Passwordless authentication through use of device tokens or web browser cookies

A system comprising:

• a non-transitory memory;
• and
• one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the one or more hardware processors to perform operations comprising:
• receiving a first transaction processing request for a transaction between a user and a merchant from a first communication device of the user, wherein the first transaction processing request comprises transaction information for the transaction and user information for the user;
• determining, using the user information, that the user does not have an account with a service provider;
• automatically generating the account for the user using at least the user information, wherein the account is automatically generated to be accessible via a password;
• receiving first device information for the first communication device of the user via a secure communication channel;
• generating a first hash value of the first device information using a hashing function;
• generating, using at least the first hash value, a first token for authentication by the service provider of the account;
• communicating the first token to the first communication device of the user through the secure communication channel;
• providing, on a plurality of merchant websites, a checkout process that automatically authenticates the first communication device using the first token;
• requesting the first token from the first communication device via the checkout process on one of the plurality of merchant websites;
• automatically receiving, without user input from the first communication device, the first token via the checkout process from the one of the plurality of merchant websites;
• authenticating the first communication device for the account with the checkout process on the one of the plurality of merchant websites;
• receiving, from a second communication device different from the first communication device, a second transaction processing request comprising the user information for the user and second device information for the second communication device, wherein the second transaction processing request is received without the first token from the checkout process;
• determining the account using the user information;
• requesting user identification information for the user based on the receiving the second transaction processing request without the first token;
• receiving the user identification information from the second communication device with the second transaction processing request;
• and
• issuing a second token to the second communication device based on a second hash value of the second device information using the hashing function.

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable by at least one hardware processor to cause the at least one hardware processor to perform operations comprising:

• receiving a first transaction processing request for a transaction between a user and a merchant from a first communication device of the user, wherein the first transaction processing request comprises transaction information for the transaction and user information for the user;
• determining, using the user information, that the user does not have an account with a service provider;
• automatically generating the account for the user using at least the user information, wherein the account is automatically generated to be accessible via a password;
• receiving first device information for the first communication device of the user via a secure communication channel;
• generating a first hash value of the first device information using a hashing function;
• generating, using at least the first hash value, a first token for authentication by the service provider of the account;
• communicating the first token to the first communication device of the user through the secure communication channel;
• providing, on a plurality of merchant websites, a checkout process that automatically authenticates the first communication device using the first token;
• requesting the first token from the first communication device via the checkout process on one of the plurality of merchant websites;
• automatically receiving, without user input from the first communication device, the first token via the checkout process from the one of the plurality of merchant websites;
• authenticating the first communication device for the account with the checkout process on the one of the plurality of merchant websites;
• receiving, from a second communication device different from the first communication device, a second transaction processing request comprising the user information for the user and second device information for the second communication device, wherein the second transaction processing request is received without the first token from the checkout process;
• determining the account using the user information;
• requesting user identification information for the user based on the receiving the second transaction processing request without the first token;
• receiving the user identification information from the second communication device with the second transaction processing request;
• and
• issuing a second token to the second communication device based on a second hash value of the second device information using the hashing function.