Secure contextual information retrieval for authentication messaging

An apparatus for backchannel authentication, comprising:

• one or more memories storing processor-executable code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:
• receive, from a first application, a first request to initiate a backchannel authentication procedure associated with an interaction by a first user with the first application, the first request comprising an indication of the interaction;
• transmit, to the first user, a second request to authenticate the interaction at the first application indicated via the first request, the second request comprising an identifier for a set of contextual information associated with the interaction;
• receive, from the first user, a third request for the set of contextual information associated with the interaction, the third request comprising the identifier for the set of contextual information;
• transmit, to the first user, the set of contextual information associated with the interaction based at least in part on the third request comprising the identifier for the set of contextual information;
• receive, from the first user and in response to the second request, an indication of whether the interaction at the first application is authenticated based at least in part on transmitting the set of contextual information;
• and
• transmit, to the first application, the indication based at least in part on receiving the indication from the first user.

A non-transitory computer-readable medium storing code for backchannel authentication, the code comprising instructions executable by one or more processors to:

• receive, from a first application, a first request to initiate a backchannel authentication procedure associated with an interaction by a first user with the first application, the first request comprising an indication of the interaction;
• transmit, to the first user, a second request to authenticate the interaction at the first application indicated via the first request, the second request comprising an identifier for a set of contextual information associated with the interaction;
• receive, from the first user, a third request for the set of contextual information associated with the interaction, the third request comprising the identifier for the set of contextual information;
• transmit, to the first user, the set of contextual information associated with the interaction based at least in part on the third request comprising the identifier for the set of contextual information;
• receive, from the first user and in response to the second request, an indication of whether the interaction at the first application is authenticated based at least in part on transmitting the set of contextual information;
• and
• transmit, to the first application, the indication based at least in part on receiving the indication from the first user.