Abstract: Systems and methods for authenticating a user include an application executing on a device which receives, from an authentication server associated with the application, a request to authenticate a user. The application can obtain user authentication information from the user. Responsive to a signal transmitted to a native operating system service on the device, the application can receive current location data from a location sensor of the device. The application can invoke an attestation service of the operating system to obtain device integrity data indicative of one or more operational components of the device. The application can generate a data packet including the user authentication information, the location data, and a digital signature generated by the attestation service, the digital signature corresponding to the location data and the device integrity data, and transmit to the authentication server a response including the data packet.

Abstract: Systems and methods for linking an authentication account to a device may include processor(s) to maintain a plurality of authentication profiles, each authentication profile corresponding to a respective user and including at least one profile image, an immutable identifier, and authentication data used to authenticate the respective user. The processor(s) may receive a request including the device key, an immutable identifier, and a biometric image captured by a camera of a client device. The processor(s) may identify a subset of authentication profiles having respective immutable identifiers that match the immutable identifier from the request. The processor(s) may compare feature(s) extracted from the biometric image of the request to features extracted from the a profile image of the subset of authentication profiles, and link the device key of the client device with an authentication profile in a data structure to register the client device with the authentication server.