ONE ROAD THROUGH HARDWARE & SOFTWARE
Secure Identity.
Verify Intent.
Know not only who’s acting, but what exactly they’re approving.
Our integration platform leverages the apps people already use, and the services behind them, connected as one workflow. Follow the road from the first question, who goes there?, to the exact action a person approves.
- Hardware
- Software
- FIDO Alliance member
- Patent pending
- Hardware
Chrome ID
The dedicated authenticator card: a secure element, on-card fingerprint verification and a color touch display that shows exactly what’s being approved.
- FIDO2
- X.509
- MIFARE DESFire EV3
- Software
Chrome Intent
Secure identity. Verify intent. A standalone FIDO2 relying party and mobile SDK bind each approval to the exact action, on the card or in your iOS or Android app.
- FIDO2 RP
- Mobile SDK
- Exact-action authorization
CHAPTER I
Problem: identity isn’t intent
01 · WHO GOES THERE?
Establishing security
Security starts with identity. How do we confirm it?
Security has always asked two questions: who are you, and what’s your business here? Decades of work went into the first. Chrome Roads answers the second: what exactly is this person approving?
- IDENTITY
Who goes there?
- INTENT
State your business.
“Authentication should not stop at proving identity. It should be possible to prove intent.”
02 · CONFIRM IDENTITY
Securing your identity
Something you know
Secret word, password, PIN
- Forgotten, shared, guessed
Something you have
Key, ID badge, device
- Lost, stolen, duplicated
Something you are
Face, fingerprint, eye scan
- Complex, spoofable
Every factor has a weakness on its own. Combine them, and identity gets much harder to fake.
Multifactor authentication, through history
- 25 AD
Signet ring
+ secret wordA Roman signet ring paired with a secret word: something you have plus something you know, two thousand years ago.
- 1880
Evidence
+ fingerprint
+ crime detailsAround 1880, fingerprints entered forensics, adding something you are to the evidence.
- Today
ATM + PIN
Smartphone + Face IDAn ATM card plus a PIN, or a phone plus Face ID. Multifactor authentication answers “who are you?” well, but not what the person is approving.
03 · STATE YOUR BUSINESS
Confirming your intent
Proving who is acting isn’t enough. What do they intend? Commerce keeps getting faster. Faster commerce makes mistakes and fraud faster too.
Payments went from cash to a single click, and mistakes and fraud got faster too.
Chrome Intent lets a business set the right friction for each action: one click for routine items, identity confirmation, or full confirmation of the exact amount and recipient. Customer outreach works the same way: Notify, Acknowledge, or Match & approve.
- Cash
- Swipe
- Tap
- Click
- Oops!
Variable-speed transactions with Chrome Intent
04 · MORE THAN A SUCCESSFUL LOGIN
What did you actually approve?
FIDO2 made sign-in phishing-resistant. It proves who signed in, not what they approved. Chrome Intent closes that gap.
OpenAI, Anthropic, AWS, Microsoft and more than 100 other organizations have warned that AI is making sophisticated attacks cheaper and more accessible, leaving a limited window to strengthen defenses.
EXAMPLE: A $25,000 WIRE
- 1 · Request
The customer starts the wire in the browser.
- 2 · Attack
Malware changes the amount and destination.
- 3 · Review
The bank sends what it received to the customer’s card or app.
The bank’s systems have no screen of their own, so the bank sends the details it actually received to the customer’s trusted device. If anything changed along the way, the customer sees it before money moves.
- 4 · Decision
The mismatch is visible. The customer rejects it.
AI makes these attacks cheaper, and AI agents now act for people. The question becomes: what, exactly, was authorized?
CHAPTER II
Solution: software first, hardware for higher assurance
05 · CHROME INTENT: VERIFY INTENT
Exact-action authorization
Approval is cryptographically bound to the action and terms the person intended. It starts in the apps people already use.
