Native App Authentication Using a Platform-Agnostic WebAuthn Framework

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The WebAuthn protocol, designed for web browsers, is difficult to leverage for native computing applications due to its browser-centric operations, limiting secure passwordless authentication in non-browser-based applications.

Innovation Solution

A platform-agnostic framework is used to integrate WebAuthn with native computing applications, enabling operations like registration and authentication using a cryptographic protocol without relying on web browsers or third-party authenticators, and allowing customization of WebAuthn parameters.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If WebAuthn protocol is used for authentication, then security and convenience of passwordless authentication is improved, but applicability to native computing applications deteriorates due to browser-centric operations

Engineering Contradiction:

Improveauthentication securityVSAvoidapplicability to native applications

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

A platform-agnostic framework acts as an intermediary layer between the WebAuthn protocol and native computing applications. This framework translates WebAuthn's browser-centric operations into platform-neutral operations that can be executed in native environments, enabling WebAuthn functionality without requiring a web browser while maintaining the original security model.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The framework implements universal authentication operations that can function across multiple platforms (mobile, desktop, different operating systems) by abstracting platform-specific details. It provides multi-functional capability to handle both WebAuthn protocol requirements and native application integration needs through a single unified interface.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Ease of operation

If WebAuthn protocol operations are performed by web browsers, then web application authentication is simplified, but integration complexity for native computing applications increases

Engineering Contradiction:

Improveweb application authenticationVSAvoidintegration complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The framework serves as a mediator that absorbs the complexity of WebAuthn protocol implementation details, exposing simplified interfaces to native applications. It handles cryptographic operations, authentication flows, and platform-specific adaptations internally, presenting a unified simple interface to developers.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The framework creates platform-neutral copies of WebAuthn operations by implementing equivalent authentication mechanisms that replicate WebAuthn's security model without requiring actual browser execution. This allows native applications to use WebAuthn-like authentication without depending on browser-specific implementations.

Inventive Principle:

Principle #26Copying

3Ease of manufacture

If platform-specific authentication implementations are used for native applications, then integration with specific platforms is simplified, but cross-platform compatibility and security consistency deteriorate

Engineering Contradiction:

Improveplatform integrationVSAvoidsecurity consistency

Core Design Contradiction:

Ease of manufactureVSStability of the object's composition

Solution Approach 1:

The framework provides a universal authentication implementation that maintains consistent security behavior across all platforms. It implements a single standardized interface that works uniformly on mobile, desktop, and various operating systems, ensuring that security policies and authentication flows remain stable and consistent regardless of the underlying platform.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The framework adapts to different platforms by changing implementation parameters rather than fundamental behavior. It maintains constant security logic while adjusting platform-specific parameters (such as cryptographic module interfaces, biometric authentication methods, or storage mechanisms) to match each platform's capabilities, thereby preserving security consistency while achieving ease of integration.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS12506596B2User authentication techniques for native computing applications

Publication Date: 2025.12.23 OKTA INC

AI summary

A method for user authentication at a client device is described. The method includes obtaining a unique identifier of a user associated with the client device. The method further includes performing a first sequence of operations to register the unique identifier and the client device with a native computing application in accordance with a cryptographic authentication protocol. One or more operations of the first sequence may be performed using a platform-agnostic framework associated with the native computing application. The method further includes performing a second sequence of operations to authenticate the client device and the user of the client device in accordance with the cryptographic authentication protocol. One or more operations of the second sequence may be performed using the platform-agnostic framework. The method further includes accessing the native computing application via the client device based on performing the first sequence of operations and the second sequence of operations.