A
system (100) comprising: a processor (102); and a non-transitory computer-readable storage medium (602) containing instructions (106, 108, 110, 112) that can be executed on the processor (102) to: receive a permission request (212, 306) to enable the performance of an operation with respect to a
backup copy (208), wherein the
backup copy (208) corresponds to initial device data (204) stored in a first device (202), and wherein the
backup copy (208) is to be stored on a second device (206); in response to the permission request (212, 306), analyze
telemetry data (220, 222, 226) received by the first device (202) within an initial time interval relative to a time of
receipt of the permission request (212, 306); and determine whether a security of the first device has been compromised based on the analysis. is;based on the finding that the security of the first device is not compromised, to enable the operation with respect to the backup copy (208) by sending a token (216) from the
system (100) to the first device, wherein the token (216) includes a name of the first device data (204) or the backup copy (208) and the token (216) indicates the operation with respect to the backup copy (208) that is permitted;to receive from the
system (100) of the second device (206) the token (216) which was sent from the first device (202) as part of a service request from the first device (202) to perform the operation with respect to the backup copy (208), wherein the token (216) from the second device (206) is part of an
authentication request which asks the system (100) to verify that the token (216) is valid, and the
authentication request is sent from the second device (206) to the system (100) on the basis of a finding that the service request from the first device (202) is consistent with the token (216); to validate the token (216) received from the second device (206) in the system (100);and based on the validation of the token (216), a response (314) from the system (100) is sent indicating that the token (216) is authentic, in order to enable the second device (206) to perform the operation with respect to the backup copy (208).