Exact-action authorization works across web, mobile, messaging, email and voice. Transaction protection, such as confirming wires and payments, is the focus of the patent-pending work.
- 01
Request
The system sends the action and details needing approval.
- 02
Review
The person approves or rejects on an enrolled phone or card.
- 03
Verify
The FIDO2 relying party checks it against the exact action shown.
- 04
Execute
Only the authorized request runs. Changed terms need a new approval.
- 05
Retain evidence
Terms, decision and result are kept together for audit.
USE CASES
- Phishing protection
- Account protection
- Workflow approvals
- Access recovery
- Transaction protection
- Verified outreach
Patent pending.
06 · BUILT FOR INTEGRATION
SoftwareSoftware first, through existing apps
For higher assurance, there’s the card.
The first releases run on the smartphones people already carry, inside existing iOS and Android apps. The Chrome ID card adds a purpose-built device where higher assurance is needed, so customers can start without waiting on hardware.
First releases run on today’s smartphones, inside the customer’s own iOS or Android app.
The standalone FIDO2 relying party needs no other Chrome Roads Identity Platform Server component. The Chrome ID card is the upgrade path for higher assurance.
- MOBILE SDK
Bring approval into your app
Authentication and action confirmation for iOS and Android, with the standalone FIDO2 RP.
- SERVICE APIS
Connect your existing systems
Call the services from your own applications and interface.
- CARD SDK
Build focused card workflows
Specialized enterprise apps running on the card itself.
07 · CHROME ID: BEYOND THE ID BADGE
HardwareA next-generation badge
Identity. Authentication. Access. One card carries four credentials.
Chrome ID hardware is advancing toward pilot use. Panic-button alerts, fall detection and indoor location work through the platform’s integrated services.
Hardware-backed security
Secure element for credentials and cryptography
Fingerprint verification
On-card biometric sensor
Color touch display
1.78-inch screen shows exactly what’s being approved
Connected by design
USB-C, NFC and Bluetooth
Motion sensing
Location-aware and safety uses
Fully programmable
Custom apps through the card SDK
- FIDO2
- X.509
- MIFARE DESFire EV3
Patent-pending extensions for reviewing and confirming specific actions
08 · ONE CARD FOR DOORS & SIGN-IN
HardwareOne card, four credentials
Physical and digital access, brought together, with protection beyond sign-in. The card and the apps run on one platform.
FIDO2 sub-credentials and seed-derived proofs also protect transactions, calls, SMS and email, on the Chrome ID card or in a bank or other mobile app using the mobile SDK.
- FIDO2
Digital access
Phishing-resistant sign-in to websites, apps and online services.
- X.509
Employee identity
Organization-issued certificates, as used in enterprise smart-card and PIV environments.
- SEED-DERIVED KEYS
Trusted device proof
Fresh proofs from a protected TOTP seed confirm the enrolled device, without revealing the seed.
- MIFARE DESFIRE
Physical access
Contactless entry to doors, gates and facilities through compatible readers.
In one transaction, X.509 establishes who the user is in the organization and FIDO2 authenticates access to the service.
On-card fingerprint verification can gate any credential or approval, by organizational policy.
09 · FROM OUR PLATFORM TO YOUR ENTERPRISE
The Identity Platform
Start with the components you need. Expand later. Nine services connect it all to the enterprise.
The Chrome ID card and each of the three service groups are available on their own, so partners and customers can start small and add more later.
Chrome ID card
The dedicated authenticator
- 01
Chrome Intent
Authenticate users and confirm specific actions on the card or in an iOS or Android app.
- 02
Core Card Services
Card communications, messaging and location, with an API into your applications.
- 03
Administrative Services
Configuration, testing and administration, with a reference front end or your own UI.
10 · INTEGRATION & DEPLOYMENT
SoftwareIntegrated services
Nine server-side capabilities connect the card to the enterprise. Where does proving intent matter most?
Panic-button alerts, fall detection, indoor location and messaging to the card are services partners connect to their own systems.
