Patent ID: 11907354
Assignee: CYBERARK SOFTWARE LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 15:
16. A computer-implemented method for passwordless authentication of a user of a client computing device, the method comprising:
sending a request, from the client computing device, for a user of the client computing device to access an access-restricted target resource, the request being associated with a network address for the access-restricted target resource;
intercepting, in conjunction with a security service in communication with a system server, the request before the request can reach the access-restricted target resource, wherein the intercepting is based on a matching operation that compares the network address for the access-restricted target resource with a one or more stored addresses, and includes the system server providing rerouting information for the request to an address associated with a security server;
receiving, from a security server and in response to the request, through a computer-based user interface separate from the client computing device, a unique session identifier, the unique session identifier being displayed or audibly presented to the user, being a one-time use identifier unique to the request, and being generated by the security server in response to the request; and
performing steps to enable authentication of the user through a concurrent verification of an identity of the client computing device and a current physical presence of the user using sensor data, comprising:
receiving a prompt fora physical verification of the user through the client computing device, performing a physical verification of the user, entirely on the client computing device, based on one or more unique physical characteristics of the user and the sensor data, and returning a result of the physical verification concurrently with the received- unique session identifier to the security server for confirmation of the identity of the client computing device associated with the user based on a decoded version of the received unique session identifier and the user's current physical presence at the client computing device based on the result of the physical verification, the unique session identifier being returned through an action by the user on the client computing device as a result of the physical verification;
and conditional on successful physical verification of the user and successful validation of the unique session identifier, establishing a secure tunnel connection between the client computing device and the access-restricted target resource.