Multi-factor user authentication
A system for multi-factor user authentication for payment card-based transactions are described. The multifactor authentication may be based on a one-time passcode/password (OTP) as sent by an authentication server. A user device may, based on receiving the OTP, send an authentication code. The authentication code may be generated/determined based on the OTP. The authentication code may be augmented biometric identifier (ID) of a user associated with the user device. The authentication server may validate a transaction based on the authentication code.
1. An apparatus comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
receive an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determine, based on the user identifier, a user device associated with the user;
send, to the user device, a one-time passcode (OTP);
send, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and
the character mapping is periodically refreshed;
after sending the OTP, receive an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generate, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, send an authorization response indicating whether the authentication request is approved or declined.
2. The apparatus of claim 1 , wherein the authorization response indicates that the authentication request is approved based on the validation code matching the authentication code.
3. The apparatus of claim 1 , wherein the authorization response indicates that the authentication request is declined based on the validation code not matching the authentication code.
4. The apparatus of claim 1 , wherein the instructions, when executed by the one or more processors, cause the apparatus to send the OTP via at least one of:
a short messaging service (SMS) message; or
an electronic mail.
5. The apparatus of claim 1 , wherein the user device is a mobile communication device.
6. The apparatus of claim 1 , wherein the instructions, when executed by the one or more processors, cause the apparatus to:
send the OTP via a first communication channel, and
receive the authentication code via a second communication channel.
7. A method for multi-factor user authentication, the method comprising:
receiving an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determining, based on the user identifier, a user device associated with the user;
sending, to the user device, a one-time passcode (OTP);
sending, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and
the character mapping is periodically refreshed;
after sending the OTP, receiving an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generating, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, sending an authorization response indicating whether the authentication request is approved or declined.
8. The method of claim 7 , wherein the authorization response indicates that the authentication request is approved based on the validation code matching the authentication code.
9. The method of claim 7 , wherein the authorization response indicates that the authentication request is declined based on the validation code not matching the authentication code.
10. A non-transitory computer readable medium storing instructions that, when executed, cause an authentication platform to:
receive an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determine, based on the user identifier, a user device associated with the user;
send, to the user device, a one-time passcode (OTP);
send, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and
the character mapping is periodically refreshed;
after sending the OTP, receive an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generate, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, send an authorization response indicating whether the authentication request is approved or declined.