PrismEco, Use Case Demonstration: The Complete Authentication Triangle, Biometrics, NFC, and Zero-Knowledge Proof in One Flow

PrismEco is the showcase demonstration of the Prism Ecosystem. Where the other component demos each illustrate one capability in isolation, PrismEco shows the complete authentication triangle in a single flow: biometric authentication via WebAuthn, a Zero-Knowledge Proof generated in the browser, and NFC presence verification via a physical tag. This technical note follows a single user through the complete login flow on prismeco.globalsecurity.nu. At each step, it documents what the server receives and what it does not receive. The goal is to make visible what is structurally invisible by design: that a working authentication system can process a login without ever knowing who the user is. The three factors are verified independently and must all succeed for the session to open. No single factor is sufficient on its own. The combination is structurally resistant to remote attacks: an attacker would need to compromise biometrics, the device, and physical proximity simultaneously. The complete authentication triangle has been proven in a working PoC as of 12 June 2026. WebAuthn registration and login, ZKP generation and server-side verification (proven 10 June 2026), and NFC tap confirmation with RELAY_TOKEN verification (proven 12 June 2026) all function as an integrated flow on live infrastructure at prismeco.globalsecurity.nu. Screenshots in this document are taken from the live running demonstration. All claims are classified by status: proven in PoC, follows from open standard, or architectural design choice. Part of the Prism Ecosystem. Full technical architecture: The Prism Protocol, Invention Disclosure v20, DOI: 10.5281/zenodo.20029291.