Single-input multifactor authentication

A method for multifactor authentication, the method comprising:

• receiving, on a first computing device, a multifactor authentication request from a second computing device in response to the first computing device requesting access to a protected resource managed, at least in part, by the second computing device, the multifactor authentication request including a request for a first factor and a request for a second factor;
• prompting, on the first computing device, a user for a biometric input;
• responsive to authenticating the user based, at least in part, on the biometric input and biometric data stored by a secure element of the first computing device, the first computing device:
• sending a user credential to the second computing device in response to the request for the first factor;
• generating a single-use token using a token generator executing on the secure element, the token generator generating the single-use token based, at least in part, on a token seed stored by the secure element;
• and
• sending the single-use token to the second computing device in response to the request for the second factor;
• receiving, on the first computing device, an access status indicator in response to sending the user credential and the single-use token to the second computing device to access the protected resource;
• receiving, by a biometric module executed within a kernel space of the first computing device, the biometric input from the user and the biometric data stored by the secure element;
• comparing, by the biometric module executed within the kernel space of the first computing device, the biometric input to the received biometric data to determine whether the biometric input is a valid match to the biometric data;
• and
• responsive to the biometric module determining that the biometric input is a valid match to the biometric data, retrieving by a login module of a security application program interface (API) the user credential, the login module of the security API retrieving the single-use token from the secure element and providing the user credential and the single-use token to an application module of the first computing device.