RISK BASED TIME-BASED ONE-TIME PASSWORD (TOTP) AUTHENTICATOR

A computer implemented method of generating a Time based One Time Password (TOTP) comprising a risk assessment index comprising, monitoring an authentication process in which a user provides authentication credentials to enable the code generation device to generate a TOTP for use by a client device associated with the user to access a secure service, calculating a risk index indicating an estimated risk level of the authentication process based on data collected during the authentication process, generating the TOTP based on a unique secret key assigned to the code generation device and a current time, the TOTP is encoded to encode the risk index and outputting the encoded TOTP for transmission to an authentication system adapted to generate an authentication score for the user attempting to access the secure service based on verification of the TOTP and according to the risk index.