Securely upgrading an untrusted channel into a trusted channel

1. A method for upgrading an untrusted channel to a trusted channel that complies with the General Data Protection Regulation (GDPR), comprising:

receiving, by a verifier server from a first service component, a request to verify an untrusted channel address comprising a consumer identifier;

retrieving, by the verifier server from a verifier database, the trusted channel address of the consumer associated with the consumer identifier;

generating, by the verifier server, a one-time password witness value containing at least six and a maximum of eight alphanumeric characters;

splitting, by the verifier server, the one-time password witness value into a first portion comprising at least the two leftmost alphanumeric characters and a second portion comprising at least the two rightmost alphanumeric characters;

transmitting, by the verifier server to the first service component, the first portion of the one-time password witness value;

transmitting, by the verifier server to a second service component, the second portion of the one-time password witness value and the trusted channel address;

receiving, by the verifier server from the first service component, a recomposed value generated by a consumer's client, the recomposed value including the two leftmost alphanumeric characters;

splitting, by the verifier server, the recomposed value into a first recomposed value and a second recomposed value;

generating, by the verifier server, a reverted one-time password value based on the first and second recomposed values;

determining, by the verifier server, that the reverted one-time password value equals the one-time password witness value;

transmitting, by the verifier server to the first service component, an authentication message confirming authentication of the consumer and enabling upgrading of the untrusted channel to a trusted channel;

receiving, by the verifier server from the first service component, a registration request comprising a request to store the untrusted channel address as a trusted channel address;

determining, by the verifier server, that on behalf of processing of one-time password authentication has been granted by the first service component; and

storing, by the verifier server in the verifier database, the untrusted channel address with a trusted channel designation.

2. The method of claim 1 , wherein the registration request further comprises a consumer identifier, and further comprising storing, by the verifier server in a verifier database, the consumer identifier with the untrusted channel address with a trusted channel designation.

3. A verifier computer apparatus for upgrading an untrusted channel to a trusted channel in a manner compliant with the General Data Protection Regulation (GDPR), comprising:

a verifier processor;

a communication device operably connected to the verifier processor; and

a storage device operably connected to the verifier processor and storing instructions causing the verifier processor to:

receive a request from a first service component to verify an untrusted channel address associated with a consumer identifier;

retrieve the trusted channel address of the consumer associated with the consumer identifier from a verifier database;

generate a one-time password witness value containing at least six and a maximum of eight alphanumeric characters;

split the one-time password witness value into a first portion comprising at least the two leftmost alphanumeric characters and a second portion comprising at least the two rightmost alphanumeric characters;

transmit the first portion of the one-time password witness value to the first service component;

transmit the second portion of the one-time password witness value and the trusted channel address to a second service component;

receive a recomposed value generated by a consumer's client from the first service component, the recomposed value including the two leftmost alphanumeric characters;

split the recomposed value into a first recomposed value and a second recomposed value;

generate a reverted one-time password value based on the first and second recomposed values;

determine that the reverted one-time password value equals the one-time password witness value;

transmit an authentication message to the first service component confirming authentication of the consumer and enabling upgrading of the untrusted channel to a trusted channel;

receive a registration request from the first service component comprising a request to store the untrusted channel address as a trusted channel address;

determine that on behalf of processing of one-time password authentication has been granted by the first service component; and

store the untrusted channel address with a trusted channel designation in the verifier database.

4. The apparatus of claim 3 , wherein the instructions for receiving a registration request further comprises instructions causing the verifier processor to receive a consumer identifier, and wherein the storage device stores further instructions causing the verifier processor to:

store the consumer identifier with the untrusted channel address in the verifier database with a trusted channel designation.

5. A system for upgrading an untrusted channel to a trusted channel in a manner compliant with the General Data Protection Regulation (GDPR), comprising:

a verifier server computer comprising a verifier processor, a communication device operably connected to the verifier processor, a first service component and a second service component, and a storage device operably connected to the verifier processor;

a verifier database operably connected to the verifier server computer; and

a user device operably connected to the verifier server computer;

wherein the storage device of the verifier server computer stores instructions causing the verifier processor to:

receive a request from the first service component to verify an untrusted channel address associated with a consumer identifier;

retrieve the trusted channel address of the consumer associated with the consumer identifier from the verifier database;

generate a one-time password witness value containing at least six and a maximum of eight alphanumeric characters;

split the one-time password witness value into a first portion comprising at least the two leftmost alphanumeric characters and a second portion comprising at least the two rightmost alphanumeric characters;

transmit the first portion of the one-time password witness value to the first service component;

transmit the second portion of the one-time password witness value and the trusted channel address to the second service component;

receive a recomposed value from the first service component, the recomposed value generated by a consumer's client running on the user device and including the two leftmost alphanumeric characters;

split the recomposed value into a first recomposed value and a second recomposed value;

generate a reverted one-time password value based on the first and second recomposed values;

determine that the reverted one-time password value equals the one-time password witness value;

transmit an authentication message to the first service component confirming authentication of the consumer and enabling upgrading of the untrusted channel to a trusted channel;

receive a registration request from the first service component comprising a request to store the untrusted channel address as a trusted channel address;

determine that on behalf of processing of one-time password authentication has been granted by the first service component; and

store the untrusted channel address with a trusted channel designation in the verifier database.

6. The system of claim 5 , wherein the instructions for receiving a registration request stored in the storage device of the verifier server computer further comprises instructions causing the verifier processor to receive a consumer identifier, and wherein the storage device of the verifier server computer stores further instructions causing the verifier processor to:

store the consumer identifier with the untrusted channel address in the verifier database with a trusted channel designation.

7. The system of claim 5 , wherein the user device comprises a consumer mobile device.