the encoded image, and a user ID, both received from the mobile computing device;
• and
• a value indicative of a confirmation code, decoded from a different encoded image, received from a manager computing device that authorizes release of the vaulted credentials for the user ID;
• wherein the mobile computing device and the manager computing device are different computing devices.

A computing device comprising:

• a transceiver in a mobile computing device;
• and
• a controller in the mobile computing device, wherein the controller comprises circuitry configured to:
• read an encoded image from an electronic display of a login computer, wherein the encoded image includes a session identifier (ID) linked to the login computer and to a requested resource;
• decode the encoded image to obtain the session ID;
• transmit, via the transceiver, and from the mobile computing device to a password management server, a user ID and a value indicative of the session ID to request release of vaulted credentials for the requested resource to the login computer or to the mobile computing device;
• receive a confirmation code from the password management server which indicates that approval is needed to release the vaulted credentials to the login computer or to the mobile computing device for the user ID;
• and
• transfer the confirmation code to a manager computing device to request the approval for release of the vaulted credentials to the login computer or to the mobile computing device.

A computer program product comprising:

• a non-transitory computer readable storage medium having computer readable program code
• embodied therewith for a password management server, the computer readable program code comprising:
• computer readable program code configured to receive, at the password management server, an access request message from a login computer at which a resource that requires vaulted credentials has been requested, wherein the access request message identifies the requested resource and the login computer;
• computer readable program code configured to generate a session identifier (ID) that is linked to the login computer and to the requested resource;
• computer readable program code configured to transmit the session ID to the login computer;
• computer readable program code configured to receive, from a mobile computing device, a user ID and a value indicative of the session ID;
• computer readable program code configured to determine whether the user ID is authorized to access the requested resource;
• and
• computer readable program code configured to, if the user ID is not authorized to access the requested resource:
• transmit a confirmation code to the mobile computing device, wherein the confirmation code is linked to the user ID and the requested resource;
• and
• transmit the vaulted credentials to the login computer or to the mobile computing device only if an approval message indicative of the confirmation code is received from a manager computing device that authorizes release of the vaulted credentials for the user ID;
• wherein the mobile computing device and the manager computing device are different computing devices.

A computer program product comprising:

• a non-transitory computer readable storage medium having computer readable program code embodied therewith for a login computer, the computer readable program code comprising:
• computer readable program code configured to transmit an access request message from the login computer to a password management server, wherein the access request message identifies a requested resource and the login computer;
• computer readable program code configured to receive, responsive to the access request message, an access response from the password management server, wherein the access response includes a session identifier (ID) linked to the login computer and to the requested resource;
• computer readable program code configured to display an encoded image that contains the session ID to a mobile computing device via an electronic display of the login computer;
• and
• computer readable program code configured to receive vaulted credentials from the password management server responsive to receipt of the following in the password management server:
• a value indicative of the session ID, decoded from the encoded image and a user ID, both received from the mobile computing device;
• and a value indicative of a confirmation code, decoded from a different
• encoded image, and received from a manager computing device that authorizes release of the vaulted credentials for the user ID;
• wherein the mobile computing device and the manager computing device are different computing devices.

A computer program product comprising:

• a non-transitory computer readable storage medium having computer readable program code embodied therewith for a mobile computing device, the computer readable program code comprising:
• computer readable program code configured to read an encoded image from an electronic display of a login computer, wherein the encoded image includes a session identifier (ID) linked to the login computer and to a requested resource;
• computer readable program code configured to decode, by the mobile computing device, the encoded image to obtain the session ID;
• computer readable program code configured to transmit, from the mobile computing device to the password management server, a user ID, and a value indicative of the session ID, to request release of vaulted credentials for the requested resource to the login computer or to the mobile computing device;
• computer readable program code configured to receive a confirmation code from the password management server which indicates that approval is needed to release the vaulted credentials to the login computer or to the mobile computing device for the user ID;
• and
• computer readable program code configured to transfer the confirmation code to a manager computing device to request the approval for release of the vaulted credentials to the login computer or to the mobile computing device.