A non-transitory computer-readable storage medium storing a computer program product comprising computer-executable instructions for managing an Operating System using tokenized identity, which when executed by one or more processors, cause the one or more processors to:
- a) maintain a token repository, wherein the token repository is configured to maintain a user token, a Unique-Number, and a Public-Key corresponding to each user from a set of users;
- b) registering a user by,
- receiving a set of biometric samples of the user corresponding to one or more biometric factors,
- processing the set of biometric samples to compute a Secret-Key (S1) corresponding to the user,
- generating a Unique-Number (N1) using a random number generation algorithm,
- applying a Function (F1) to the Secret-Key (S1) and the Unique-Number (N1) to compute a Public-Key (P1),
- storing the Unique-Number (N1) on a provisioned virtual remote device and in a token repository, wherein the provisioned virtual remote device is a virtual machine corresponding to the user, wherein the provisioned virtual remote device is hosted over a remote server, wherein the token repository is hosted over a centralized server, and
- storing the Public-Key (P1) in the token repository, on the provisioned virtual remote device, and on a thin client application on a personal local device,
- receiving a user input on the thin client application corresponding to one or more immutable attributes of the user,
- generating an immutable attribute token for each immutable attribute, and
- storing the immutable attribute tokens along with the Public-Key (P1) in the token repository;
- c) transmitting to a user, a session signing request from a proxy-user management application, wherein the proxy-user management application is integrated with a device Operating System (OS), wherein the session signing request corresponds to a user-authenticated session, on the device Operating System (OS), wherein the session signing request is received via a thin client session running on a client device;
- d) initiating a first authentication process for authenticating the user via the thin client session by,
- receiving a biometric sample captured from the user in real-time,
- processing the biometric sample to generate a Secret-Key (S2),
- when using a thin client application on a personal local device,
- selecting the Public-Key (P1) from the thin client application;
- fetching the corresponding Public-Key (P1) from the token repository,
- computing a Real-Time-Unique-Number (N2) using the Public-Key (P1), the Secret-Key (S2) and the Function (F1), and
- authenticating the user based on comparison of the Real-Time-Unique-Number (N2) with the Unique-Number (N1) stored in the token repository,
- when using a thin client application on a non-personal local device,
- receiving a user input corresponding to the one or more immutable attributes of the user,
- generating a token corresponding to each of the one or more immutable attributes,
- querying the token repository for one or more tokens,
- fetching the public-keys (P1-Pn) corresponding to the one or more tokens,
- computing a Real-Time-Unique-Number (N2) for each Public-Key (P1-Pn), the Secret-Key (S2) and the Function (F1),
- identifying a target Real-Time-Unique-Number (N2 t), wherein the target Real-Time-Unique-Number (N2 t) matches the Unique-Number (N1) stored in the token repository, and
- authenticating the user based on comparison of the target Real-Time-Unique-Numbers (N2 t) with the Unique-Number (N1) stored in the token repository,
- e) fetching from the token repository, a user token (T1) corresponding to the Unique-Number (N1);
- f) identifying from a set of proxy-user management application instances, a proxy-user management application instance corresponding to the user token (T1);
- g) displaying a request to sign the proxy-user management application session and the corresponding device OS session;
- h) capturing the user's approval to affix the user's biometrically authenticated signature to the session;
- i) initiating a second authentication process;
- and
- j) recording the user's biometrically authenticated signature in the proxy-user management application session log.