Systems and methods of contactless card as one authentication factor for multiple factor authentication

A system for authenticating a user using a contactless card, comprising a server and a card authentication module, the server configured to:

• receive, from a first device, a first request to authenticate the user using a first authentication factor;
• authenticate the user using the first authentication factor;
• transmit, to the first device, a first authentication result indicating authentication of the user using the first authentication factor;
• receive, from the first device, a second request to authenticate the user using the contactless card;
• transmit, to a user device associated with the user, the second request in a message format;
• receive, from the user device, encrypted data;
• and
• transmit, to the card authentication module, the encrypted data;
• the card authentication module configured to:
• receive, from the server, the encrypted data;
• decrypt the encrypted data;
• extract from the decrypted data cryptogram a unique customer identifier associated with the contactless card;
• and
• output, to the server, the unique customer identifier;
• the server further configured to:
• receive, from the card authentication module, the unique customer identifier;
• verify the unique customer identifier;
• authenticate the user using the unique customer identifier;
• and
• transmit, to the first device, a second authentication result indicating authentication of the user using the contactless card.

A non-transitory, computer-readable medium comprising instructions for authenticating a user using a contactless card that, when executed on a computer arrangement, perform actions comprising:

• receiving, from a first device, a first request to authenticate the user using a first authentication factor;
• authenticating the user using the first authentication factor;
• transmitting, to the first device, a first authentication result indicating authentication of the user using the first authentication factor;
• receiving, from the first device, a second request to authenticate the user using the contactless card;
• transmitting, to a user device associated with the user, the second request in a message format;
• receiving, from the user device, encrypted data;
• transmitting, to a card authentication module, the encrypted data;
• receiving, by the card authentication module, the encrypted data;
• decrypting, by the card authentication module, the encrypted data;
• extracting, by the card authentication module, from the decrypted data a unique customer identifier associated with the contactless card;
• outputting, by the card authentication module, the unique customer identifier;
• receiving, from the card authentication module, the unique customer identifier;
• verifying the unique customer identifier;
• authenticating the user using the unique customer identifier;
• and
• transmitting, to the first device, a second authentication result indicating authentication of the user using the contactless card.