Methods and systems for multi-factor authentication based payment

A server system comprising:

• a memory storing computer-executable instructions;
• and
• a processor configured to execute the instructions to:
• receive, by a server system, a request in association with a payment transaction between a cardholder and a merchant, the request comprising a cardholder identifier associated with the cardholder, and information of a successful verification of a user input entered by the cardholder for performing multi-factor authentication (MFA) of the payment transaction;
• identify, by the server system, user profile data stored in a database based, at least in part, on the cardholder identifier, the user profile data comprising information of a plurality of registered user devices associated with the cardholder for the MFA;
• perform, by the server system, device behavioral analysis of one or more user devices from the plurality of registered user devices associated with the cardholder including calculating a device behavioral score by:
• (a) obtaining device identifiers from the one or more user devices and comparing the obtained device identifiers with authenticated identifiers already stored in the user profile data associated with the cardholder,
• (b) determining that the cardholder is logged into email accounts of the cardholder running on the one or more user devices,
• (c) determining a time of receipt of a one time password (OTP) associated with performing multi-factor authentication (MFA) of the payment transaction and calculating a time differences between a received time of the OTP and a time of entering the OTP,
• (d) determining a period of the one or more user devices spent in a dark mode,
• (e) calculating a device behavioral score for the user device based, at least in part, on results of steps (a), (b), (c), and (d), and
• generate, by the server system, an MFA token associated with the payment transaction based, at least in part, on the device behavioral analysis;
• transmit, by the server system, the MFA token to a payment server associated with a payment network, wherein the MFA token is utilized for authorizing the payment transaction;
• and
• authorize the payment transaction.

One or more non-transitory computer storage media having computer-executable instructions that, upon execution by a processor, cause the processor to at least:

• receive a request in association with a payment transaction between a cardholder and a merchant, the request comprising a cardholder identifier associated with the cardholder, and information of a successful verification of a user input entered by the cardholder for performing multi-factor authentication (MFA) of the payment transaction;
• identify user profile data stored in a database based, at least in part, on the cardholder identifier, the user profile data comprising information of a plurality of registered user devices associated with the cardholder for the MFA;
• perform device behavioral analysis of one or more user devices from the plurality of registered user devices associated with the cardholder including calculating a device behavioral score by:
• (a) obtaining device identifiers from the one or more user devices and comparing the obtained device identifiers with authenticated identifiers already stored in the user profile data associated with the cardholder,
• (b) determining that the cardholder is logged into email accounts of the cardholder running on the one or more user devices,
• (c) determining a time of receipt of a one time password (OTP) associated with performing multi-factor authentication (MFA) of the payment transaction and calculating a time differences between a received time of the OTP and a time of entering the OTP,
• (d) determining a period of the one or more user devices spent in a dark mode,
• (e) calculating a device behavioral score for the user device based, at least in part, on results of steps (a), (b), (c), and (d), and
• generate, by the server system, an MFA token associated with the payment transaction based, at least in part, on the device behavioral analysis;
• transmit, by the server system, the MFA token to a payment server associated with a payment network, wherein the MFA token is utilized for authorizing the payment transaction and
• authorize the payment transaction.