Abstract: A computer program product that is configured to be executed by a processor is disclosed. The computer program product is configured to store environmental information for a plurality of authentication transactions attempted by a particular user and receive, via a communications network, a request to perform an authentication transaction for the particular user. The request includes a first one-time password and environmental information corresponding to the requested authentication transaction. A risk assessment is performed by comparing the stored and received environmental information and a window is sized for authenticating the user based on the risk assessment. The window may be one or both of an authentication window and a synchronization window. A post-sizing attempt to authenticate the particular user is performed by comparing the first one-time password with the first range of one-time passwords.

Abstract: A method includes receiving, from a user, a request to authenticate. The authentication request may include a user id. The method may also include verifying the user id. The method also includes generating a request for a one-time graphical pattern. The method further includes transmitting the request for the one-time graphical pattern to a server and receiving, from the server, the one-time graphical pattern. The method includes transmitting the one-time graphical pattern to the user and prompting the user to input the graphical pattern. The method may also include receiving the inputted graphical pattern from the user and determining whether the inputted graphical pattern matches the transmitted one-time graphical pattern sent to the user. If the inputted graphical pattern matches the transmitted one-time graphical pattern sent to the user, the method may include authenticating the user.