Multi-factor identity authentication

A method of multi-factor authentication of a client device at a commerce server with a mobile device to limit exposure of the client device to security risks, the method comprising:

• identifying, by the commerce server, a user identifier accessing an online store via a webpage rendered on the client device;
• querying, by the commerce server, an identity server to determine that the user identifier is associated with the mobile device and that the mobile device has a mobile payment option that is integrated with the commerce server;
• transmitting a first update to the webpage to display a selectable interface element to request to purchase a product via the mobile payment option on the mobile device;
• receiving, by the commerce server and from the client device, an instruction to initiate the mobile payment option on the mobile device;
• transmitting, to the mobile device, a request to confirm the purchase of the product;
• receiving, by the commerce server from the mobile device, a second update to the request to purchase the product;
• transmitting a third update to the webpage to display an alteration, requested from the mobile device, to the request to purchase the product;
• and
• receiving, by the commerce server and from the mobile device, a confirmation that mobile payment option has completed a payment transaction, the payment transaction requiring a user authentication on the mobile device,
• whereby the multi-factor authentication of the client device at the commerce server with the mobile device limits exposure of the client device to security risks.

A system for confirming a user identity of a client device at a commerce server with a mobile device using multi-factor authentication to limit exposure of the client device to security risks, the system comprising:

• a processor;
• an identity database containing user identity information of the mobile device having a mobile payment option that is integrated with the commerce server;
• and
• a network interface configured to:
• send a confirmation, in response to a request to confirm the user identity accessing an online store via a webpage rendered on the client device is the same user identity of the mobile device having the mobile payment option that is integrated with the system;
• transmit a first update to the webpage to display a selectable interface element to request to purchase a product via the mobile payment option on the mobile device;
• receive a request to perform a payment transaction using the mobile payment option on the mobile device;
• transmit a second update to the webpage to display an alteration, requested from the mobile device, to the request to purchase the product from the mobile device;
• and
• transmit a notification that the mobile device can be used to complete the payment transaction using the mobile payment option,
• whereby the multi-factor authentication of the client device at the commerce server with the mobile device limits exposure of the client device to security risks.

A non-transitory computer-readable storage medium storing instructions for multi-factor authentication of a client device at a commerce server with a mobile device to limit exposure of the client device to security risks which, when executed by the client device, cause the client device to:

• access an online store via a webpage rendered on the client device, wherein the client device is associated with a user identifier, the user identifier being the same user identifier of the mobile device having a mobile payment option that is integrated with the commerce server;
• receive a first update to the webpage to display a selectable interface element to request to purchase a product via the mobile payment option on the mobile device;
• transmit, to the commerce server, a request to perform a payment transaction using the mobile payment option on the mobile device;
• receive a second update to the webpage to display an alteration, requested from the mobile device, to the request to purchase the product from the mobile device;
• and
• receive a notification that the mobile device can be used to complete the payment transaction using the mobile payment option,
• whereby multi-factor authentication of the client device at the commerce server with the mobile device limits exposure of the client device to security risks.