Alternative distribution and accessing of one-time passwords (OTPs)
Alternative distribution/communication of and access to One-Time Passwords/Passcodes (OTPs). Triggering events are detected that result in the OTP being communicated to a communication device different from the device designated by the user for receiving OTPs. The triggering event may be determination that the user's designated device (i) is not currently in possession of the user, (ii) is located in a geo-location designated for No-OTP receipt, and/or (iii) is currently in an inoperable state. The different communication device may be a device other than one in possession/control of the user and may be a device designated by the user or the device may be one selected, based on proximity of location to the user, from a network of trusted devices/individuals.
1. A system for alternative distribution of One-Time Passwords (OTPs), the system comprising:
a computing platform including a memory and one or more computing processor devices in communication with the memory, wherein the memory stores an authentication application that is executable by at least one of the one or more computing processor devices and configured to:
receive a first request for communication of an OTP to a first user,
determine prior to communicating a first OTP to the first user: (i) that a first communication device designated by the first user for receiving OTPs is not proximate to the first user, or (ii) that the first communication device is within a geo-location designated for No-OTP receipt,
in response to determining (i) or (ii), identify a second communication device for communication of the first OTP and communicate the first OTP to the second communication device,
determine after communicating the first OTP to the first communication device: (iii) that the first OTP has not been received by the first communication device, (iv) that an allotted time for validating the first OTP has lapsed, or (v) that a second request for communication of the OTP to the first user has been received, and
in response to determining one of (iii), (iv) or (v), identify the second communication device for re-communication of the first OTP to the second communication device or communication of a second OTP to the second communication device and re-communicate the first OTP to the second communication device or communicate the second OTP to the second communication device,
wherein identifying the second communication device for communication of the first OTP or the second OTP further comprises determining a geo-location of the first user and identifying the second communication device based on proximity of a geo-location of the second communication device to the geo-location of the first user.
2. The system of claim 1 , wherein the second communication device is a device that is not in possession of or controlled by the first user.
3. The system of claim 1 , wherein the authentication application is further configured to identify the second communication device based on proximity of the geo-location of the second communication device to the geo-location of the first user by accessing a predetermined listing of a network of second communication devices that maps each second communication device to at least one of a registered OTP recipient or a geo-location.
4. The system of claim 1 , wherein the authentication application is further configured to identify the second communication device for communication of the first OTP or the second OTP by accessing a predetermined list of designated OTP recipients that maps each designated OTP recipient to a corresponding second communication device.
5. The system of claim 4 , wherein the authentication application is further configured to identify the second communication device for communication of the first OTP or the second OTP by accessing the predetermined list of designated OTP recipients that maps each designated OTP recipients to the corresponding second communication device, wherein the predetermined list is predetermined by the first user and provides for an ordered listing of one or more designated OTP recipients, wherein the ordered listing indicates an order in which OTPs are to be communicated to the one or more designated OTP recipients.
6. The system of claim 1 , wherein the authentication application is further configured to determine that the first communication device is within the geo-location designated for No-OTP receipt, wherein the geo-location designated for No-OTP receipt is predefined by the first user.
7. The system of claim 1 , wherein the authentication application is further configured to (i) reset or increase the allotted time for validating the first OTP prior to communicating the first OTP to the second communication device or (ii) provide for an extended allotted time for validating the second OTP prior to communicating the second OTP to the second communication device.
8. The system of claim 1 , wherein the authentication application is further configured to notify a second user in possession of the second communication device that an OTP being used to authenticate the first user is being communicated to the second communication device.
9. The system of claim 1 , wherein the authentication application is further configured to, in response to the second communication device receiving the first OTP or the second OTP, present an input field at the second communication device configured to receive input of the first OTP or the second OTP by the first user or a second user in possession of the second communication device and submit the first OTP or second OTP for purposes of authenticating the first user.
