Systems and methods for facilitating user identity verification over a network

A system for facilitating user authentication over a network, the system comprising:

• means for communicating with a user via a user device over the network;
• means for receiving an authentication request from the user via the user device over the network;
• means for analyzing the authentication request to obtain user information, wherein the user information includes a username;
• means for verifying that the system has a first and a second shared secret data related to the user, wherein a shared secrecy of the first and the second shared secret data is maintained between the user and the server, and wherein the first shared secret data includes biometric identification data related to the user stored in the user device and the second shared secret data includes data known by the user;
• means for generating user challenge data;
• means for sending the user challenge data to the user via the user device over the network;
• means for defining one or more relationships between the first shared secret data, the second shared secret data, and the user challenge data;
• means for determining intersection data for the one or more relationships;
• means for calculating first user hash data from the user challenge data and the intersection data;
• means for receiving second user hash data from the user via the user device over the network;
• and
• means for comparing the first user hash data with the second user hash data to authenticate user identity, wherein if user identity is authenticated, then continue communicating with the user via the user device over the network, and wherein if user identity is not authenticated, then abort communicating with the user via the user device over the network.

A non-transitory computer readable medium on which are stored computer readable instructions and when executed by one or more processors of a server are operable to:

• communicate with a user via a user device over a network;
• receive an authentication request from the user via the user device over the network;
• analyze the authentication request to obtain user information, wherein the user information includes a username;
• verify that the server has a first and a second shared secret data related to the user, wherein a shared secrecy of the first and the second shared secret data is maintained between the user and the server, and wherein the first shared secret data includes biometric identification data related to the user stored in the user device and the second shared secret data includes data known by the user;
• generate user challenge data;
• send the user challenge data to the user via the user device over the network;
• define one or more relationships between the first shared secret data, the second shared secret data, and the user challenge data;
• determine intersection data for the one or more relationships;
• calculate first user hash data from the user challenge data and the intersection data;
• receive second user hash data from the user via the user device over the network;
• and
• compare the first user hash data with the second user hash data to authenticate user identity, wherein if user identity is authenticated, then continue communicating with the user via the user device over the network, and wherein if user identity is not authenticated, then abort communicating with the user via the user device over the network.