Secure authentication for assistant systems

One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

• receive a first audio input from a user requesting access to information or a service;
• determine that the user is to be authenticated prior to accessing the information or service;
• send a request for the information or service to an authentication server, wherein the request includes first authentication information based on the first audio input and further includes a user identifier associated with the user;
• receive a second audio input from a client system of the user, wherein the second audio input includes a first authentication code to be compared to a second authentication code generated by the authentication server;
• send second authentication information based on the second audio input and the user identifier to the authentication server for verification;
• receive, from the authentication server, an indication of whether the user is successfully authenticated based on the second authentication information;
• and
• provide, to the user, access to the information or service when the user is successfully authenticated.

A system comprising:

• one or more processors;
• and a non-transitory memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to:
• receive a first audio input from a user requesting access to information or a service;
• determine that the user is to be authenticated prior to accessing the information or service;
• send a request for the information or service to an authentication server, wherein the request includes first authentication information based on the first audio input and further includes a user identifier associated with the user;
• receive a second audio input from a client system of the user, wherein the second audio input includes a first authentication code to be compared to a second authentication code generated by the authentication server;
• send second authentication information based on the second audio input and the user identifier to the authentication server for verification;
• receive, from the authentication server, an indication of whether the user is successfully authenticated based on the second authentication information;
• and
• provide, to the user, access to the information or service when the user is successfully authenticated.