Authentication & transaction confirmation
FIDO2 RP, plus mobile SDK
Card & credential management
Provisioning, battery and device health
Indoor location
Location and proximity for workplace visibility
Messaging to the card
Individual messages, team broadcasts, alerts
Panic-button alerts
Into the emergency response workflow
Fall detection
Motion sensing for safety notices
Door & facility access
MIFARE DESFire EV3 with compatible door systems
Over-the-air updates
Firmware and software across the fleet
Card SDK programmability
Custom apps, interfaces and workflows
CHAPTER III
Market Validated
11 · BUILT TO SERVE ENTERPRISE WORKFLOWS
Use Cases: Where proving intent matters
We reach these markets through partners.
Banking, payments & fraud
Wires, new payees, account changes. License through established banking partners.
Customer account security
Takeover protection, recovery and verified outreach against impersonation.
Workforce identity & access
One badge for doors, sign-in, approvals and workplace safety.
Relationships already built across
- Physical & logical access control
- Healthcare & assisted living
- Utilities, infrastructure & construction
- Education & defense
- Transportation, oil & gas
- Banking & insurance
12 · YOUR EXPERTISE. OUR IDENTITY PLATFORM.
Channel-led go-to-market
There is an entire ecosystem building it.
Who sells it
- Channel partners & VARs
- Systems integrators
- Identity & access-control companies
- OEMs building on the card SDK
- Banks licensing transaction security
Why partners buy
Add value to existing systems: multifactor identity, connected alerts and transaction confirmation inside solutions they already support.
Build with software: APIs and SDKs, with custom apps and hardware for specific markets.
How we earn
- Service & SDK licensing
- Card sales, $20–150 per card
- Recurring support, $5–30 per card per month
- Custom hardware & software, cost-plus
“From campus access to workplace safety, your expertise shapes the application.”
CHAPTER IV
Leadership hires to meet market demands
13 · THE TEAM BEHIND CHROME ROADS
Build a seasoned team that understands customer success
Startup veterans in smart cards, low-power hardware, UX design, systems integrations, security and enterprise sales. This team was assembled to take the company to the next stage of growth.
Fred Covely
CEO
San Diego, CA
Haksoo Kim
Joining in 2027Hardware CTO
San Diego, CA
Emil Uys
Joining in 2027Revenue & Partner Ecosystem
Seattle, WA
Chris Williams
Director
Seattle, WA
Mark O’Donnell
Director
San Diego, CA
Bill Smith
Business Development
San Diego, CA
Albert Michaels
Business Development
Scottsdale, AZ
Keith Huthmacher
Senior Architect Advisor
Pittsburgh, PA
Warren Weiner
Senior Architect Advisor
San Diego, CA
Advisor: Lee Launer, San Diego, CA
14 · THE ROAD SO FAR · Q4 2026
A hybrid hardware/software platform built for the enterprise
Looking back on the past 4 years, we’ve been able to achieve much more than we initially thought possible.
4 yrsengineering
The Chrome ID card, the Chrome Roads Identity Platform Server, Core Card Services for partner integration, and an SDK for OEM partners.
- Secure element, controlled production provisioning
- Match-on-Chip fingerprint & key management
- FIDO2 over USB & NFC; certification underway
- AI-assisted engineering saved hundreds of thousands
Announced July 22, 2026, after four years of focused engineering. FIDO2 works over USB and NFC, with Bluetooth planned and formal certification work underway.
More security. Less friction.
Mobile SDK
Adds Chrome Intent to the iOS and Android app the customer already ships.
FIDO2 RP
Standalone back-end service, called by the systems the customer already runs.
Authenticate · Approve · Notify · Prove across transactions, email, text and calls. Patent pending.
Chrome Intent software has been ready since September 2026. The mobile SDK adds it to a bank’s or enterprise’s existing app, and the FIDO2 relying party is the back-end service their systems call. No card is required.
