Systems and methods for authentication using a cryptographic one-time passcode

An apparatus comprising:

• communications hardware configured to:
• transmit, via a first channel, a first authentication response to a verification system,
• receive, via a second channel, an authentication request comprising a COTP token, wherein the COTP token is digitally signed with a first digital signature associated with the verification system,
• present, to a user, a confirmation prompt based on the authentication request, and
• receive an indication of user input in response to the confirmation prompt;
• cryptographic operation circuitry configured to:
• in response to the user input confirming the authentication request, generate a candidate COTP token by digitally signing the COTP token with a digital signature associated with a client system,
• wherein the communications hardware is further configured to provide, via the second channel, a second authentication response comprising the candidate COTP token.

A computer program product, the computer program product comprising at least one non-transitory computer-readable storage medium storing software instructions that, when executed, cause an apparatus to:

• transmit, via a first channel, a first authentication response to a verification system;
• receive, via a second channel, an authentication request comprising a COTP token, wherein the COTP token is digitally signed with a first digital signature associated with the verification system;
• present, to a user, a confirmation prompt based on the authentication request;
• receive an indication of user input in response to the confirmation prompt;
• in response to the user input confirming the authentication request, generate a candidate COTP token by digitally signing the COTP token with a digital signature associated with a client system;
• and
• provide, via the second channel, a second authentication response comprising the candidate COTP token.