Repeated secondary user authentication

A method, comprising:

• repeatedly performing, by an authentication application executing on a computing device, authentication operations to keep a user authenticated to a service provided by a server computer system, wherein an instance of performing the authentication operations includes:
• receiving an authentication message initiated by an authentication computer system, wherein the authentication message is out-of-band with respect to the service provided to the user, and wherein the authentication message includes a one-time passcode and a particular key identifier, wherein the particular key identifier specifies the service for the user;
• retrieving, using the particular key identifier, a particular key that corresponds to the service for the user;
• generating, without user input, an authentication code based on the one-time passcode and the particular key;
• and
• outputting the authentication code from the authentication application.

An authentication device, comprising:

• a wireless interface configured to receive a plurality of authentication messages initiated by an authentication computer system;
• at least one processor;
• and
• a non-transitory, computer-readable medium having instructions stored thereon that are executable by the at least one processor to perform operations, the operations comprising:
• repeatedly performing, by an authentication application executing on the authentication device, authentication operations to keep a user authenticated to a service provided by a server computer system, wherein an instance of performing the authentication operations includes:
• receiving, via the wireless interface, an authentication message initiated by the authentication computer system, wherein the authentication message is out-of-band with respect to the service provided to the user, and wherein the authentication message includes a one-time passcode and a particular key identifier, wherein the particular key identifier specifies the service for the user;
• retrieving, using the particular key identifier, a particular key that corresponds to the service for the user;
• generating, without user input, an authentication code based on the one-time passcode and the particular key;
• and
• outputting the authentication code from the authentication application.