FIDO Universal Authentication via Blockchain Intermediary

The patent introduces a trusted third party server that mediates between multiple application service servers and the user's FIDO authentication device. This intermediary manages the public keys and authentication information centrally, allowing the user to register once with the trusted third party rather than with each individual service. The trusted third party then facilitates authentication across multiple domains, reducing the registration burden while maintaining security through centralized key management.

The trusted third party server provides universal authentication functionality across multiple application services and domains. Instead of requiring separate FIDO device registrations for each service, the system enables a single FIDO device to authenticate across multiple services through the trusted third party's coordination. This multi-functional approach allows one authentication mechanism to serve multiple purposes and services.

The trusted third party server acts as an intermediary that stores and manages the public keys corresponding to the user's private keys. Instead of requiring the user's FIDO device to store multiple private keys for different services, the system stores the necessary public key information centrally at the trusted third party. This reduces the storage burden on the user's device while maintaining the ability to authenticate across multiple services.

The system uses public keys as copies or representations of the authentication credentials, which can be stored and shared across multiple services without exposing the actual private keys. The trusted third party stores public key information that can be used by multiple application services to verify authentication, eliminating the need to store multiple private key copies in the user's device.

The system performs preliminary authentication setup through a single registration process with the trusted third party server. During this initial action, the user's FIDO device is registered and public keys are established once. This preliminary setup enables subsequent authentication across multiple services without requiring repeated registration processes, saving time while maintaining security through the pre-established cryptographic credentials.

The single FIDO registration process with the trusted third party provides universal authentication capability across multiple application services. Instead of performing separate registration actions for each service, the initial registration creates a universal authentication mechanism that works across domains, reducing the time investment required while maintaining service-specific security through the trusted third party's coordination.