Systems and methods to secure user identification

1. A method, comprising:

communicating, by a computing device, with a user device to receive information about a user of the user device;

forming, by the computing device, a dataset including

the information about the user received from the user device, and

a first identifier of the user used by the computing device to identify the user from a plurality of users of the computing device;

generating, by the computing device, a digital signature on the dataset;

generating, by the computing device, a second identifier of the user using the digital signature, wherein the second identifier is not part of the dataset; and

providing, by the computing device, an instruction to the user device to redirect the user to a server separate from the computing device, the instruction configured to instruct the user device to use the second identifier to identify the user in submitting the information about the user to the server;

wherein the server is configured to validate the information about the user submitted from the user device with the second identifier via

extracting the first identifier and the digital signature from the second identifier;

combining the first identifier extracted from the second identifier with the information about the user submitted from the user device to the server to form a reconstructed dataset;

validating the reconstructed dataset against the digital signature extracted from the second identifier.

2. The method of claim 1 , wherein the generating of the second identifier of the user includes combining the first user identifier and the digital signature to allow the first user identifier and the digital signature to be extracted from the second identifier.

3. The method of claim 2 , further comprising:

assigning, by the computing device, the first identifier to uniquely identify the user among the plurality of users of the computing device.

4. The method of claim 2 , wherein the dataset includes a secret shared between the computing device and the server separate from the computing device.

5. The method of claim 4 , wherein the secret is not communicated between the computing device and the server through the user device.

6. The method of claim 5 , wherein the digital signature comprises a hash of the dataset.

7. The method of claim 2 , wherein the generating of the second identifier of the user includes generating the second identifier of the user using a secret not communicated through the user device, the secret shared between the computing device and the server.

8. The method of claim 1 , wherein the dataset further includes:

a secret shared between the computing device and the server.

9. The method of claim 8 , wherein the secret represents the computing device in the digital signature provided in the identifier of the user.

10. The method of claim 1 , wherein the validating the reconstructed data set against the digital signature extracted from the second identifier of the user includes:

generating a reconstructed digital signature on the reconstructed dataset; and

determining whether the reconstructed digital signature agrees with the digital signature extracted from the second identifier of the user received in the server.

11. The method of claim 1 , wherein the digital signature is generated via applying a cryptographic one-way hash function on the dataset.

12. The method of claim 11 , wherein the cryptographic one-way hash function is based on SHA-256 designed by the National Security Agency (NSA) and published in 2001 by the National Institute of Standards and Technology (NIST) as a U.S. Federal Information Processing Standard.

13. The method of claim 1 , wherein the information about the user includes an identification of the user device extracted from a request received from the user device.

14. A non-transitory computer storage medium storing instructions configured to instruct a computing device to at least:

authenticate, by the computing device, a user of a user device;

form, by the computing device, a dataset including

information about the user received from the user device, and

a first identifier of the user used by the computing device to identify the user from a plurality of users of the computing device;

generate, by the computing device, a digital signature on the dataset;

generate, by the computing device, a second identifier of the user using the digital signature, wherein the second identifier is not part of the dataset; and

provide, by the computing device, an instruction to the user device to redirect the user to a server separate from the computing device, the instruction configured to instruct the user device to use the second identifier to identify the user in submitting the information about the user to the server;

wherein the server is configured to validate the information about the user submitted from the user device with the second identifier via

extracting the first identifier and the digital signature from the second identifier;

combining the first identifier extracted from the second identifier with the information about the user submitted from the user device to the server to form a reconstructed dataset;

validating the reconstructed dataset against the digital signature extracted from the second identifier.

15. The computer storage medium of claim 14 , wherein the instruction comprises a query string for the server, the query string including the second identifier of the user and the information about the user.

16. A computing device, comprising:

at least one microprocessor; and

a memory storing instructions configured to instruct the at least one microprocessor to:

authenticate, by the computing device, a user of a user device;

communicate, by the computing device, with the user device to receive information about the user after authentication of the user of the user device;

form, by the computing device, a dataset including

the information about the user received from the user device, and

a first identifier of the user used by the computing device to identify the user from a plurality of users of the computing device;

generate, by the computing device, a digital signature on the dataset;

generate, by the computing device, a second identifier of the user using the digital signature, wherein the second identifier is not part of the dataset; and

provide, by the computing device, an instruction to the user device to redirect the user to a server separate from the computing device, the instruction configured to instruct the user device to use the second identifier to identify the user in submitting the information about the user to the server;

wherein the server is configured to validate the information about the user submitted from the user device with the second identifier via

extracting the first identifier and the digital signature from the second identifier;

combining the first identifier extracted from the second identifier with the information about the user submitted from the user device to the server to form a reconstructed dataset;

validating the reconstructed dataset against the digital signature extracted from the second identifier.

17. The computing device of claim 16 , wherein the dataset further includes:

a secret shared between the computing device and the server to represent the computing device.

18. The computing device of claim 17 , wherein the digital signature is generated by applying a cryptographic one-way hash function on the dataset to obtain a hash value; and the first user identifier and the hash value are extractable from the second identifier of the user.

19. The method of claim 1 , further comprising:

authenticating, by the computing device, the user of the user device, wherein the information about the user is received in the computing device after the user of the user device is authenticated by the computing device.