Systems and methods for identity verification via third-party digital identity service

An authentication server, comprising:

• at least one processor configured to:
• receive, from a client device, at least one first data packet including i) image data corresponding to a biometric image captured during an authentication process and ii) an identifier identifying a resource server, the at least one first data packet received in connection with a first request for authenticating a user to access a resource of the resource server;
• transmit, to an identity provider, a second request that causes the identity provider to transmit a notification to a registered client device comprising at least one of the client device or a second client device, the identity provider identifying the registered client device based on an association of the registered client device with a digital identity document originating from and issued by the identity provider, the notification requesting the user to grant authorization to the identity provider to transmit identity data corresponding to the digital identity document to the authentication server;
• receive, from the identity provider, at least one second data packet including the identity data corresponding to the digital identity document of the user, the digital identity document including an image of the user, the at least one second data packet received from the identity provider responsive to authorization from the registered client device;
• verify an authenticity of the identity data, based on information included in the at least one second data packet;
• compare the image data of the at least one first data packet and the identity data of the at least one second data packet;
• and
• transmit, using the identifier included in the at least one first data packet, authentication information of the user to the resource server, based on the comparison and the authenticity of the identity data.

A non-transitory computer readable medium storing instructions that, when executed by one or more processors of an authentication server, cause the one or more processors to:

• receive, from a client device, at least one first data packet including i) image data corresponding to a biometric image captured during an authentication process and ii) an identifier identifying a resource server, the at least one first data packet received in connection with a first request for authenticating a user to access a resource of the resource server;
• transmit, to an identity provider, a second request that causes the identity provider to transmit a notification to a registered client device comprising at least one of the client device or a second client device, the identity provider identifying the registered client device based on an association of the registered client device with a digital identity document originating from and issued by the identity provider, the notification requesting the user to grant authorization to the identity provider to transmit identity data corresponding to the digital identity document to the authentication server;
• receive, from the identity provider, at least one second data packet including the identity data corresponding to the digital identity document of the user, the digital identity document including an image of the user, the at least one second data packet received from the identity provider responsive to authorization from the registered client device;
• verify an authenticity of the identity data, based on information included in the at least one second data packet;
• compare the image data of the at least one first data packet and the identity data of the at least one second data packet;
• and
• transmit, using the identifier included in the at least one first data packet, authentication information of the user to the resource server, based on the comparison and the authenticity of the identity data.