Encoding one-time passwords as audio transmissions including security artifacts

An authentication server computing device in network communication with an audio interface device and a verified user computing device, the authentication server computing device comprising at least one processor in communication with a memory, the processor programmed to:

• receive a service request from the audio interface device, the service request including a service account identifier used by a suspect user to initiate the service request using the audio interface device;
• generate a first audio file including a first audio transmission, the first audio transmission including a primary security artifact and at least one secondary security artifact, wherein the primary security artifact is an encoding of a one-time password;
• store, in the memory, a reference data file including the first audio transmission;
• transmit the first audio file including the first audio transmission to the verified user computing device, the verified user computing device associated in the memory with a legitimate user of the service account identifier;
• receive a second audio file from the audio interface device in response to the verified user computing device automatically playing the first audio transmission for the audio interface device, the second audio file including a second audio transmission;
• verify the second audio transmission by comparing the second audio transmission to the first audio transmission in the stored reference data file, including electronically comparing the second audio transmission to the first audio transmission to match the primary security artifact and the at least one secondary security artifact of the first and second audio transmissions;
• verify the suspect user as the legitimate user of the service account identifier based on verifying the second audio transmission;
• and
• authorize the service request based on the verification of the second audio transmission and the suspect user being the legitimate user.

A non-transitory computer readable medium that includes executable instructions, wherein when executed by an authentication server computing device in network communication with an audio interface device and a verified user computing device and comprising at least one processor in communication with a memory, the executable instructions cause the authentication server computing device to:

• receive a service request from the audio interface device, the service request including a service account identifier used by a suspect user to initiate the service request using the audio interface device;
• generate a first audio file including a first audio transmission, the first audio transmission including a primary security artifact and at least one secondary security artifact, wherein the primary security artifact is an encoding of a one-time password;
• store, in the memory, a reference data file including the first audio transmission;
• transmit the first audio file including the first audio transmission to the verified user computing device, the verified user computing device associated in the memory with a legitimate user of the service account identifier;
• receive a second audio file from the audio interface device in response to the verified user computing device automatically playing the first audio transmission for the audio interface device, the second audio file including a second audio transmission;
• verify the second audio transmission by comparing the second audio transmission to the first audio transmission in the stored reference data file, including electronically comparing the second audio transmission to the first audio transmission to match the primary security artifact and the at least one secondary security artifact of the first and second audio transmissions;
• verify the suspect user as the legitimate user of the service account identifier based on verifying the second audio transmission;
• and
• authorize the service request based on the verification of the second audio transmission and the suspect user being the legitimate user.

A computer-based method for authenticating a user using an audio interface device, said method performed using an authentication server computing device in network communication with the audio interface device and a verified user computing device, the authentication server computing device comprising at least one processor in communication with a memory, said method comprising steps performed by the at least one processor of:

• receiving a service request from the audio interface device, the service request including a service account identifier used by a suspect user to initiate the service request using the audio interface device;
• generating a first audio file including a first audio transmission, the first audio transmission including a primary security artifact and at least one secondary security artifact, wherein the primary security artifact is an encoding of a one-time password;
• storing, in the memory, a reference data file including the first audio transmission;
• transmitting the first audio file including the first audio transmission to the verified user computing device, the verified user computing device associated in the memory with a legitimate user of the service account identifier;
• receiving a second audio file from the audio interface device in response to the verified user computing device automatically playing the first audio transmission for the audio interface device, the second audio file including a second audio transmission;
• verifying the second audio transmission by comparing the second audio transmission to the first audio transmission in the stored reference data file, including electronically comparing the second audio transmission to the first audio transmission to match the primary security artifact and the at least one secondary security artifact of the first and second audio transmissions;
• verifying the suspect user as the legitimate user of the service account identifier based on verifying the second audio transmission;
• and
• authorizing the service request based on the verification of the second audio transmission and the suspect user being the legitimate user.