System, design and process for strong authentication using bidirectional OTP and out-of-band multichannel authentication

A method for authentication in a system comprising a user, a service client, a service server, a portable communications device, and an authentication server, wherein the method comprises:

• providing a login portal for access by a user, said login portal being in communication with said service server;
• transmitting user identification information from the login portal to the service server;
• generating a barcode at the service server, wherein the step of generating the barcode includes generating a barcode using the identification information and encrypting third party credentials of the service server,
• transmitting the barcode by the service server to the service client through at least a first communications channel;
• displaying the barcode by the service client;
• capturing the barcode with a portable communications device;
• decoding the barcode and decrypting the third party server credentials to obtain user information and third party server credentials;
• transmitting the user information and third party server credentials to an authentication server via a outbound out-of-band communications channel by the handheld communications device;
• the authentication server comparing the user information and third party server credentials to a database of user information and a database of third party server credentials, and the authentication server authenticating the user information and third party server credentials to obtain authentication results;
• the authentication server transmitting the authentication results to the service server;
• the service server transmitting the authentication results to the service client;
• and the service client and the service server establishing a secure communication if the authentication results are positive.