Hiding private user data in public signature chains for user authentication in video conferences

1. A method comprising:

receiving, by a video conference provider, identification information associated with a new user device, the new user device associated with the user;

accessing, by the video conference provider, a signature chain associated with the user, the signature chain comprising one or more sequential records;

associating, by the video conference provider, user personal information with the new user device;

generating, by the video conference provider, a cryptographic signature based on cryptographic keys associated with the new user device;

generating, by the video conference provider, an obfuscated representation of the user personal information;

generating, by the video conference provider, a record comprising the identification information, the user personal information, the cryptographic signature, and the obfuscated representation of the user personal information;

generating, by the video conference provider, a cryptographic identifier based on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a latest of the one or more sequential records;

inserting, by the video conference provider, the cryptographic identifier into the record;

appending, by the video conference provider, the record to the signature chain as a sequential record;

receiving, by the video conference provider, a request to join a video conference from the user device, the request identifying the new user device and the user as a participant in the video conference; and

authenticating, by the video conference provider, the user based on the record.

2. The method of claim 1 , further comprising:

receiving a request to delete personal information from the record;

accessing the record;

deleting, by the video conference provider, the personal information from the record; and

wherein the authenticating the user based on the record occurs after deleting the personal information from the record.

3. The method of claim 2 , further comprising, after appending the record to the signature chain as a sequential record:

generating a second record comprising second identification information associated with a second user device, a second cryptographic signature based on second cryptographic keys associated with the second user device, and a second cryptographic identifier based on the second identification information, the second cryptographic signature, and the record.

4. The method of claim 3 , wherein generating the second cryptographic identifier comprises using a cryptographic hashing function on the second identification information, the second cryptographic signature, and the cryptographic identifier of the record.

5. The method of claim 1 , wherein generating the obfuscated representation of the user personal information comprises using a cryptographic hashing function on the user personal information.

6. The method of claim 5 , wherein generating the obfuscated representation of the user personal information further comprises using a cryptographic hashing function on the user personal information and a random numeric value.

7. The method of claim 1 , wherein generating the cryptographic identifier comprises using a cryptographic hashing function on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a second cryptographic identifier of the latest of the one or more sequential records.

8. The method of claim 1 , further comprising verifying the integrity of the signature chain based on auditing the signature chain including the record.

9. A system comprising:

a communications interface;

a non-transitory computer-readable medium; and

one or more processors communicatively coupled to the communications interface and the non-transitory computer-readable medium, the one or more processors configured to execute processor-executable instructions stored in the non-transitory computer-readable medium to:

receive identification information associated with a new user device, the new user device associated with a user;

access a signature chain associated with the user, the signature chain comprising one or more sequential records;

associate user personal information with the new user device;

generate a cryptographic signature based on cryptographic keys associated with the new user device;

generate an obfuscated representation of the user personal information;

generate a record comprising the identification information, the user personal information, the cryptographic signature, and the obfuscated representation of the user personal information;

generate a cryptographic identifier based on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a latest of the one or more sequential records;

insert the cryptographic identifier into the record;

append the record to the signature chain as a sequential record;

receive a request to join a video conference from the user device, the request identifying the new user device and the user as a participant in the video conference; and

authenticate the user based on the record.

10. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to:

receive a request to delete personal information from the record;

access the record;

delete the personal information from the record; and

authenticate the user based on the record after the personal information is deleted from the record.

11. The system of claim 10 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to, after appending the record to the signature chain as a sequential record:

generate a second record comprising second identification information associated with a second user device, a second cryptographic signature based on second cryptographic keys associated with the second user device, and a second cryptographic identifier based on the second identification information, the second cryptographic signature, and the record.

12. The system of claim 11 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the second cryptographic identifier with a cryptographic hashing function on the second identification information, the second cryptographic signature, and the cryptographic identifier of the record.

13. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the obfuscated representation of the user personal information with a cryptographic hashing function on the user personal information.

14. The system of claim 13 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the obfuscated representation of the user personal information with a cryptographic hashing function on the user personal information and a random numeric value.

15. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the cryptographic identifier with a cryptographic hashing function on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a second cryptographic identifier of the latest of the one or more sequential records.

16. The system of claim 9 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to verify the integrity of the signature chain based on auditing the signature chain including the record.

17. A non-transitory computer-readable medium; comprising processor-executable instructions configured to cause a processor to:

receive identification information associated with a new user device, the new user device associated with a user;

access a signature chain associated with the user, the signature chain comprising one or more sequential records;

associate user personal information with the new user device;

generate a cryptographic signature based on cryptographic keys associated with the new user device;

generate an obfuscated representation of the user personal information;

generate a record comprising the identification information, the user personal information, the cryptographic signature, and the obfuscated representation of the user personal information;

generate a cryptographic identifier based on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a latest of the one or more sequential records;

insert the cryptographic identifier into the record;

append the record to the signature chain as a sequential record;

receive a request to join a video conference from the user device, the request identifying the new user device and the user as a participant in the video conference; and

authenticate the user based on the record.

18. The non-transitory computer-readable medium of claim 17 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to:

receive a request to delete personal information from the record;

access the record;

delete the personal information from the record; and

authenticate the user based on the record after the personal information is deleted from the record.

19. The non-transitory computer-readable medium of claim 18 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to, after appending the record to the signature chain as a sequential record:

generate a second record comprising second identification information associated with a second user device, a second cryptographic signature based on second cryptographic keys associated with the second user device, and a second cryptographic identifier based on the second identification information, the second cryptographic signature, and the record.

20. The non-transitory computer-readable medium of claim 19 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the second cryptographic identifier with a cryptographic hashing function on the second identification information, the second cryptographic signature, and the cryptographic identifier of the record.

21. The non-transitory computer-readable medium of claim 17 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the obfuscated representation of the user personal information with a cryptographic hashing function on the user personal information.

22. The non-transitory computer-readable medium of claim 21 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the obfuscated representation of the user personal information with a cryptographic hashing function on the user personal information and a random numeric value.

23. The non-transitory computer-readable medium of claim 17 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to generate the cryptographic identifier with a cryptographic hashing function on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a second cryptographic identifier of the latest of the one or more sequential records.

24. The non-transitory computer-readable medium of claim 17 , wherein the one or more processors are configured to execute further processor-executable instructions stored in the non-transitory computer-readable medium to verify the integrity of the signature chain based on auditing the signature chain including the record.