TECHNICAL FIELD

Embodiments disclosed herein are related to computing systems. More specifically, embodiments disclosed herein are related to computing systems that provide for secure generation of one-time passcodes using a contactless card.

BACKGROUND

One-time passcodes may be used as a second form of authentication. However, one-time passcodes are susceptible to many security risks. For example, if a user leaves their smartphone unlocked in a public place, passersby may have access to any passcodes sent to the device. Similarly, if a malicious user gains access to the device and/or the account where the passcodes are sent, the malicious user may have access to the passcodes. Doing so may allow the malicious user to access account data and other sensitive information.

SUMMARY

Systems, methods, apparatuses, and computer-readable media for secure generation of one-time passcodes using a contactless card. In one example, an operating system (OS) executing on a processor of a device may receive a uniform resource locator (URL) and a cryptogram from a contactless card associated with an account. The OS may launch an application associated with the contactless card. The application may transmit the cryptogram to an authentication server. The application may receive a decryption result from the authentication server indicating the authentication server decrypted the cryptogram. Based on the decryption result, the application may transmit a request for a one-time passcode (OTP) comprising an identifier to the URL. The processor may receive an OTP from an OTP generator at the URL. The application may receive an input value and compare the input value to a copy of the OTP received from the OTP generator. The application may determine that the comparison results in a match, and display, based on the determination that the comparison results in the match, one or more attributes of the account on the device.

