Systems and methods for secure authentication of transactions initiated at a client device

An authentication computing device for authenticating a cardholder for a candidate purchase associated with the cardholder, the authentication computing device comprising a processor and a memory in communication with the processor, wherein the processor is programmed to:

• receive authentication profile associated with the cardholder during an enrollment process for an authentication service;
• store the authentication profile within the memory;
• receive an authentication request for the candidate purchase over a first communication link, the candidate purchase initiated at a client device, wherein the authentication request indicates an initiator is authorized to make the candidate purchase by the cardholder;
• retrieve the stored authentication profile from the memory;
• generate a challenge message based on the stored authentication profile;
• transmit the challenge message to a user device over a second communication link, the first communication link different from the second communication link;
• receive a challenge response including authentication profile collected from the user device;
• compare the collected authentication profile to the stored authentication profile;
• and
• authenticate the cardholder for the candidate purchase based on the comparison.

Computer-readable storage media for authenticating a cardholder for a candidate purchase associated with the cardholder, the computer-readable storage media having computer-executable instructions embodied thereon, wherein, when executed by at least one processor, the computer-executable instructions cause the processor to:

• receive authentication profile associated with the cardholder from the cardholder during an enrollment process for an authentication service;
• store the authentication profile in a memory in communication with the processor;
• receive an authentication request for the candidate purchase over a first communication link, the candidate purchase initiated at a client device, wherein the authentication request indicates an initiator is authorized to make the candidate purchase by the cardholder;
• retrieve the stored authentication profile from the memory;
• generate a challenge message based on the stored authentication profile;
• transmit the challenge message to a user device over a second communication link, the first communication link different from the second communication link;
• receive a challenge response including authentication profile collected from the user device;
• compare the collected authentication profile to the stored authentication profile;
• and
• authenticate the cardholder for the candidate purchase based on the comparison.