Discover Financial Services LLC

George Mitry

Hao Chen

In order to extend an OAuth 2.0 framework in a way that an application programming interface (API) is to be protected with two-factor authentication, an API provider may be presented with a set of options for different types of second authentication factors that can be used to carry out the two-factor authentication for the API, and then after the API provider selects its desired type of second authentication factor, an OAuth resource endpoint or an OAuth token endpoint may function to perform a second-factor authentication of each client application attempting to access the API based on a second authentication factor of the type selected by the API provider. Other comparable technology for protecting APIs may be extended to allow for two-factor authentication in a similar manner.

Growing community of inventors

Mundelein, IL, United States of America

George Mitry