Secure and Anonymized Authentication

An article of manufacture including a non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by a computing system, cause the computing system to perform operations comprising:

• receiving a message from a wireless service provider system, wherein the message contains a service-provider-based identity of a client device served by the wireless service provider, an indication that the service-provider-based identity has been authenticated by the wireless service provider, and a multi-part code that identifies (i) an entity associated with the client device, (ii) a transaction, and (iii) a server device with which the client device is seeking to conduct the transaction on behalf of the entity;
• generating an anonymized identity of the client device, wherein the anonymized identity is generated by applying a one-way function to the service-provider-based identity and the multi-part code;
• verifying that conducting the transaction with the server device is within the authorized capabilities of the anonymized identity;
• and
• transmitting an instruction to the server device, wherein the instruction directs the server device to carry out the transaction with the client device.

A computing system comprising:

• a processor;
• memory;
• and
• program instructions, stored in the memory, that upon execution by the processor cause the computing system to perform operations comprising:
• receiving a message from a wireless service provider system, wherein the message contains a service-provider-based identity of a client device served by the wireless service provider, an indication that the service-provider-based identity has been authenticated by the wireless service provider, and a multi-part code that identifies (i) an entity associated with the client device, (ii) a transaction, and (iii) a server device with which the client device is seeking to conduct the transaction on behalf of the entity;
• generating an anonymized identity of the client device, wherein the anonymized identity is generated by applying a one-way function to the service-provider-based identity and the multi-part code;
• verifying that conducting the transaction with the server device is within the authorized capabilities of the anonymized identity;
• and
• transmitting an instruction to the server device, wherein the instruction directs the server device to carry out the transaction with the client device.