Real-time authentication and authorization based on dynamically generated cryptographic data

A computer-implemented method, the method comprising:

• using at least one processor, receiving a first cryptogram associated with a first device from a second device, and loading a second cryptogram from a data repository, the second device being configured to receive at least a portion of the first cryptogram from the first device, the second cryptogram being generated by a computing system associated with an application program executed by the first device, and the second cryptogram being indicative of a prior authentication of an identity of the first device by the executed application program;
• authenticating, using the at least one processor, the identity of the first device based on a comparison of the first cryptogram and second cryptograms;
• and
• based on the authenticated identity of the first device, performing, using the at least one processor, operations consistent with profile data associated with the first device.

An apparatus, comprising:

• a communications unit;
• a storage unit storing instructions;
• and
• at least one processor coupled to the communications unit and the storage unit, the at least one processor being configured to execute the instructions to:
• receive, via the communications unit, a first cryptogram associated with an exchange of data initiated at a first device from a second device, the second device being configured to receive at least a portion of the first cryptogram from the first device;
• transmit the first cryptogram to a computing system via the communications unit, the computing system being associated with an application program executed by the first device, the computing system being configured to perform operations that authorize the initiated data exchange based on a comparison of the first cryptogram and a second cryptogram, and the second cryptogram being indicative of a prior authentication of an identity of the first device by the executed application program;
• and
• receive, via the communications unit, data indicative of the authorization of the initiated data exchange, and based on the data, perform operations consistent with the authorized data exchange.