- Authenticate: passwordless FIDO2.
- Approve: customers see the exact terms before anything happens.
- Notify: every email, text and call confirmed in the app.
- Prove: an audited record of every transaction and contact.
15 · THE ROAD AHEAD · Q4 2026 – Q4 2027
2027: Execute and deliver from pilot to production
Looking forward, here are a few highlights from our near future road map.
ON THE ROAD TO PRODUCTION
- FIDO2 certification
- Mobile SDK release with launch partners
- Rapid provisioning with supply-chain HSM integration
- Over-the-air secure element updates
- Lower-cost manufacturer & new enclosure
- Pilots & channel partner support
- Q4 2026
PROGRAMS & EVENTS
FIDO ALLIANCE · AUTHENTICATE U.S. 2026Industry preview
October 19–21, 2026: identity and intent, in action.
NOWIntegrator’s Preview Program
Staged SDK access, development hardware and direct design support.
PARTNERS & PILOTS
TRUSTED PARTNER · RESELLERDeveloper integration workshop
Integrating the Chrome ID card with a trusted partner’s X.509 PKI software, under a signed MOU.
LOCAL CASINOSecurity & player card pilots
Building on player card prototypes delivered to a local tribe’s IT department.
PASSPORT ID PILOTPassport pilot in an EU country
Reseller-led, starting with 100 cards for the reseller’s sales team.
- Q1 2027
STANDARDS
FIDO ALLIANCEFIDO2 certification
FIDO2 over USB and NFC.
X.509 · TRUSTED PARTNERX.509 PKI pilots
Several hundred cards with a trusted partner’s PKI software.
- Q2 2027
PRODUCTION
PRODUCTION TARGETFirst production release
Preview participants receive priority access.
- Q3 2027
PRODUCTION DELIVERIES
POLICE DEPARTMENT IN INDIAFIDO-certified production cards
Delivery of FIDO-certified production cards.
- Q4 2027
PAID PILOTS
AFRICAN GOVERNMENTGovernment paid pilots
Paid pilots with an African government.
STATE-RUN INFRASTRUCTURE & NATIONAL SECURITYInfrastructure & national security pilots
Pilots with state-run infrastructure & national security organizations.
MANUFACTURING
- V2.3 hardware, pilot-ready
- Higher-quality, lower-cost manufacturer (South Korea under evaluation)
- Redesigned enclosure, design for manufacturing
- E-Ink display & integrated loop antenna
- Production
SALES · CHANNEL-LED
- Resellers & channel partners
- Systems integrators & access-control companies
- OEMs building on the card SDK
- Banks licensing transaction security
- Pilot cards for partner sales teams
Anticipated release windows, not committed delivery dates.
16 · OUT ON THE ROAD
Manufacturing, sales & first pilots
- MANUFACTURING
Pilot-ready hardware, moving to production
- Card hardware V2.3 is fully functional
- Transfer to a higher-quality, lower-cost manufacturer, with South Korea under evaluation
- Redesigned enclosure & design for manufacturing
- Next hardware revision: E-Ink display & integrated loop antenna
- Rapid provisioning with supply-chain HSM integration
- SALES
Channel-led, through partners
- Value-added resellers & channel partners
- Systems integrators & access-control companies
- OEMs building on the card SDK
- Banks licensing transaction security
- Pilot cards supplied to partner sales teams
- TRIBAL CASINO ID CARDS
Player card prototypes delivered
Casino player card prototypes delivered to a local tribe’s IT department.
- EU CITIZEN ID PILOT · Q4 2026
Passport ID pilot in an EU country
- EMEA reseller pilot in an EU country, population 5.96 million
- 100 cards for the reseller’s sales team in Q4 2026
TAKE A CLOSER LOOK
Understand the platform.
LET’S BUILD ON YOUR EXPERTISE
Secure identity.
Verify intent.
Build with Chrome Roads.
Talk through a partner integration, a card pilot,
or a standalone service for your application.