Multi-factor user authentication using blockchain tokens
Aspects of the disclosure relate to multi-factor user authentication for card-based payment transactions using blockchain tokens. An computing platform may receive, from a computing device, transaction details associated with a card-based payment transaction corresponding to a user, wherein the transaction details comprise a card number of a payment card. The computing platform may determine, based on the card number, a user device associated with the user. The computing platform may send, to the user device, a one-time passcode (OTP). After sending the OTP, the computing platform may receive a security key. The security key may be generated based on the sent OTP and a blockchain token hash. The computing platform may, based on the received security key, send, to the computing device, a message indicating whether the transaction is approved or declined.
1. A computing platform, comprising:
one or more processors;
a communication interface communicatively coupled to the one or more processors; and
memory storing computer-readable instructions that, when executed by the one or more processors, cause the computing platform to:
receive, from a user device associated with a user, a blockchain token hash;
receive, from a computing device, transaction details associated with a card-based payment transaction corresponding to the user, wherein the transaction details comprise a card number of a payment card;
determine, based on the card number, the user device associated with the user;
send, to the user device, a one-time passcode (OTP);
after sending the OTP, receive a security key including the OTP and blockchain token hash and having a pattern placing characters of the OTP and the blockchain token hash based on one or more predefined rules identifying the pattern and set at a time of the card-based payment transaction associated with the transaction details, wherein the security key is generated by the user device associated with the user;
extract, from the security key, the OTP and blockchain token hash;
validate the extracted OTP and blockchain token hash; and
based on validating both the extracted OTP and the blockchain token hash, send, to the computing device, a message indicating whether the card-based payment transaction associated with the transaction details is approved or declined.
2. The computing platform of claim 1 , wherein the blockchain token hash is generated based on information associated with: the user, the user device, and the payment card.
3. The computing platform of claim 1 , wherein the one or more rules are set by a payment gateway device.
4. The computing platform of claim 3 , wherein the pattern placing the characters of the OTP and blockchain token hash to generate the security key includes interleaving the OTP and the blockchain token hash.
5. The computing platform of claim 1 , wherein the placing the characters of the OTP and blockchain token hash to generate the security key includes appending the blockchain token hash to the OTP.
6. The computing platform of claim 1 , wherein the pattern placing the characters of the OTP and blockchain token hash to generate the security key includes prepending the blockchain token hash to the OTP.
7. The computing platform of claim 1 , wherein the message indicates that the transaction is approved based on:
the OTP provided in the security key matching the sent OTP, and
the blockchain token hash provided in the security key matching a blockchain token hash, corresponding to the user, stored at a predetermined number of nodes associated with a plurality of card networks.
8. The computing platform of claim 1 , wherein the message indicates that the transaction is declined based on one or more of:
the OTP provided in the security key not matching the sent OTP; or
the blockchain token hash provided in the security key not matching a blockchain token hash, corresponding to the user, stored at a predetermined number of nodes associated with a plurality of card networks.
9. The computing platform of claim 1 , wherein the payment card is a credit card or a debit card.
10. The computing platform of claim 1 , wherein the user device is a mobile communication device.
11. The computing platform of claim 1 , wherein receiving the security key comprises receiving the security key via the user device.
12. A method comprising:
receiving, from a user device associated with a user, a blockchain token hash;
receiving, from a computing device, transaction details associated with a card-based payment transaction corresponding to the user, wherein the transaction details comprise a card number of a payment card;
determining, based on the card number, the user device associated with the user;
sending, to the user device, a one-time passcode (OTP);
after sending the OTP, receiving a security key including the OTP and blockchain token hash and having a pattern placing characters of the OTP and the blockchain token hash based on one or more predefined rules identifying the pattern and set at a time of the card-based payment transaction associated with the transaction details, wherein the security key is generated by the user device associated with the user;
extract, from the security key, the OTP and blockchain token hash;
validate the extracted OTP and blockchain token hash; and
based on validating both the extracted OTP and the blockchain token hash, sending, to the computing device, a message indicating whether the card-based payment transaction associated with the transaction details is approved or declined.
13. The method of claim 12 , wherein the blockchain token hash is generated based on information associated with: the user, the user device, and the payment card.
14. The method of claim 12 , wherein the one or more rules are set by a payment gateway device.
15. The method of claim 14 , wherein the pattern placing the characters of the OTP and blockchain token hash to generate the security key includes interleaving the OTP and the blockchain token hash.
16. The method of claim 12 , wherein the pattern placing the characters of the OTP and blockchain token hash to generate the security key includes appending the blockchain token hash to the OTP.
17. The method of claim 12 , wherein the pattern placing the characters of the OTP and blockchain token hash to generate the security key includes prepending the blockchain token hash to the OTP.
18. The method of claim 12 , wherein the message indicates that the transaction is approved based on:
the OTP provided in the security key matching the sent OTP, and
the blockchain token hash provided in the security key matching a blockchain token hash, corresponding to the user, stored at a predetermined number of nodes associated with a plurality of card networks.
19. The method of claim 12 , wherein the message indicates that the transaction is declined based on one or more of:
the OTP provided in the security key not matching the sent OTP; or
the blockchain token hash provided in the security key not matching a blockchain token hash, corresponding to the user, stored at a predetermined number of nodes associated with a plurality of card networks.
20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:
receive, from a user device associated with a user, a blockchain token hash;
receive, from a computing device, transaction details associated with a card-based payment transaction corresponding to the user, wherein the transaction details comprise a card number of a payment card;
determine, based on the card number, the user device associated with the user;
send, to the user device, a one-time passcode (OTP);
after sending the OTP, receive a security key including the OTP and blockchain token hash and having a pattern placing characters of the OTP and the blockchain token hash based on one or more predefined rules identifying the pattern and set at a time of the card-based payment transaction associated with the transaction details, wherein the security key is generated by the user device associated with the user;
extract, from the security key, the OTP and blockchain token hash;
validate the extracted OTP and blockchain token hash; and
based on validating both the extracted OTP and the blockchain token hash, send, to the computing device, a message indicating whether the card-based payment transaction associated with the transaction details is approved or declined.