Patent ID: 11930006
Assignee: IDMELON TECHNOLOGIES INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 9:
10. A method for hosting FIDO authenticators on a local network or a cloud server using dedicated hardware or software security key modules or Hardware Security Modules), comprising:
reading, by an application service, a machine readable unique identifier from a connected device, wherein the connected device has a reader and application programming interface that provides the unique identifier to the application service using a communication link on the computing device, the connected device configured to detect the unique identifier via short-range wireless communication, wherein the machine readable unique identifier uniquely identifies the one or more hosted authenticators to provide an authorization gesture implying the user's interaction with the one or more hosted authenticators while processing the authentication request;
passing the unique identifier to an authenticator hosting service through a network, the authenticator hosting service virtually hosting one or more hosted authenticators within computing applications, and routing authentication requests to a target authenticator of the one or more hosted authenticators;
receiving, at a transport protocol interface is a driver installed on a computing device, an authentication request from Web Authentication (WebAuthn) client software represents a relying party application on the computing device, to exchange authentication requests with the authenticator hosting service through the network, and to write the authentication response which is taken back from the authenticator hosting service on the interface of the computing device that is used for authentication, a computing device having a, an application service, and a transport protocol interface;
accessing the one or more hosted authenticators using the unique identifier for authentication purposes, wherein the one or more hosted authenticators register the user with a given relying party application by creating a credential key pair, and later asserting possession of the registered public key credential using the unique identifier.