System and method for proximity-based authentication

A computer-implemented method for proximity-based authentication, the method conducted at a computing device comprising:

• transmitting identification data from a primary user session to a server, the identification
• data in linking the primary user session to a user record associated with a registered user;
• in response to the server determining that a trust indicator of the primary user session is insufficient, requiring proximity-based acquisition to be performed by a registered end point, either:
• receiving a token from the server;
• and
• outputting the token for proximity-based acquisition by the registered end point associated with the user record;
• or:
• acquiring a token by proximity-based acquisition from the registered end point associated with the user record;
• and
• transmitting the token to the server to establish physical proximity of the registered end point and computing device of the primary user session.

A system for proximity-based authentication, the system including a server having a memory for storing computer-readable program code and a processor for executing the computer-readable program code which causes the processor to perform operations of:

• receiving identification data from a primary user session on a session end point hosted on a computing device, the identification
• data in linking the primary user session to a user record associated with a registered user;
• determining a trust indicator of the primary user session, and, when the trust indicator is insufficient, requiring proximity-based acquisition to be performed by a registered end point including providing a token to one of the session end point and the
• registered end point hosted on a computing device, the registered end point associated with the user record, for local transmission from the end point for proximity-based acquisition by the other one of the session end point and a registered end point;
• and
• receiving the token from the other one of the session end point and the registered end point to establish physical proximity of the session end point and the registered end point during the primary user session.