SYSTEMS AND METHODS TO SECURE USER IDENTIFICATION

摘要

A computing apparatus configured to verify a digital signature applied on a set of data received from a user device, including a user ID assigned by a partner system to uniquely identify a user of the user device among customers of the partner system, and a user device identifier identifying the user device. The digital signature is generated via applying a cryptographic one-way hash function on a combination of the set of data and a secret, shared between the computing apparatus and the partner system via a secure communication channel separate from a channel used to receive the set of data.

主权项

1. A method, comprising:
authenticating, by a computing device, a user of a user device; communicating, by the computing device, with the user device to receive information about the user; forming, by the computing device, a dataset including the information about the user; generating, by the computing device, a digital signature on the dataset; generating, by the computing device, an identifier of the user using the digital signature; and providing, by the computing device, an instruction to the user device to redirect the user to a server separate from the computing device, the instruction configured to instruct the user device to use the identifier generated using the digital signature to identify the user in submitting the information about the user to the server; wherein the information about the user submitted with the identifier to the server is to be validate against the digital signature associated with the identifier to indicate that
the user has been authenticated by the computing device, andthe information about the user submitted with the identifier of the user has not been tempered with.