System, method, and program product for processing secure transactions within a cloud computing system

A method comprising:

• (a) receiving, at a web server of a computing system from a user device, an electronic login request comprising user credentials;
• (b) transmitting, from the web server to an identity provider sub-system of the computing system, the user credentials for verification based at least in part upon reference user credentials stored in non-transitory computer-readable memory, wherein the identity provider sub-system is configured to authenticate user sessions;
• (c) receiving, at the web server from the identity provider sub-system, a first signed identity provider data packet having a first payload comprising first login credential verification information, a first timestamp, a session identifier, and a first identity provider sub-system digital signature, wherein the first signed identity provider data packet provides an indication that a user session is authenticated and wherein the first identity provider sub-system digital signature is generated by generating a hash of the first payload and encrypting the hash using a first identity provider sub-system private key;
• (d) generating, by the web server, first display data;
• (e) transmitting, from the web server to the user device, the first signed identity provider data packet;
• (f) transmitting, from the web server to the user device, the first display data;
• (g) receiving, at the web server from the user device, the first signed identity provider data packet;
• (h) receiving, at the web server from the user device, a user data packet requiring processing by the computing system;
• (i) transmitting, from the web server to a processing sub-system of the computing system, an electronic request for processing based at least in part upon the user data packet;
• (j) transmitting, from the web server to the processing sub-system, the first signed identity provider data packet so that the processing sub-system can verify that the user session is authenticated;
• (k) receiving, at the web server from the processing sub-system, first processed data;
• (l) transmitting, from the web server to the identity provider sub-system, the first signed identity provider data packet along with an electronic request to update the first signed identity provider data packet;
• (m) receiving, at the web server from the identity provider sub-system, a second signed identity provider data packet having a second payload comprising the first login credential verification information, a second timestamp, the session identifier, and a second identity provider sub-system digital signature, wherein the second signed identity provider data packet provides an updated indication that the user session remains authenticated and wherein the second identity provider sub-system digital signature is generated by generating a second hash of the second payload and encrypting the second hash using the first identity provider sub-system private key;
• (n) generating, by the web server, second display data based at least in part upon the first processed data;
• (o) transmitting, from the web server to the user device, the second signed identity provider data packet;
• and
• (p) transmitting, from the web server to the user device, the second display data.