Experience Simpler, Stronger Authentication

EXPERIENCE SIMPLER, STRONGER AUTHENTICATION

1 Data Breaches are out of control

2 IN 2014... 708 data breaches 82 million personal records stolen $3.5 million average cost per breach 3 We have a PASSWORD PROBLEM

4 TOO MANY TO REMEMBER, DIFFICULT TO TYPE, AND TOO VULNERABLE

Re-used Phished Keylogged

5 Adding more authentication has largely been rejected by users

6 ONE-TIME PASSCODES Improve security but aren’t easy enough

SMS Token Poor User Still Reliability Necklace Experience Phishable

7 WE NEED A NEW MODEL Fast IDentity Online 8 THE OLD PARADIGM OTP Passwords PINs 2FA

SECURITY USABILITY

9 ™ SECURITY Strong OTP THE FIDO 2FA PARADIGM

Passwords PINs Weak

Poor Good USABILITY

10 Single Sign-On MODERN AUTHENTICATION Federation

Passwords Strong Risk-Based Authentication

User Management

Physical-to-digital identity

10 HOW DOES FIDO WORK?

USER VERIFICATION FIDO AUTHENTICATION

AUTHENTICATOR

12 Passwordless Experience (FIDO UAF Standards) Success 1 2 3

$10,000

Transfer Now

Transaction Detail User Authentication Done

Second Factor Experience (FIDO U2F Standards) Success 1 2 3

13 Fido Registration

1 2 3

User Approval New Key Created

Registration Begins

Key Registered using Public Key Cryptography

14 Fido Login

1 2 3

15 online authentication using public key cryptography

16 THE BUILDING BLOCKS

FIDO USER DEVICE RELYING PARTY

BROWSER/APP WEB SERVER

TLS Server Key FIDO CLIENT FIDO SERVER

FIDO UPDATE

ASM

FIDO AUTHENTICATOR Cryptographic Authenticator authentication Metadata key & attestation reference DB trust store

Authentication Attestation keys keys METADATA SERVICE

17 ATTESTATION & METADATA

Verify using Signed trust anchor Attestation Included in Object Metadata

FIDO FIDO Server Metadata Authenticator

Understand Authenticator security characteristic by looking into Metadata (and potentially other sources)

18 FIDO UNIVERSAL 2ND FACTOR

Is a user present?

USER VERIFICATION FIDO AUTHENTICATION

AUTHENTICATOR

Same authenticator as registered before?

19 Step 1 U2F AUTHENTICATION DEMO EXAMPLE

20 Step 2 U2F AUTHENTICATION DEMO EXAMPLE

21 Step 3 U2F AUTHENTICATION DEMO EXAMPLE

22 Step 4 U2F AUTHENTICATION DEMO EXAMPLE

+Bob

23 FIDO UNIVERSAL AUTHENTICATION FRAMEWORK UAF

Same User Same as enrolled Authenticator before? as registered before?

USER VERIFICATION FIDO AUTHENTICATION

AUTHENTICATOR

24 STEP 1 UAF AUTHENTICATION DEMO EXAMPLE

25 STEP 2 UAF AUTHENTICATION DEMO EXAMPLE

26 STEP 3 UAF AUTHENTICATION DEMO EXAMPLE

27 STEP 4 UAF AUTHENTICATION DEMO EXAMPLE

28 USABILITY, SECURITY and PRIVACY

29 No 3rd Party in the Protocol

No Secrets on the Server side

Biometric data (if used) never leaves device

No link-ability between Services or Accounts

30 Better Security for online services Reduced cost for the enterprise Simple & Safe for consumers

31 The FIDO Alliance is an open association of more than 180 diverse member organizations

32  Online Services  Chip Providers  Device Providers  Biometrics Vendors  Enterprise Servers  Platform Providers

Board Members

33 FIDO TIMELINE

FIDO 1.0 FINAL Specification First UAF & U2F Deployments Specification FIDO Ready Review Draft Program Alliance Announced

FEB DEC FEB FEB-OCT DEC 9 2013 2013 2014 2014 2014 (6 Members) (59 Members) (84 Members) (129 Members) (152 Members)

34 News from the front

The significance of early 2015 announcements

35  Windows used by 1.5 billion users  Windows 10 in 190 countries by Q3  Free upgrade

FIDO in Windows 10

36  First healthcare deployment  Physician access to health records  up to 50 million Healthcare users

FIDO in Healthcare

37  PayPal continues FIDO enablement in improved mobile wallet app.  Google has FIDO in Chrome and 2-Step Verification.  Samsung adds touch to Galaxy® S6 and ships FIDO on all Galaxy® devices

2014 Deployments

38 A range of FIDO PRODUCTS is now available

39 Online Services

Chip Providers

Device Providers

Biometrics Technology Providers

Implementing 1.0 Specifications (this is only a subset of active implementations)

Enterprise Servers

Open Source

Mobile Apps/Clients

WWW Browsers

40 JOIN THE FIDO ALLIANCE

41 EXPERIENCE SIMPLER, STRONGER AUTHENTICATION