Methods and systems for secure user authentication

A computer system for secure user authentication using a one-time password, comprising:

• a first computing device storing a one-time password application;
• a back-end server storing a valid personal identification number (PIN) value and a valid shared secret for the user;
• the first computing device being programmed for receiving entry of a purported PIN value of the user;
• the first computing device being further programmed for dynamically synthesizing a purported shared secret on the first computing device using the one-time password application using the purported PIN value of the user, wherein no part of the valid PIN value is stored on the first computing device;
• the first computing device being further programmed for generating a purported one-time password value on the first computing device based on the purported shared secret;
• the back-end server being programmed for receiving entry of the purported one-time password value by the back-end server in an attempt to log on the back-end server from a second computing device;
• the back-end server being further programmed for calculating a time frame window of one-time password values by the back-end server;
• and
• the back-end server being additionally programmed for allowing log on to the back-end server from the second computing device when a calculated one-time password value in the window corresponds to the received one-time password value.