System and method for cross-channel authentication

An authentication method comprising:

• storing, using a processor, a user account identifier associated with a user account, wherein the user account is associated with an enterprise;
• receiving at least one user credential;
• authenticating, using the processor, the user account based at least in part on the at least one user credential;
• receiving a first request after authenticating the user account, from a mobile device associated with the user account, to generate a one-time password;
• generating, using the processor, the one-time password in response to receiving the first request;
• associating, using the processor, the one-time password to the user account;
• communicating, using the processor, the one-time password to the mobile device associated with the user account;
• receiving a second request, from a transaction device associated with the enterprise, the second request comprising an attempted one-time password, wherein the transaction device is an automated teller machine (ATM);
• determining whether the attempted one-time password is valid;
• and
• communicating, to the transaction device, an indication that the attempted one-time password is valid in response to determining that the attempted one-time password is valid.

An authentication system comprising:

• a memory operable to:
• store a user account identifier associated with a user account, wherein the user account is associated with an enterprise;
• and
• a processor communicatively coupled to the memory, the memory including executable instructions that upon execution cause the system to:
• receive at least one user credential;
• authenticate the user account based at least in part on the at least one user credential;
• receive a first request after authenticating the user account, from a mobile device associated with the user account, to generate a one-time password;
• generate the one-time password in response to receiving the first request, wherein the one-time password comprises a quick response code;
• associate the one-time password to the user account;
• communicate the one-time password to the mobile device associated with the user account;
• receive a second request, from a transaction device associated with the enterprise, wherein the transaction device is an automated teller machine (ATM), the second request comprising:
• an attempted one-time password;
• and
• a mobile device identifier;
• determine whether the attempted one-time password is valid;
• and
• communicate, to the transaction device, an indication that the attempted one-time password is valid in response to determining that the attempted one-time password is valid.