New Trends in Mobile Authentication

1

TPM

FINGERPRINTSECURE

USB

FACE

BIOMETRIC

PIN

TOKEN

RBA

PASSIVE

ACTIVE

SILENT

TPM

FINGERPRINT

VOICE

SECURE

ELEMENT

NFC

USB

FACE

BIOMETRIC

PIN TOKEN

RBA

ACTIVE

SILENT

TPM

FINGERPRINT

VOICEELEMENT

NFC

USB

FACE

BIOMETRIC

TOKEN

RBA

PASSIVE

ACTIVE

SILENT TPM

VOICE

SECURE

ELEMENT

NFC

USB

FACE

PIN

TOKEN

RBA

PASSIVEACTIVE

SILENT

TPM

FINGERPRINT

VOICE

NFC

USB

FACE

BIOMETRIC

TOKEN

RBA

PASSIVE

ACTIVE

SILENT

TPM

FINGERPRINT

VOICE

SECURENFC

USB

FACE

PIN

PASSIVE

ACTIVE

TPM

FINGERPRINT

VOICE

ELEMENT

NFC

USB

FACE

BIOMETRIC

TOKEN

RBA

ACTIVE

SILENT

TPM

FINGERPRINT

VOICE

SECURENFC

FACE

PIN

RBA

PASSIVE

ACTIVE

SILENT

TPM

FINGERPRINT

VOICE

SECURE

ELEMENT

NFC

USB

FACE

PINACTIVE

SILENT

TPM

ELEMENT

NFC

USB

FACE

BIOMETRIC

PIN

PASSIVE

SILENT

TPM

FINGERPRINT

VOICE

SECURE

ELEMENT

NFC

USB

FACE

PIN

TOKEN

PASSIVE

ACTIVE

FINGERPRINT

VOICE

SECURE

ELEMENT

USB

BIOMETRIC

PIN

TOKEN

RBA PASSIVE

ACTIVE

VOICE

SECURE

NFC

FACE

TOKEN

PASSIVEACTIVE

TPM

ELEMENT

NFC

USB

FACE

PIN

TOKEN

RBA

TPM

FINGERPRINT

SECURE

NFC

USB

FACE

PIN

TOKEN

RBA

PASSIVE

ACTIVE

SILENT

TPM

FINGERPRINT

VOICE

NFC

FACE

BIOMETRIC

PIN

PASSIVE

SILENT

ELEMENT

NFC

USB

TOKEN

RBA

PASSIVE

TPM

VOICE

SECURE

ELEMENT

NFC

FACE

BIOMETRIC

PIN

ACTIVE

TPM

FINGERPRINT

SECURE

USB

TOKEN

ACTIVE SILENT

TPM

FINGERPRINT

VOICENFC

USB

FACE

PIN

TOKEN

RBA

PASSIVE

ACTIVE

SILENT

TPM

SECURE

ELEMENT

USB

FACE

PIN

TOKEN

RBA

SILENT

TPMELEMENT

NFC

USB

FACE

PIN

TOKEN

RBA

PASSIVE

SILENT

TPM

ELEMENT

NFC

USB

PIN

TOKEN

RBA

ACTIVE

FINGERPRINT

ELEMENT

USB

TPM

VOICE

ELEMENT

USB

PIN

RBA

PASSIVE

ACTIVE

TPM

VOICE

SECURE

ELEMENT

USB

FACE

ACTIVE

FINGERPRINT

VOICE

PIN

RBA

PASSIVE

ACTIVE

TPM

FINGERPRINT

ELEMENT

FACE

TOKEN

RBA

ACTIVE

TPM

ELEMENT

NFC

USB

FACE

BIOMETRIC

RBA

ACTIVE

SILENT

TPM

FINGERPRINT

SECURE

ELEMENT

USB

FACE

PIN

TOKEN

PASSIVE

SILENT

VOICE

USB

FACE

BIOMETRIC

RBA

ACTIVE

SECURE

NFC

USB

BIOMETRIC

PIN

SILENT

TPM

VOICE

NFC

USB

FACE

PIN

USB

FACE

BIOMETRIC

PIN

RBA

ACTIVE

FINGERPRINT

NFC

TOKEN

RBA

VOICE

ELEMENT

USB

FACE

PIN

RBA

SILENT

VOICE

SECURE

FACE

PIN

RBA

PASSIVE

ACTIVE

SILENT

TPM

FINGERPRINT

VOICE

RBA

ACTIVE

TPM

FACE

TOKEN

RBA

ACTIVE SILENT

VOICE

ELEMENT

USB

FACE

PIN

RBA

ACTIVE

SILENT

PIN

TOKEN

RBA

VOICE

SECURE

NFC

