System and method to leverage hardware-based device identity for cookieless session tracking

A method, comprising:

• receiving a first encrypted message from a first digital network interface, wherein:
• the first encrypted message includes one or more identifiers signed using one or more private keys;
• the first encrypted message is encrypted as part of one or more operations configured to request access to a first plurality of network resources via the first digital network interface;
• and
• the one or more identifiers reference a service identifier that is associated with a service;
• extracting the one or more identifiers from the first encrypted message;
• validating a signature associated with the one or more identifiers,
• determining whether the one or more identifiers at least partially match at least one session identifier associated with a saved session in a secure database;
• in response to determining that the one or more identifiers at least partially match the at least one session identifier associated with the saved session in the secure database, transmitting an authentication approval to the first digital network interface;
• and
• in response to transmitting the authentication approval to the first digital network interface, enabling access to the first plurality of network resources via the first digital network interface.

A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:

• receiving a first encrypted message from a first digital network interface, wherein:
• the first encrypted message includes one or more identifiers signed using one or more private keys;
• the first encrypted message is encrypted as part of one or more operations configured to request access to a first plurality of network resources via the first digital network interface;
• and
• the one or more identifiers reference a service identifier that is associated with a service;
• extracting the one or more identifiers from the first encrypted message;
• validating a signature associated with the one or more identifiers;
• determining whether the one or more identifiers at least partially match at least one session identifier associated with a saved session in a secure database;
• in response to determining that the one or more identifiers at least partially match the at least one session identifier associated with the saved session in the secure database, transmitting an authentication approval to the first digital network interface;
• and
• in response to transmitting the authentication approval to the first digital network interface, enabling access to the first plurality of network resources via the first digital network interface.