System and method for forwarding authentication requests to a nearby authenticator
Systems and methods that involve receiving an authentication request initiated by a relying party application on a computing device via Web Authentication (WebAuthn) interface; connecting to a nearby companion device; forwarding the authentication request to the authenticator on the companion device; receiving a response to that authentication request from the authenticator on the companion device; and transmitting the authentication response back to the sender application on the computing device for authentication purposes.
1. A system for forwarding authentication requests to an authenticator, the system comprising:
a computing device with an operating system, a software protocol, and a web browser application that is configured with a WebAuthn Application Program Interface (API) to access a relying party application, the computing device having access to a network, the computing device using a standard transport for authentication;
an authenticator application on a companion device accessible through a personal network used as an entity that can be trusted for authentication purposes;
a physical device configured to receive authentication requests on the standard transport, to detect a communication tap of the companion device using signal monitoring, to initiate a connection with the companion device, to exchange authentication requests with the authenticator application on the companion device, and to write an appropriate authentication response on the same standard transport of the computing device that is used for authentication;
a simulated virtual assistant device containing a virtual driver and an assistant service installed on the computing device configured to receive authentication requests on the standard transport, to locate the companion device through the network, to initiate a connection with the companion device, to exchange authentication requests with the authenticator application on the companion device, and to write an appropriate authentication response on the same standard transport of the computing device that is used for authentication;
a messaging service application accessible to applications on the computing device and the companion device through the network configured to facilitate communication between the computing device and the authenticator application on the companion device.
2. The system of claim 1 , wherein the simulated virtual assistant device communicates with the authenticator application on the companion device for authentication instead of the physical device communicating with the authenticator application on the companion device for authentication.
3. The system of claim 1 , wherein the system communicates with the authenticator application on the companion device using the simulated virtual assistant device and not using the physical device.
4. The system of claim 1 wherein the simulated virtual assistant device simulates a standard compatible device for authentication using the standard transport.
5. The system of claim 1 , wherein the computing device uses Human Interface Device protocol for authentication using the standard transport.
6. The system of claim 1 , wherein the standard transport is selected from the group consisting of USB, NFC and Bluetooth.
7. The system of claim 1 , wherein the personal network is a Bluetooth Low Energy network.
8. The system of claim 1 , wherein the authentication requests are initiated at the relying party application or a website accessed by the web browser application using the WebAuthn API for authentication purposes.
9. The system of claim 1 , wherein the authenticator application registers a user with a given relying party application using a registered public key credential, and asserts possession of the registered public key credential.
10. The system of claim 9 wherein the authenticator application verifies the user when requested by the relying party application.
11. The system of claim 1 , wherein the WebAuthn API defines a standard web interface enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications to strongly authenticate users.
12. The system of claim 1 , wherein an authentication request can start a registration process in which a public key credential is created on the authenticator application, and scoped to the relying party application with a user's account.
13. The system of claim 1 , wherein an authentication request can start an authentication process in which the relying party application is presented with an authentication assertion proving the presence and consent of a user who registered a public key credential, or other authentication operation defined in WebAuthn standard interface used by the relying party application for authentication purposes.