Tokyo Seminar: FIDO Alliance Vision and Status

1. All Rights Reserved | FIDO Alliance | Copyright 20171
TOKYO SEMINAR:
FIDO ALLIANCE VISION AND STATUS
BRETT MCDOWELL
EXECUTIVE DIRECTOR
DECEMBER 8, 2017

2. All Rights Reserved | FIDO Alliance | Copyright 20172
AUTHENTICATION IS OUR BIGGEST PROBLEM

3. All Rights Reserved | FIDO Alliance | Copyright 20173
>250 ORGANIZATIONS SOLVING THE PROBLEM TOGETHER
+ SPONSOR MEMBERS + ASSOCIATE MEMBERS + LIAISON MEMBERS

4. All Rights Reserved | FIDO Alliance | Copyright 20174
FIDO SCOPE
Physical-to-digital identity
User Management
Authentication
Federation
Single
Sign-On
Passwords Risk-BasedStrong
MODERN
AUTHENTICATION

5. All Rights Reserved | FIDO Alliance | Copyright 20175
THE MISSION: SIMPLER & STRONGER AUTHENTICATION
SECURITY
USABILITY
Poor Easy
WeakStrong =authentication
open standards for
simpler, stronger
authentication
using public key
cryptography

6. All Rights Reserved | FIDO Alliance | Copyright 20176
HOW OLD AUTHENTICATION WORKS
ONLINE CONNECTION
The user authenticates themselves online by
presenting a human-readable “shared secret”

7. All Rights Reserved | FIDO Alliance | Copyright 20177
HOW FIDO AUTHENTICATION WORKS
LOCAL CONNECTION
ONLINE CONNECTION
The device
authenticates the
user online using
public key
cryptography
The user
authenticates
“locally” to
their device
(by various means)

8. All Rights Reserved | FIDO Alliance | Copyright 20178
FIDO DELIVERS ON KEY PRIORITIES
Security
Privacy Interoperability
Usability

9. All Rights Reserved | FIDO Alliance | Copyright 20179
FIDO CROSS-PLATFORM SUPPORT
via 3rd-party development

10. All Rights Reserved | FIDO Alliance | Copyright 201710
SAMPLE: FIDO-ENABLED SERVICES
3.5 BILLION+
AVAILABLE TO PROTECT
ACCOUNTS WORLDWIDE

11. 32
62
74
108
162
216
253
304
343
363
383
Apr-15 Jul-15 Sep-15 Dec-15 Mar-16 May-16 Aug-16 Dec-16 May-17 Jul-17 Oct-17
All Rights Reserved | FIDO Alliance | Copyright 201711
STATUS: CERTIFICATIONS

12. First of it’s kind program to empirically
validate biometrics through third-party
labs and assure that they correctly
identify users regardless of biometric
modality on all FIDO implementation
types
All Rights Reserved | FIDO Alliance | Copyright 201712
Assure that authenticator secrets are safe on
all FIDO implementation types based on
third-party laboratory verification of FIDO
security requirements in coordination with
existing security programs
SECURITY CERTIFICATION BIOMETRIC CERTIFICATION
COMING SOON: SECURITY + BIOMETRIC CERTIFICATIONS

13. All Rights Reserved | FIDO Alliance | Copyright 201713
FIDO SPECIFICATIONS ROADMAP
• FIDO2 Project
• W3C Web Authn specification based on
FIDO web APIs
• Client-to-Authenticator Protocol(CTAP)
• Expanded certification program to
accommodate growing ecosystem
• Key role for platforms
• Enables Native Browser + Platform
Support
• Firefox, Chrome, Edge, Opera etc.
• Significantly broadens addressable market
reach for FIDO authentication
GOAL: Ubiquitous
FIDO authentication
FIDO 1.x: Strong
ecosystem
growth
FIDO 2 Project:
Native browser +
platform support

14. All Rights Reserved | FIDO Alliance | Copyright 201714
TODAY’S NEWS FROM FIDO
• FIDO UAF 1.1 support of key attestation on Android 8.0
eases deployment of advanced biometric authentication
on Android devices
• All developers and service providers now have ability to
build applications with FIDO Authentication on any
Android 8.0 device going forward – no customization
needed
• Will be an accelerator of FIDO Certified apps on Android in
Asia and globally
• First UAF 1.1 certified implementation from NTT DOCOMO
for d ACCOUNT™ app, available today on Sony Mobile
Xperia™ XZ1 (SO-01K) and XZ1 Compact (SO-02K) devicesSO-02KSO-01K

15. All Rights Reserved | FIDO Alliance | Copyright 201715
THANK YOU
BRETT MCDOWELL
BRETT@FIDOALLIANCE.ORG