Patent ID: 11936671
Assignee: KOLIDE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. An apparatus configured to deliver a service, comprising:
a processor; and
computer memory holding computer program code executed by the processor, the computer program code configured to:
provide a client device an agent configured to execute at a local loopback interface of the client device; and
during an authentication flow initiated from the client device and that seeks access to a protected resource:
provide the client device a script configured to execute in a browser of the client device;
respond to a request received from the client device in response to execution of the script to generate and provide the client device a challenge;
receive a blob from the client device, the blob having been generated at the client device by the script having been further executed to deliver the
challenge to the agent via the local loopback interface, to receive from the agent an image that encodes given information, to extract and transform the given information into the blob, and to output the blob to the apparatus; and
respond to receipt of the blob to recover the given information and use the given information so recovered to verify that the authentication flow is permitted to continue using the client device.