10. A computer-implemented method for alternative distribution of One-Time Passwords (OTPs), the method being executable by one or more computing device processors and comprising:
receiving a first request for communication of an OTP to a first user;
determining prior to communicating a first OTP to the first user: (i) that a first communication device designated by the first user for receiving OTPs is not proximate to the first user, or (ii) that the first communication device is within a geo-location designated for No-OTP receipt,
in response to determining (i) or (ii), identifying a second communication device for communication of the first OTP and communicate the first OTP to the second communication device,
determining after communicating the first OTP to the first communication device: (iii) that the first OTP has not been received by the first communication device, (iv) that an allotted time for validating the first OTP has lapsed, or (v) that a second request for communication of the OTP to the first user has been received, and
in response to determining one of (iii), (iv) or (v), identifying the second communication device for re-communication of the first OTP to the second communication device or communication of a second OTP to the second communication device and re-communicate the first OTP to the second communication device or communicate the second OTP to the second communication device,
wherein identifying the second communication device for communication of the first OTP or the second OTP further comprises determining a geo-location of the first user and identifying the second communication device based on proximity of a geo-location of the second communication device to the geo-location of the first user.
11. The computer-implemented method of claim 10 , wherein the second communication device is a device that is not in possession of or controlled by the first user.
12. The computer-implemented of claim 10 , wherein identifying the second communication device for communication of the first OTP or the second OTP further comprises accessing a predetermined list of designated OTP recipients that maps each designated OTP recipient to a corresponding second communication device, wherein the predetermined list is predetermined by the first user and provides for an ordered listing of one or more designated OTP recipients, wherein the ordered listing indicates an order in which OTPs are to be communicated to the one or more designated OTP recipients.
13. The computer-implemented method of claim 10 , wherein determining that the first communication device is within a geo-location designated for No-OTP receipt further comprises determining that the first communication device is within a geo-location designated, by the first user, for No-OTP receipt.
14. A computer program product comprising:
a non-transitory computer-readable medium comprising sets of codes for causing one or more computing devices to:
receive a first request for communication of an OTP to a first user;
determine prior to communicating a first OTP to the first user: (i) that a first communication device designated by the first user for receiving OTPs is not proximate to the first user, or (ii) that the first communication device is within a geo-location designated for No-OTP receipt,
in response to determining (i) or (ii), identify a second communication device for communication of the first OTP and communicate the first OTP to the second communication device,
determine after communicating the first OTP to the first communication device: (iii) that the first OTP has not been received by the first communication device, (iv) that an allotted time for validating the first OTP has lapsed, or (v) that a second request for communication of the OTP to the first user has been received, and
in response to determining one of (iii), (iv) or (v), identify the second communication device for re-communication of the first OTP to the second communication device or communication of a second OTP to the second communication device and re-communicate the first OTP to the second communication device or communicate the second OTP to the second communication device,
wherein identifying the second communication device for communication of the first OTP or the second OTP further comprises determining a geo-location of the first user and identifying the second communication device based on proximity of a geo-location of the second communication device to the geo-location of the first user.
15. The computer program product of claim 14 , wherein the second communication device is a device that is not in possession of or controlled by the first user.
16. The computer program product of claim 14 , wherein the set of codes for causing the one or more computing devices to identify the second communication device for communication of the first OTP or the second OTP further include codes for causing the one or more computing devices to access a predetermined list of designated OTP recipients that maps each designated OTP recipient to a corresponding second communication device, wherein the predetermined list is predetermined by the first user and provides for an ordered listing of one or more designated OTP recipients, wherein the ordered listing indicates an order in which OTPs are to be communicated to the one or more designated OTP recipients.
17. The computer program product of claim 14 , wherein the set of codes for causing the one or more computing devices to determine that the first communication device is within a geo-location designated for No-OTP receipt further includes codes for causing the one or more computing devices to determine that the first communication device is within a geo-location designated, by the first user, for No-OTP receipt.