FIDO Provider Interoperability via Template-Based Protocol Mapping

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The lack of interoperability between different Fast Identity Online (FIDO) service providers due to mismatched protocols leads to redundant re-authentication, increased storage costs, decreased system performance, and poor user experience, especially when users switch devices or platforms.

Innovation Solution

A server system implements a rule-based model to map authentication information onto templates specific to the target FIDO service provider, enabling seamless authentication by extracting and updating device-specific templates, and using fallback operations to handle missing data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If different FIDO service providers use different FIDO protocols, then each provider can implement their own authentication standards, but interoperability between providers deteriorates

Engineering Contradiction:

Improveprotocol flexibilityVSAvoidinteroperability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a protocol translation layer that acts as an intermediary between different FIDO protocols. This translation layer receives authentication requests from one protocol, translates them to the target protocol format, and forwards them to the appropriate FIDO service provider, thereby enabling interoperability while preserving protocol diversity

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system dynamically changes protocol parameters based on the source and destination FIDO service providers. By adjusting authentication parameters, message formats, and protocol versions according to the specific provider requirements, the system maintains compatibility across different protocol standards

Inventive Principle:

Principle #35Parameter changes

2Reliability

If users authenticate with multiple FIDO service providers, then authentication security is improved, but re-authentication frequency increases

Engineering Contradiction:

Improveauthentication securityVSAvoidre-authentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary authentication with the first FIDO service provider and stores the authentication result. When a subsequent authentication request is received from a different FIDO service provider, the system checks the stored authentication result and reuses it if still valid, avoiding redundant authentication steps

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements a feedback mechanism that tracks authentication status across multiple FIDO service providers. By monitoring authentication results and validity periods, the system can determine whether previously authenticated credentials are still valid for new authentication requests, reducing unnecessary re-authentication

Inventive Principle:

Principle #23Feedback

3Adaptability or versatility

If authentication information is stored across multiple FIDO service providers, then user authentication capability is enhanced, but storage redundancy increases

Engineering Contradiction:

Improveauthentication capabilityVSAvoidstorage redundancy

Core Design Contradiction:

Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent consolidates authentication information storage by maintaining a centralized mapping that links authentication credentials across multiple FIDO service providers. Instead of storing separate authentication data at each provider, the system merges the storage into a unified structure that reduces redundancy while preserving access capability

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The system creates lightweight reference copies of authentication information rather than storing complete duplicate data at each FIDO service provider. These references point to the central storage location, enabling quick access without duplicating the actual authentication credentials

Inventive Principle:

Principle #26Copying

4Reliability

If protocol translation is implemented between FIDO providers, then interoperability is improved, but system complexity increases

Engineering Contradiction:

ImproveinteroperabilityVSAvoidtranslation system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The protocol translation system is segmented into modular components, each handling specific protocol transformations. By dividing the translation functionality into independent modules that can be selectively activated based on the source and target protocols, the system manages complexity through organized separation of concerns

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS20260073387A1Methods and systems for enabling interoperability between different fast identity online (FIDO) service providers

Publication Date: 2026.03.12 MASTERCARD INT INC

AI summary

Embodiments provide methods and systems for enabling interoperability between different Fast Identity Online (FIDO) service providers. A method performed by the server system includes receiving a mismatch resolution request including authentication information from a payment gateway for a FIDO authentication of a user. The method includes extracting a template associated with the second FIDO service provider from a plurality of templates. The method includes mapping, by a rule-based model, the authentication information on the template and transmitting a FIDO authentication request message including the template to the second FIDO service provider. Upon receiving a FIDO authentication response message including an authentication successful flag from the second FIDO service provider, the method includes transmitting an authentication successful message to the payment gateway.