Web Wallet Passkey Authentication for Repeated Document Signing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing document management systems require users to rely on passwords or dedicated software applications for authentication, necessitating repeated identity verification for each signature, which is cumbersome and inefficient.
Innovation Solution
Implementing web-based wallet authentication using public keys and passkey challenges, allowing users to sign multiple documents without repeated identity verification, and optionally integrating biometric or two-factor authentication for secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords and dedicated software applications are used for authentication, then security is maintained, but user convenience and operational efficiency deteriorate due to repeated verification requirements
Solution Approach 1:
The patent replaces the mechanical/password-based authentication system with a cryptographic public-key infrastructure. Instead of requiring users to remember and enter passwords repeatedly, the system uses asymmetric cryptography where a public key is stored in a wallet on the user's device and a private key remains secure on the device. This substitution eliminates the mechanical burden of password entry while maintaining security through cryptographic verification.
Solution Approach 2:
The authentication system performs self-service by automatically verifying user identity through cryptographic challenges and responses without requiring manual intervention. The system generates challenges, verifies responses using stored public keys, and automatically authenticates users across multiple sessions without repeated manual authentication, thereby improving convenience while maintaining security.
2Productivity
If repeated identity verification is performed for each signature, then security is maintained, but time consumption and operational overhead increase
Solution Approach 1:
The system performs preliminary action by establishing and storing the user's public key in their wallet before the actual document signing occurs. This pre-configured authentication mechanism allows the system to quickly verify identity without time-consuming repeated verification processes. The public key is prepared in advance and automatically retrieved during authentication, eliminating the need for time-consuming identity verification for each signature.
Solution Approach 2:
The authentication system enables continuity of useful action by maintaining an active, persistent authentication state through stored public keys in the user's wallet. Once authenticated and the public key stored, the system can continuously verify the user's identity across multiple document signing sessions without interruption or repeated verification, thereby maintaining productivity while reducing time loss.
3Productivity
If public key authentication is implemented, then authentication efficiency and productivity are improved, but system complexity increases
Solution Approach 1:
The patent introduces a wallet as an intermediary component that simplifies the public key authentication system. The wallet serves as a mediator between the user's device and the authentication system, storing the public key and managing the cryptographic operations. This intermediary abstraction layer hides the complexity of asymmetric cryptography from the user while maintaining the efficiency benefits, thereby reducing perceived system complexity while improving productivity.
Data Source
AI summary
Techniques are described for the use and implementation of web-based wallet authentication. An example method includes receiving, by processing circuitry, a request from a computing device for a document package. The document package may include an electronic document and specify a name of a signatory for the electronic document. In response to a determination that the request is associated with a user account, the processing circuitry may initiate a passkey challenge to the computing device using a public key associated with the user account. Responsive to successful completion of the passkey challenge, the processing circuitry may configure the computing device to accept a signature corresponding to the name of the signatory specified for the electronic document. The processing circuitry may implement a document management platform which coordinates with a third-party identification verifier to verify the identity of the signatory and provides password-less authentication for a known signatory.