Preventing unauthorized access to secured information systems using authentication tokens and multi-device authentication prompts

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, from a user computing device, a request to login to a user account associated with a user account portal, wherein the request to login to the user account associated with the user account portal comprises a username corresponding to the user account associated with the user account portal;

in response to receiving the username corresponding to the user account associated with the user account portal:

generate an authentication token in an authentication database; and

send a notification to at least one registered device linked to the user account associated with the user account portal;

after sending the notification to the at least one registered device linked to the user account associated with the user account portal, receive, via the communication interface, from the at least one registered device linked to the user account associated with the user account portal, an authentication response message;

if the authentication response message indicates that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal, update the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved; and

after updating the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved, provide, to the user computing device, access to a portal interface based on the authentication token in the authentication database.

2. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

if the authentication response message does not indicate that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal:

generate an error message for the user computing device; and

send, via the communication interface, to the user computing device, the error message generated for the user computing device.

3. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

prior to generating the authentication token in the authentication database:

load, from a user account database, user account information corresponding to the user account associated with the user account portal; and

confirm, based on the user account information loaded from the user account database, that the user account associated with the user account portal is enrolled for multi-device authentication prompts.

4. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

prior to sending the notification to the at least one registered device linked to the user account associated with the user account portal, identify the at least one registered device as being linked to the user account associated with the user account portal based on user account information loaded from a user account database.

5. The computing platform of claim 4 , wherein sending the notification to the at least one registered device linked to the user account associated with the user account portal comprises:

generating one or more commands directing a notification engine system to push at least one authentication notification to the at least one registered device linked to the user account associated with the user account portal; and

sending, via the communication interface, to the notification engine system, the one or more commands directing the notification engine system to push the at least one authentication notification to the at least one registered device linked to the user account associated with the user account portal.

6. The computing platform of claim 5 , wherein the one or more commands directing the notification engine system to push the at least one authentication notification to the at least one registered device linked to the user account associated with the user account portal are configured to cause the at least one registered device linked to the user account associated with the user account portal to present at least one authentication prompt.

7. The computing platform of claim 6 , wherein receiving the authentication response message comprises receiving information indicating that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal in response to the at least one authentication prompt.

8. The computing platform of claim 5 , wherein the one or more commands directing the notification engine system to push the at least one authentication notification to the at least one registered device linked to the user account associated with the user account portal are configured to cause the at least one registered device linked to the user account associated with the user account portal to present at least one biometric authentication prompt.

9. The computing platform of claim 8 , wherein receiving the authentication response message comprises receiving information indicating that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal in response to the at least one biometric authentication prompt.

10. The computing platform of claim 1 , wherein providing the access to the portal interface based on the authentication token in the authentication database comprises providing the access to the portal interface after receiving a polling request from the user computing device.

11. The computing platform of claim 1 , wherein providing the access to the portal interface based on the authentication token in the authentication database comprises redirecting the user computing device to a user account portal computer system.

12. The computing platform of claim 11 , wherein redirecting the user computing device to the user account portal computer system comprises launching an authenticated user account portal session on the user account portal computer system for a web application on the user computing device.

13. The computing platform of claim 12 , wherein launching the authenticated user account portal session on the user account portal computer system for the web application on the user computing device comprises:

generating one or more commands comprising embedded authentication headers; and

sending the one or more commands comprising the embedded authentication headers to the user account portal computer system.

14. The computing platform of claim 1 , wherein updating the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved causes a web application on the user computing device to request an account overview page of an online banking portal associated with the computing platform.

15. A method, comprising:

at a computing platform comprising at least one processor, memory, and a communication interface:

receiving, by the at least one processor, via the communication interface, from a user computing device, a request to login to a user account associated with a user account portal, wherein the request to login to the user account associated with the user account portal comprises a username corresponding to the user account associated with the user account portal;

in response to receiving the username corresponding to the user account associated with the user account portal:

generating, by the at least one processor, an authentication token in an authentication database; and

sending, by the at least one processor, a notification to at least one registered device linked to the user account associated with the user account portal;

after sending the notification to the at least one registered device linked to the user account associated with the user account portal, receiving, by the at least one processor, via the communication interface, from the at least one registered device linked to the user account associated with the user account portal, an authentication response message;

if the authentication response message indicates that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal, updating, by the at least one processor, the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved; and

after updating the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved, providing, by the at least one processor, to the user computing device, access to a portal interface based on the authentication token in the authentication database.

16. The method of claim 15 , comprising:

if the authentication response message does not indicate that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal:

generating, by the at least one processor, an error message for the user computing device; and

sending, by the at least one processor, via the communication interface, to the user computing device, the error message generated for the user computing device.

17. The method of claim 15 , comprising:

prior to generating the authentication token in the authentication database:

loading, by the at least one processor, from a user account database, user account information corresponding to the user account associated with the user account portal; and

confirming, by the at least one processor, based on the user account information loaded from the user account database, that the user account associated with the user account portal is enrolled for multi-device authentication prompts.

18. The method of claim 15 , comprising:

prior to sending the notification to the at least one registered device linked to the user account associated with the user account portal, identifying, by the at least one processor, the at least one registered device as being linked to the user account associated with the user account portal based on user account information loaded from a user account database.

19. The method of claim 18 , wherein sending the notification to the at least one registered device linked to the user account associated with the user account portal comprises:

generating one or more commands directing a notification engine system to push at least one authentication notification to the at least one registered device linked to the user account associated with the user account portal; and

sending, via the communication interface, to the notification engine system, the one or more commands directing the notification engine system to push the at least one authentication notification to the at least one registered device linked to the user account associated with the user account portal.

20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

receive, via the communication interface, from a user computing device, a request to login to a user account associated with a user account portal, wherein the request to login to the user account associated with the user account portal comprises a username corresponding to the user account associated with the user account portal;

in response to receiving the username corresponding to the user account associated with the user account portal:

generate an authentication token in an authentication database; and

send a notification to at least one registered device linked to the user account associated with the user account portal;

after sending the notification to the at least one registered device linked to the user account associated with the user account portal, receive, via the communication interface, from the at least one registered device linked to the user account associated with the user account portal, an authentication response message;

if the authentication response message indicates that valid authentication input was received by the at least one registered device linked to the user account associated with the user account portal, update the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved; and

after updating the authentication token in the authentication database to indicate that the request to login to the user account associated with the user account portal has been approved, provide, to the user computing device, access to a portal interface based on the authentication token in the authentication database.