SECURE ENROLLMENT OF PASSKEYS WITH VERIFIABLE CREDENTIALS

Abstract

A system may be configured for a streamlined and secure process for enrolling passkeys that reduces exposure of the user's credentials, simplifies passkey registration and cancellation, and enables isolated user management with tokenized authorization. A user device may have a digital wallet capable of securely storing credentials and generating a verifiable presentation (VP) of possession of the credentials. When a user of the device attempts to access a resource associated with a relying party, the relying party may forward the request to a verifier system, which may present the device with a quick-response code or other data conveying a specification for the VP. Subject to user approval, the digital wallet may generate the VP and return it to the verifier system. Upon verification of the VP, the relying party may generate an authentication token, which the user may use for continued access to the resource while the token remains valid.

CPC Classifications