Multi-Computer System For User Authentication Based on Client-Side One-Time Passcode

A method, comprising:

• receiving, by a computing device, the computing device having at least one processor, and memory, and from a user computing device, a request to register a user and the user computing device for client-side one-time passcode (OTP) functionality, the request to register for client-side OTP functionality being input via an enterprise organization application on the user computing device;
• generating, by the at least one processor, a unique access key, the unique access key being unique to an external entity;
• transmitting, by the at least one processor and to an external entity computing device of the external entity, the unique access key, wherein transmitting the unique access key causes the external entity computing device to transmit the unique access key to the user computing device and store the unique access key via an external entity application on the user computing device;
• receiving, by the at least one processor and from the user computing device and via the external entity application on the user computing device, a request to process a transaction with the external entity, the request to process the transaction including transaction details and the unique access key of the external entity;
• analyzing, by the at least one processor, the request to process the transaction to determine whether one or more criteria are met;
• when it is determined that the one or more criteria are met:
• generating, by the at least one processor, an instruction causing the user computing device to generate a client-side OTP associated with the requested transaction;
• transmitting, by the at least one processor, the instruction causing the user computing device to generate the client-side OTP to the user computing device, wherein transmitting the instruction causes the user computing device to generate the client-side OTP for use in authenticating the user for the transaction;
• when it is determined that the one or more criteria are not met:
• generating, by the at least one processor, a request for additional authentication data;
• transmitting, by the at least one processor, the generated request for additional authentication data to the user computing device;
• and
• cause the request for additional authentication data to display on a display of the user computing device.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

• receive, from a user computing device, a request to register a user and the user computing device for client-side one-time passcode (OTP) functionality, the request to register for client-side OTP functionality being input via an enterprise organization application on the user computing device;
• generate a unique access key, the unique access key being unique to an external entity;
• transmit, to an external entity computing device of the external entity, the unique access key, wherein transmitting the unique access key causes the external entity computing device to transmit the unique access key to the user computing device and store the unique access key via an external entity application on the user computing device;
• receive, from the user computing device and via the external entity application on the user computing device, a request to process a transaction with the external entity, the request to process the transaction including transaction details and the unique access key of the external entity;
• analyze the request to process the transaction to determine whether one or more criteria are met;
• responsive to determining that the one or more criteria are met:
• generate an instruction causing the user computing device to generate a client-side OTP associated with the requested transaction;
• transmit the instruction causing the user computing device to generate the client-side OTP to the user computing device, wherein transmitting the instruction causes the user computing device to generate the client-side OTP for use in authenticating the user for the transaction;
• responsive to determining that the one or more criteria are not met:
• generate a request for additional authentication data;
• transmit the generated request for additional authentication data to the user computing device;
• and
• cause the request for additional authentication data to display on a display of the user computing device.