Browser Wallet Passkey Authentication for Multi-Session Document Signing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing document management systems require users to rely on passwords or dedicated software applications for authentication, necessitating repeated identity verification for each signature, which is cumbersome and inefficient.
Innovation Solution
Implementing web-based wallet authentication using public keys and passkey challenges, allowing users to sign multiple documents without repeated identity verification, and optionally integrating biometric or two-factor authentication for secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication is used, then users can access document management systems, but users must repeatedly verify identity for each signature and session
Solution Approach 1:
The system performs identity verification in advance by issuing a passkey challenge during initial authentication. The generated passkey serves as a preliminary verified credential that can be used across multiple signing sessions without requiring repeated identity verification, thus resolving the contradiction between security reliability and time loss.
Solution Approach 2:
Instead of repeatedly performing the complex identity verification process, the system creates a copy of the verification result in the form of a passkey. This passkey copy can be presented in subsequent sessions to prove identity without re-running the full verification protocol, reducing time loss while maintaining security.
2Reliability
If dedicated software applications are required for authentication, then security can be maintained, but system complexity and user burden increase
Solution Approach 1:
The passkey authentication mechanism is designed to be universal and can be implemented across multiple platforms and devices without requiring dedicated software applications. The same passkey can be used in web browsers, mobile devices, and desktop applications, eliminating the need for platform-specific software while maintaining security through the standardized passkey challenge-response protocol.
3Ease of operation
If public key authentication is implemented, then password-less access is enabled, but additional authentication mechanisms are needed for new users
Solution Approach 1:
The system enables users to self-generate their own key pairs and automatically map public keys to their accounts through the passkey challenge process. This self-service approach eliminates the need for manual key distribution or complex administrative setup, allowing users to independently configure their authentication credentials while maintaining security.
Data Source
AI summary
Techniques are described for the use and implementation of web-based wallet authentication. An example method includes receiving, by processing circuitry, a request from a computing device for a document package. The document package may include an electronic document and specify a name of a signatory for the electronic document. In response to a determination that the request is associated with a user account, the processing circuitry may initiate a passkey challenge to the computing device using a public key associated with the user account. Responsive to successful completion of the passkey challenge, the processing circuitry may configure the computing device to accept a signature corresponding to the name of the signatory specified for the electronic document. The processing circuitry may implement a document management platform which coordinates with a third-party identification verifier to verify the identity of the signatory and provides password-less authentication for a known signatory.