User verification system and method

A resource provider computer comprising:

• a processor;
• and
• a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor for implementing a method comprising:
• receiving, from a client device, a checkout request for a transaction between a user operating the client device and a resource provider operating the resource provider computer, the resource provider computer and the client device communicating via a first communication channel;
• obtaining a first one-time code;
• displaying the first one-time code to the user on the client device;
• determining an indication that the first one-time code matches a second one-time code that was provided by the user through a second communication channel that is different than the first communication channel;
• and
• allowing the transaction to continue based on the determination that the first one-time code matches the second one-time code.

A method comprising:

• receiving, by an authentication server computer from a resource provider computer, a request for a one-time code, after the resource provider computer receives from a client device, a checkout request for a transaction between a user operating the client device and a resource provider operating the resource provider computer, the resource provider computer and the client device communicating via a first communication channel;
• generating, by the authentication server computer, a first one-time code;
• transmitting, by the authentication server computer, the first one-time code to the client device;
• receiving, by the authentication server computer, a second one-time code from a mobile device;
• comparing, by the authentication server computer, the first one-time code to the second one-time code via a second communication channel;
• and
• transmitting, by the authentication server computer to the resource provider computer, an indication that the first one-time code and the second one-time code match, wherein the resource provider computer thereafter allows the transaction to proceed.