Biometrically Enabled Smartphones The PlaBorm for mobile-ID Jonas Andersson Director Mobile Payment, Mobile ID Fingerprint Cards AB WWW.FINGERPRINTS.COM Fingerprint Sensor Main New iPhone 5S Feature Phone 5s and 5c Sales Stascs Sales Total number of iPhone 5s units sold 9,750,000 Total number of iPhone 5c units sold 5,800,000 iPhone First Day Sales Sta$s$cs Number Sold Number of iPhone 5s sales in the first 24 2,750,000 hours Number of iPhone 5c pre-orders in the first 1,320,000 24 hours Stasc Verificaon Source: Apple, AT&T, Sprint, Verizon Research Date: 11.12.2013 Another huge launch for Apple as they release their latest iPhone the 5s and 5c. Early reports show that the iPhone 5s will break the iPhone 5 first day sales records. The 5c hasn’t faired as well with die hard apple fans. A surveyor from Philip Elmer-DeWiN interviewed a number of people camping at the Apple Store and none were there for the 5c. 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 2 Mobile • 1st phone launched to the market in July (Japan) • Most demanding operator (DoCoMo) Most experienced finger sensor phone OEM (Fujitsu) • 1st Korean player (Pantech) launched in August • 1st Chinese manufacturer (Konka) launched in September, First launch with 1080A Several Chinese manufacturers soon to follow • Finger sensor high-lighted as key selling point by OEMs • FPC selected in several plaBorm reference designs • Repeat Customers is proof of Market Success WWW.FINGERPRINTS.COM ConfidenKal 3 Mobile • Happy and saKsfied customers give fast follow-up projects • Fujitsu announced another 7 products with FPC technology, launching from October ⁻ Phone with So_bank ⁻ Phone with Au/KDDI ⁻ Tablet with KDDI ⁻ 3 phones with DoCoMo ⁻ Tablet with DoCoMo • AddiKonal OEM projects ongoing with several different target operators (US, Korea and other) WWW.FINGERPRINTS.COM ConfidenKal 4 Driver: Consumer/End User Demand Your Body is the New Password STOCKHOLM, Dec 11 (Reuters) - Biometric • Ericsson ConsumerLab has idenKfied smartphones are expected to become some of the most important mainstream next year as leading handset makers consumer trends for 2014 and follow the lead of Apple Inc. into fingerprint beyond recogniKon technology, an Ericsson report on consumer • 74 percent believe that biometric trends showed on Wednesday. smartphones will become mainstream during 2014 • 61 percent of people want to use fingerprints to unlock their phone • 52 percent of smartphone users want to use their fingerprints instead of passwords • Half of consumers even want to use their fingerprints to authorize their credit card payments online 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 5 Driver: Cost Savings ANNUAL COST OF MANUAL PASSWORD MANAGEMENT Number of end users: 45,000 Help Desk calls per user, Based on META Group’s average of Per year: x 21 1.75 calls per user, per month Help Desk calls per year: = 945,000 Percentage of password Gartner Group studies report resets: x 35% that password resets make up to 35% of total call volume Password calls per year: = 330,750 Gartner Group studies report a Helpdesk cost per call: x $31 cost of up to $31/call Current password costs Per year: = $ 10,253,250 Savings in Year 1 Note: This calculation is based on the method used in the US DoS Blade project. To estimate the above password management savings that would be realized 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 6 Driver: Real Life Security • NIST SP 800-32 Secon 2.2.4 in its enKrety • … “Biometric authenKcaKon relies on a unique physical characterisKc to verify the • idenKty of system users. Common biometric idenKfiers include fingerprints, wriken • signatures, voice pakerns, typing pakerns, reKnal scans, and hand geometry. The unique • pakern that idenKfies a user is formed during an enrollment process, producing a template • for that user. When a user wishes to authenKcate to the system, a physical measurement • is made to obtain a current biometric pakern for the user. This pakern can then be • compared against the enrollment template in order to verify the user’s idenKty. Biometric • authenKcaKon devices tend to cost more than password or token-based systems, because • the hardware required to capture and analyze biometric pakerns is more complicated. • However, biometrics provide a very high level of security because the authen6ca6on is • directly related to a unique physical characteris6c of the user which is more difficult to • counterfeit. Recent technological advances have also helped to reduce the cost of • biometric authenKcaKon systems.”… 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 7 Driver: Real Life Security -2 INCITS M1/07-0185rev Study Report on Biometrics in E-Authentication 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 8 Ease of Use • A posiKve User Experience – 100% of AXA Insurance Employees converted to Fingerprint Biometrics when given the opportunity. • Password Pain – Studies by Janrain, Google and others indicate that the negaKve aqtude towards passwords create akriKon among end users. • At Sign-up – Can’t make the effort of invenKng a ”new” password • At log-in – frogoken password translate to dropping the service – Lack of will to manage complicated passwords destroy entropy 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 9 Fingerprints supports ”NFC and Secure Elements” • Secure user verificaKon improves usage of NFC – Reduces security concerns for consumers for buying goods using NFC – AnK Skimming • Fingerprint matching so_ware algorithm ported on Infineon Secure Element* • Close cooperaKon with Infineon – Combining advantages of improved security using Secure Elements and secure user verificaKon using fingerprint sensors hNp://www.fingerprints.com/en/Press%20releases/2012/FPC%20Secure%20Elements%20NFC%20Phones%20Tablets.aspX 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 10 Example of VerificaKon Use Cases • Secure on-line transacons – No need to remember passwords for on-line purchasing – No need for PIN codes for banking transacons • Secure user verificaon for social networks – No need to remember passwords to log into social networks • Secure access to cloud services – We store our lives in the cloud – Personal and sensiKve data only shared with closest family and friends 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 11 Example of Enterprise use cases • IP telephony with idenficaon – Know who’s on the call • Run SAP client secure on your device • Secure verificaon of the other party in a call – Improved customer care – “Know who you’re talking to” 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 12 Fingerprint VerificaKon Enables “One Swipe to Pay” 1 payment screen opKon instead of 2-4 used for many mobile checkout implementaKons Purchase Confirm Download 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 13 Standardizaon Efforts Cloud/Web • FIDO (Fast IDenKty Online) defines an open industry web-based standard for secure on- line idenficaon • FuncKonal Demos developed based on current version of spec and actual member services and products in the market • Global PlaBorm is defining secure standard verifiable device environments (phone, smartcard, SIM card etc.) for secure transacons • FPC selected as editor and driver of fingerprint sensor standardizaon in Global PlaBorm 2014-02-01 WWW.FINGERPRINTS.COM ConfidenKal 14 Selected FIDO Members Service OEM Providers Component Suppliers 1 februari 2014 WWW.FINGERPRINTS.COM ConfidenKal 15 Selected Global PlaBorm Members Service OEM Providers Component Suppliers 1 februari 2014 WWW.FINGERPRINTS.COM ConfidenKal 16 GP helps apps ecosystem use fingerprint sensors • Global PlaBorm standards will allow Smartphone and tablet apps developers to bring ”secure apps” that can use fingerprint sensors for secure user verificaKon • Standardized APIs will be available for apps to request user verificaon with fingerprint sensor • This allows for banks, credit cards, social networks, cloud services etc. to replace today’s use of username/pw with fingerprint sensor • Fingerprint sensor funcKonality executed in Trusted ExecuKon Environment (TEE) for increased security WWW.FINGERPRINTS.COM ConfidenKal 17 Thank you for your aenKon! For further informaKon please contact: sales@fingerprints.com BEYOND KEYS AND PINS WWW.FINGERPRINTS.COM .