Systems and methods for secure online credential authentication

1. A computer-implemented method for secure online credential authentication, the method including:

receiving, at a server, hashed first identification information as a hash from a first identity provider;

accessing, by the server from a database, previously stored hashed identification information stored as a hash in association with a previous identity provider, wherein the previously stored hashed identification information was received by the server as a hash;

comparing, by the server, the hashed first identification information as a hash to the previously stored hashed identification information as a hash, wherein the hashed first identification information was hashed prior to being received by the server, and the previously stored hashed identification information was hashed prior to being received by the server;

comparing, by the server, the first identity provider to the previous identity provider; and

transmitting, by the server, an authentication result based on the comparing the identification information and the comparing the first identity provider to the previous identity provider.

2. The method of claim 1 , further comprising:

storing, by the server, the hashed first identification information as a hash in association with the first identity provider that provided the first identification information in the database when the hashed first identification information as a hash does not match the previously stored hashed identification information as a hash;

receiving, at the server, second identification information from a second identity provider;

accessing, by the server from the database, previously stored hashed identification information stored in association with a previous identity provider;

comparing, by the server, the second identification information to previously stored hashed identification information; and

comparing, by the server, the second identity provider that provided the second identification information to previously stored identity provider stored in association with the previously stored hashed identification information when the second identification information matches previously stored hashed identification information.

3. The method of claim 1 , wherein the hashed first identification information is produced by hashing first identification information using a hashing function.

4. The method of claim 2 , wherein receiving the second identification information from the second identity provider includes:

receiving, at the server, the second identification information from the second identity provider, wherein the second identification includes at least a first portion of the second identification information;

based on receiving the second identification information from the second identity provider, hashing, by the server, the at least first portion of the second identification information by a hashing function to produce a first hashed portion of the second identification information; and

deleting, by the server, the second identification information receiving from the second identity provider.

5. The method of claim 2 , wherein receiving the second identification information from the second identity provider includes:

receiving, at the server, hashed second identification information from the second identity provider.

6. The method of claim 2 , further comprising:

transmitting, by the server, a positive authentication result when the second identification information matches previously stored hashed identification information, and when the second identity provider matches the previously stored identity provider stored in association with the previously stored hashed identification information.

7. The method of claim 3 , wherein the first identification information includes at least a first portion of the first identification information and a second portion of the first identification information.

8. A system for secure online credential authentication, the system including:

a data storage device that stores instructions system for secure online credential authentication; and

one or more processors configured to execute the instructions to perform a method including:

receiving, at a server, hashed first identification information as a hash from a first identity provider;

accessing, by the server from a database, previously stored hashed identification information stored as a hash in association with a previous identity provider, wherein the previously stored hashed identification information was received by the server as a hash;

comparing, by the server, the hashed first identification information as a hash to the previously stored hashed identification information as a hash, wherein the hashed first identification information was hashed prior to being received by the server, and the previously stored hashed identification information was hashed prior to being received by the server;

comparing, by the server, the first identity provider to the previous identity provider; and

transmitting, by the server, an authentication result based on the comparing the identification information and the comparing the first identity provider to the previous identity provider.

9. The system according to claim 8 , wherein the one or more processors are further configured to execute the instructions to perform the method including:

storing, by the server, the hashed first identification information as a hash in association with the first identity provider that provided the first identification information in the database when the hashed first identification information as a hash does not match the previously stored hashed identification information as a hash;

receiving, at the server, second identification information from a second identity provider;

accessing, by the server from the database, previously stored hashed identification information stored in association with a previous identity provider;

comparing, by the server, the second identification information to previously stored hashed identification information; and

comparing, by the server, the second identity provider that provided the second identification information to previously stored identity provider stored in association with the previously stored hashed identification information when the second identification information matches previously stored hashed identification information.

10. The system of claim 8 , wherein the hashed first identification information is produced by hashing first identification information using a hashing function.

11. The system of claim 9 , wherein receiving the second identification information from the second identity provider includes:

receiving, at the server, the second identification information from the second identity provider, wherein the second identification includes at least a first portion of the second identification information;

based on receiving the second identification information from the second identity provider, hashing, by the server, the at least first portion of the second identification information by a hashing function to produce a first hashed portion of the second identification information; and

deleting, by the server, the second identification information receiving from the second identity provider.

12. The system of claim 9 , wherein receiving the second identification information from the second identity provider includes:

receiving, at the server, hashed second identification information from the second identity provider.

13. The system of claim 9 , further comprising:

transmitting, by the server, a positive authentication result when the second identification information matches previously stored hashed identification information, and when the second identity provider matches the previously stored identity provider stored in association with the previously stored hashed identification information.

14. The system of claim 10 , wherein the first identification information includes at least a first portion of the first identification information and a second portion of the first identification information.

15. A non-transitory computer-readable medium storing instructions that, when executed by a computer, cause the computer to perform a method for secure online credential authentication, the method including:

receiving, at a server, hashed first identification information as a hash from a first identity provider;

accessing, by the server from a database, previously stored hashed identification information stored as a hash in association with a previous identity provider, wherein the previously stored hashed identification information was received by the server as a hash;

comparing, by the server, the hashed first identification information as a hash to the previously stored hashed identification information as a hash, wherein the hashed first identification information was hashed prior to being received by the server, and the previously stored hashed identification information was hashed prior to being received by the server;

comparing, by the server, the first identity provider to the previous identity provider; and

transmitting, by the server, an authentication result based on the comparing the identification information and the comparing the first identity provider to the previous identity provider.

16. The computer-readable medium according to claim 15 , further comprising:

storing, by the server, the hashed first identification information as a hash in association with the first identity provider that provided the first identification information in the database when the hashed first identification information as a hash does not match the previously stored hashed identification information as a hash;

receiving, at the server, second identification information from a second identity provider;

accessing, by the server from the database, previously stored hashed identification information stored in association with a previous identity provider;

comparing, by the server, the second identification information to previously stored hashed identification information; and

comparing, by the server, the second identity provider that provided the second identification information to previously stored identity provider stored in association with the previously stored hashed identification information when the second identification information matches previously stored hashed identification information.

17. The computer-readable medium according to claim 15 , wherein the hashed first identification information is produced by hashing first identification information using a hashing function.

18. The computer-readable medium according to claim 16 , wherein receiving the second identification information from the second identity provider includes:

receiving, at the server, the second identification information from the second identity provider, wherein the second identification includes at least a first portion of the second identification information;

based on receiving the second identification information from the second identity provider, hashing, by the server, the at least first portion of the second identification information by a hashing function to produce a first hashed portion of the second identification information; and

deleting, by the server, the second identification information receiving from the second identity provider.

19. The computer-readable medium according to claim 16 , further comprising:

transmitting, by the server, a positive authentication result when the second identification information matches previously stored hashed identification information, and when the second identity provider matches the previously stored identity provider stored in association with the previously stored hashed identification information.

20. The computer-readable medium according to claim 17 , wherein the first identification information includes at least a first portion of the first identification information and a second portion of the first identification information.