Multi-factor authentication system and method

Abstract

A system and method of multi-factor authentication are described. In some embodiments, a first device provides an initial authentication data to a second device. The second device is different from the first device. The first device obtains a first response data from the second device. The first device generates a first subsequent authentication data using the first response data. The first subsequent authentication data is different from the initial authentication data. The first device provides the first subsequent authentication data to the second device. In some embodiments, obtaining the first response data comprises capturing the first response data from the second device using a camera on the mobile device, where the first response data is displayed on the second device.

1 . A computer-implemented method comprising:
 receiving, by a first module on a first device, a first data from a second module on a web server, the first module being different from the second module, and the first device being different from the web server;   transmitting, by the first module, the first data to a third module on a third device, the third module being different from the first module and the second module, and the third device being separate and external from the first device and the second device;   in response to transmitting the first data to the third module, receiving, by the first module, a second data from the third module; and   providing, by the first module, the second data to the web server.   
     
     
         2 . The computer-implemented method of  claim 1 , wherein the second data is received from the second device via a near field communication (NFC) or Bluetooth transmission. 
     
     
         3 . The computer-implemented method of  claim 1 , wherein the first module is a multi-factor authentication module. 
     
     
         4 . The computer-implemented method of  claim 1 , wherein the second data is generated using an encryption key stored on the third device. 
     
     
         5 . The computer-implemented method of  claim 1 , wherein the first device comprises a mobile device. 
     
     
         6 . The computer-implemented method of  claim 6 , wherein the mobile device comprises a smartphone or a tablet computer. (New) The computer-implemented method of  claim 1 , wherein the first module provides the second data to the web server during an authorization process for a transaction. 
     
     
         8 . A system comprising:
 a first device having a memory and at least one hardware processor, the memory storing executable instructions that, when executed, cause the at least one hardware processor of the first device to perform operations comprising:
 receiving a first data from a web server the first device being different from the web server; 
 transmitting the first data to a third device, the third device being separate and external from the first device and the second device; 
 in response to transmitting the first data to the third device, receiving a second data from the third device; and 
 providing the second data to the web server. 
   
     
     
         9 . The system of  claim 8 , wherein the second data is received from the second device via a near field communication (NFC) or Bluetooth transmission. 
     
     
         10 . The system of  claim 8 , wherein the first device comprises a multi-factor authentication module. 
     
     
         11 . The system of  claim 8 , wherein the second data is generated using an encryption key stored on the third device. 
     
     
         12 . The system of  claim 8 , wherein the first device comprises a mobile device. 
     
     
         13 . The system of  claim 12 , wherein the mobile device comprises a smartphone or a tablet computer. 
     
     
         14 . The system of  claim 8 , wherein the first device provides the second data to the web server during an authorization process for a transaction. 
     
     
         15 . A non-transitory computer-readable medium storing executable instructions that, when executed, cause the at least one hardware processor of a first device to perform operations comprising:
 receiving a first data from a web server, the first device being different from the web server;   transmitting the first data to a third device, the third device being separate and external from the first device and the second device;   in response to transmitting the first data to the third device, receiving a second data from the third device; and   providing the second data to the web server.   
     
     
         16 . The non-transitory computer-readable medium of  claim 15 , wherein the second data is received from the second device via a near field communication (NFC) or Bluetooth transmission. 
     
     
         17 . The non-transitory computer-readable medium of  claim 15 , wherein the first device comprises a multi-factor authentication module. 
     
     
         18 . The non-transitory computer-readable medium of  claim 15 , wherein the second data is generated using an encryption key stored on the third device. 
     
     
         19 . The non-transitory computer-readable medium of  claim 15 , wherein the first device comprises a mobile device. 
     
     
         20 . The non-transitory computer-readable medium of  claim 19 , wherein the mobile device comprises a smartphone or a tablet computer.