Patent ID: 11962580
Assignee: AKAMAI TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A method of authenticating a user to a site, the user having a computing machine and an associated mobile device, comprising:
during a multi-factor authentication (MFA) workflow initiated by the user logging into the site in association with a site page, receiving a request, the request having been generated by an invisible iframe associated with the site page, the iframe having been configured to create the request by (a) catching a message from the site page that passes a random value, (b) retrieving a private key of a browser key pair, and (c) using the private key of the browser key pair to create a signature over an assertion comprising the random value together with a domain name of the site page; and
upon verifying the signature using a public key of the browser key pair, forwarding the assertion to the associated mobile device to facilitate completion of the MFA workflow.