Bidirectional authentication
Systems, methods, and other embodiments associated with bidirectional authorization are described herein. According to one embodiment, a method includes a user receiving a communication from an entity. In response to receiving the communication from the entity, the method further includes generating a token. The token may be personal identification number (PIN), alphanumeric value, code word, pass phrase, or security question. The token is received by a device of the user. Additionally, the token is transmitted to the entity. The user may then receive evidence of the token from the entity.
1. A method, comprising:
generating a token, in response to a communication request, wherein the token includes a personal identification number (PIN), alphanumeric value, code word, pass phrase, or a security question, and wherein the communication request is transmitted on a communication channel that is specified for communications between a device and an entity;
transmitting the generated token to the entity, when the device is within a specified radius of the entity, employing the generated token to identify a user;
receiving evidence of the token from the entity;
authorizing communication between the entity and the device over the communication channel; and
verifying the identity of the entity when receiving communication over a different channel,
wherein the evidence received from the entity allows the user to verify that an individual purporting to be an agent of the entity is in fact an agent of the entity.
2. The method of claim 1 , wherein the evidence includes the token, a portion of the token, or a response to the token.
3. The method of claim 1 , further comprising:
requesting that the entity respond with evidence of receipt of the token.
4. The method of claim 1 , further comprising:
registering the device with the entity, wherein registration associates the device with the user, wherein the entity allows registered users to have more access to tools, services, products, incentives, promotions than an unregistered user.
5. The method of claim 1 , wherein the communication request is received on a communication channel that is a first digital channel, and wherein the token is transmitted on an authentication channel that is a second digital channel.
6. The method of claim 5 , wherein the first digital channel is different from the second digital channel.
7. The method of claim 1 , wherein the token is a one-time passcode.