Identity authentication

A non-transitory computer-readable storage medium having computer-executable program instructions stored thereon that, when executed by a processor, cause the processor to:

• receive a token validation request, wherein the token validation request comprises a soft token stored at a mobile device;
• validate the soft token, wherein the validating comprises retrieving, from a database, customer data associated with the soft token;
• transmit a one-time password and a session ID number;
• receive an identity validation response;
• compare the identity validation response with the one-time password and the session ID number to determine whether the identity validation response includes both the one-time password and the session ID number;
• and
• output account information.

An apparatus comprising:

• a memory;
• a processor, wherein the processor executes computer-executable program instructions which cause the processor to:
• receive a token validation request, wherein the token validation request comprises a soft token stored at a mobile device;
• validate the soft token, wherein the validating comprises retrieving, from a database, customer data associated with the soft token;
• transmit a one-time password and a session ID number;
• receive an identity validation response;
• compare the identity validation response with the one-time password and the session ID number to determine whether the identity validation response includes both the one-time password and the session ID number;
• and
• output account information.