Patent ID: 11917069
Assignee: CITICORP CREDIT SERVICES, INC. (USA)
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 10:
11. A system for secure user authentication, the system comprising:
a validation server having a processor coupled to memory that executes a one-time password (OTP) generator, the validation server being programmed for:
receiving a PIN from a first user device associated with a user, wherein the PIN is not stored at the user device;
dynamically generating a shared secret based upon the PIN received from the user device and personalized OTP data;
generating an OTP based on the shared secret and one or more moving factors of the OTP generator, wherein the OTP has a time-sensitive expiration according to at least one moving factor;
presenting the OTP for display on a graphical user interface for the user via a first channel;
receiving via a second channel the OTP and a user credential associated with the user from a challenge website of a second server coupled to the validation server; and
responsive to the validation server determining that the user credential and the OTP received from the challenge web site is valid according to a record of the user stored in a non-transitory machine-readable storage media:
transmitting access rights for the challenge web site of the second server for the user according to the record of the user.