USB

TOKEN

PASSIVE

ACTIVE

TPM

FACE

BIOMETRIC

TOKEN

ACTIVE

TPM

FACE

NFC

USB

FACE

BIOMETRIC

TOKEN

PASSIVE

PIN

ACTIVE

TPM

VOICE

ELEMENT

NFC

TPM

VOICE

NFC

USB

FACE

TOKEN

RBA

TPM USB

FACE

BIOMETRIC

RBA

PASSIVE

SILENT

USB

BIOMETRIC

TPM

SECURE

NFC

PIN

RBA

PASSIVE

SILENT

VOICE

SILENT

VOICE

ELEMENT

USB

PIN

TOKEN

RBA

PASSIVE

NFC

FACE

BIOMETRIC

TOKEN

RBA

SILENT

TPM

SECURE

SILENT

VOICE

USB

RBA

USB

FACE

RBA

VOICE

RBA

SILENT

SECURE

USB

PIN

RBA

SILENT

TPM

ELEMENT

USB

FACE

VOICE

NFC

USB

TOKEN

RBA

SECURE

FACE

TPM

FACE

PIN

FINGERPRINT

NFC

RBA

SILENT

USB

FACE

PIN

ACTIVE

SILENT

PIN

RBA

NFC

USB

BIOMETRIC

TPM

VOICE

USB

FACE

PASSIVE

ELEMENT

TOKEN

TPM

VOICE

SILENT

NFC

USB

PIN

RBA

SILENT

TPM

VOICE

NFC

USB

FACE

PASSIVE

TPM

VOICE

TPM

NFC

PIN

TOKEN

ACTIVE

SECURE

USB

RBA

PASSIVE

NFC

USB

FACE

RBA

TPM

TOKEN

PASSIVE

SECURE

USB

FACE

ACTIVE

TPM

FACE

PIN

RBA

VOICE

USB

PASSIVE

TOKEN

RBA

NFC

USB

SILENT

USB

RBA

FACE

PIN

ACTIVE

NFC

USB

USB

PIN

RBA

NFC

SILENT

TPM

VOICE

FACE

PIN

TPM

NFC

USB

TPM

RBA

PASSIVE

NFC

USB

PIN

TPM

PIN

PASSIVE

PIN

USB

TPM

NFC

USB

FACE

FACE

RBA

SILENT

FINGERPRINT

USB

NFC

USB

ACTIVE

VOICE

USB

TPM

PIN

RBA

FACE

TPM

TPM

USB

PIN

TPM

NFC

FACE

TOKEN

RBA

USB

PASSIVE

VOICE

NFC

PIN

USB

FACE

USB

RBA

TPM

PIN

NFC

FACE

RBA

ACTIVE

TPM

USB

USB

TPM

PIN

FACE

NFC

USB

PIN

RBA

FACE

USB

USB

RBA

NFC

NFC

TPM

NFC

RBA

USB

PIN

NFC

USB

PIN

USB

ELEMENT

PIN

PIN

TPM

USB

USB

TPM

VOICE

NFC

RBA

USB

RBA

RBA

PIN

USB

USB

USB

USB

NFC

USB

NFC

USB

TPM

FACE

USB

PIN

USB

USB

PIN

NFC

VOICE

NFC

USB

USB

USB

USB

FACE

TPM

USB

TPM

USB

USB

TPM

USB

FACE

NFC

RBA

USB

USB

USB

FACE

USB

USB

RBA

PIN

VOICE

USB

PIN

USB

USB

RBA

USB

TPM

RBA

RBA

PIN

NFC

NFC

USB

TPM

USB

TPM

USB

USB

USB

USB

NFC

TPM

NFC

FACE

USB

FACE

USB

USB

TPM

USB

USB

USB

USB

USB

FACE

USB

USB

USB

USBRBA

USB

USB

USB

USB

USB

USB

USB

RBA

USB

USB

USB

NFC

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

USB

New Trends in Mobile Authentication

INTRODUCTIONS

2

Sebastien Taveau Chief Technology Officer Validity Sensors, Inc @frogtwitt

Jamie Cowper Senior Director, Business Development

Nok Nok Labs, Inc @jcowper

THE POWER OF AUTHENTICATION

①  Book online ②  Ride to rental center ③  Wait in line ④  Hand over credit card + Driver’s

