Authenticator

Full Title or Meme

Authenticators are devices in the user possession that can generate a one-time password.

Context

• Authenticators may be independent hardware devices, or may be software running on a User Device that contains a Trusted Execution Environment to hold user Credentials that are used to create claims for the user.

Problem

Give users a hand-held device that can generate secured claims for access to secure accounts.

Solution

• The page One-Time Password Authenticator has a description of one type of Authenticator.
• [https://w3c.github.io/webauthn/#authentication-assertion Web Authentication Authenticator.