Abstract: A method is disclosed. The method includes receiving, by a resource provider computer operated by a resource provider, a request from a communication device operated by a user to obtain a restricted access credential to access a resource, and then generating, by the resource provider computer, interaction history data relating to past interactions between the resource provider computer and the communication device. The method also includes transmitting, by the resource provider computer, the interaction history data relating to the past interactions, to an authorizing entity computer, the authorizing entity computer determining a restricted access credential in response to receipt of the interaction history data. The method also includes receiving, by the resource provider computer, the restricted access credential from the authorizing entity computer. The restricted access credential allows a user of the communication device to obtain the resource.