Systems and methods for secure and efficient
user authentication on shared mobile devices, such as smartphones and tablets. This solution leverages the capabilities of RFID / NFC cards, access cards, and biometric sensors to establish seamless and personalized
user authentication. An authenticator application communicates with a remote
authentication service to either register passkeys locally for platform-wide use or forward
authentication requests for remote
processing, depending on configuration. The authenticator application orchestrates communication between the user,
mobile device, and
authentication service, creating a secure framework for various applications. Upon successful authentication, the
system transforms the
mobile device into a platform authenticator, making passkeys available across
native apps and browsers. This
system enhances security by integrating user identifiers with hosted authenticators that are securely managed by the authentication service. By tapping NFC-enabled cards or utilizing a bridge device for
data extraction, users can seamlessly engage with the shared
mobile device environment, benefitting from robust security measures associated with FIDO authentication. The
system encompasses the bridge device, which serves as an intermediary for
data transmission, efficiently communicating between RFID / NFC devices and mobile devices using
Bluetooth Low Energy (BLE) technology. Biometric authentication operates similarly to RFID / NFC-based methods, where user identity is verified through an authentication service, and passkey support is provided for that specific user. The authentication service hosts user authenticators and passkeys in a secure, transportable format, configurable to be fetched to shared mobile devices or handled remotely. This system allows adaptable FIDO2 / WebAuthn security protocols across multiple devices, enhancing user convenience while ensuring
system integrity and security in shared device scenarios.