First factor contactless card authentication system and method

A system for controlling accesses to applications by clients includes:

• a processor;
• an interface configured to receive an access request, made by a first client device associated with a client, for access to an application;
• a non-transitory storage medium comprising a client table configured to store an expected username and an expected dynamic password for the client;
• program code stored on the non-transitory storage medium and operable when executed upon by the processor to:
• forward a notification of the access request made by the first client device to a second client device associated with the client and the contactless card;
• receive a response from the second client device, the response comprising a cryptogram comprising a username and a dynamic password retrieved by the second client device from a contactless card associated with the client, wherein the cryptogram is encoded using a hash algorithm and the dynamic password relates to a counter maintained for the client and related to a number of times that the username is retrieved from the contactless card;
• compare the username and dynamic password retrieved by the second client device from the contactless card associated with the client against the expected username and expected dynamic password for the client;
• selectively approve the authentication request in response to a first match between the username and the expected username and to a second match between the dynamic password and the expected dynamic password;
• and
• in response to an approval of the authentication request, updating the expected dynamic password for the client.