license ⑤  Sign forms ⑥  Drive away

①  Book online ②  Walk to nearby parking lot ③  Unlock car with mobile app/

ZipCard ④  Drive away

3

Total Time: 15-30 min Total Time: 2 min

YOUR PHONE IS YOUR PROXY

4

LATEST NUMBERS

5 Source: IDC Worldwide Quarterly Smart Connected Device Tracker, September 11, 2013

SMARTPHONE MARKET SHARE

6

A Shift in Authentication

New Paradigm

Opportunity for Better Authentication is Upon Us Are you ready?

For Users For Organiza.ons

Painful to Use

•  25 Accounts •  8 Logins / Day •  6.5 Passwords

Difficult to Secure

•  $5.5M / Data Breach •  $15M / PWD Reset •  $60+ / Token

For the Ecosystem

Impossible to Scale

•  Fragmented •  Inflexible •  Slow to Adopt

User Auth Online

Do you want to login?

Do you want to transfer $100 to Joe?

Do you want to ship to a new address?

Do you want to delete all of your emails?

Do you want to share your dental record?

Auth today: Ask user for a password

(and perhaps a one time code)

Consumer Focus"Security Options" "

Natural ID and User Options

Passwords Too many to remember, difficult to type,

and not secure

REUSED PHISHED KEYLOGGED

Password and PIN: harsh reality

Source: XQCD

One Time Codes Improves security but not easy enough

SMS USABILITY

DEVICE USABILITY

USER EXPERIENCE

STILL PHISHABLE

Coverage | Delay | Cost One per site | Fragile User confusion Known attacks today

Megatrend Simpler, Stronger Local Device Auth

PERSONAL DEVICES LOCAL LOCKING NEW WAVE: CONVENIENT SECURITY

Carry Personal Data Pins & Patterns today Simpler, Stronger local auth

2F

Strong Consent"

How does it work? "

How does it work? "

Enrollment and Matching"

Reconstruct Image

01FE B93F 00F1 0A2B 001D 4752 648B 5563 5362 6A79 ... (292 bytes per scan line)

Host Platform

Raw Image Data Fingerprint Template

Sensor

Extract Minutiae M1={x1,y1,a1,z1) M2={x2,y2,a2,z2}

...

Where? "

NFC"

STANDARDIZING SECURITY

HOW DO WE KNOW IT’S REALLY YOU?

24

?

EXTEND LOCAL AUTHENTICATION

25

Protocol

Local Remote

COMMON AUTHENTICATION PROTOCOL

26

Users

Cloud

D!vic!s

F!deration

27

EXPANSION (POST FEB)

Authenticators Web Services Devices Implementers

FOUNDERS

THE FIDO SOLUTION

28

Discovery

Provisioning

Authentication

MORE SECURE AUTHENTICATION

29

Unique Cryptographic Secrets

Feature Security Benefit

Unique key per user/device/site Segmentation of risk

High-entropy asymmetric keys instead of passwords

Protection against dictionary, brute force attacks

Secrets not exposed to user Protection against phishing, key logging, shoulder surfing

User Account Device Site

LEVERAGING HARDWARE SECURITY

User Space

Secure Hardware

MFAC SDK

UX Layer Input, Display

Crypto Layer MFAC SDK


Crypto Layer

MFAC SDK

Crypto Layer


No Secur! HW Secur! Crypto +

Storag!

Secur! Execution

Environment

DEVICES ARE RICH IN AUTHENTICATION CAPABILITIES

31

Camera

Fingerprint Sensor Microphone

Secure Execution

Secure Storage

Location

Motion, Heartbeat, etc. M7

Face Recognition

Fingerprint Recognition

Voice Recognition

COMPLEMENTARY DESIGNED FOR MODERN AUTHENTICATION

32

IMPLICIT AUTHENTICATION

EXPLICIT AUTHENTICATION

AUTHENTICATION USER VERIFICATION

33

Launch Pr!"s Suc#e"s

MOBILE PAYMENTS TRANSACTION CONFIRMATION

34

Setup Confirm Sent

35

FIDO

DOCUMENT TITLE