Authentication of a user and/or a device through parallel synchronous update of immutable hash histories

A computer-implemented method for authenticating a user in association with an authorization request, the method comprising:

• receiving an authorization request from a device to utilize a protected resource stored in a datastore of a server;
• receiving an identity claim from at least one of the first device and a second device associated with the first device, the identity claim comprising a device root hash computed by a hash function dependent on a dataset comprising one or more transaction records of previous identity claims;
• retrieving data of a user profile associated with at least one of the first device and a user of the first device, the user profile comprising a hash history of the profile, referred to as a profile hastory,
• wherein the profile hastory comprising a set of blocks in a sequential chain, the set of blocks comprising one or more transaction records of previous identity claims;
• extracting the profile root hash from the user profile associated with at least one of the first device and the user of the first device;
• comparing the device root hash with the profile root hash of the profile hastory to verify an identity of at least one of the first device and the user of the first device;
• and
• determining that the device root hash and the profile root hash are identical.

A system comprising:

• a datastore server, to:
• store a protected resource and transmit the protected resource to a first device upon authentication of at least one of the first device and a user of the first device;
• a network;
• a mediation server, to:
• receive at least one of an authentication request from the first device to access the datastore and an authorization request from the first device to utilize the protected resource, and
• receive an identity claim from the device comprising a device root hash;
• a profile server, to:
• transmit data of a user profile associated with at least one of the first device and the user of the first device, the user profile comprising a hash history of the profile, referred to as a profile hastory, the profile hastory comprising a profile root hash computed by the hash function with inputs comprising a previous transaction record along with a penultimate hash value of the profile hastory,
• wherein the profile hastory comprising a set of blocks in a sequential chain, each block of the set of blocks including a transaction record of a set of previous transactions in which the at least one of the first device and the user participated;
• and
• the first device, to:
• transmit the identity claim comprising the device root hash, the hash value computed by a hash function with inputs comprising a previous transaction record along with a penultimate hash value of a hash history of the device, the hash history of the device referred to as a device hastory.