FIDO’s fit for Key Industries in Korea

FIDO-Based Next Generation Certification Services

Development ModelKim Tae-jin: Executive Director, Product Development

Raonsecure Co. Ltd.2016. 12

- 2 - Copyright(c)2016 by RAONSECURE

FIDO – Authentication Flow

- 3 - Copyright(c)2016 by RAONSECURE

FIDO – Market Situation

FIDO Specification &Certification Program

Expanded B2C / B2BServices

Fingerprint-based mobilebanking app; first Korean bank to adopt system built to FIDO

specification

The first banking case in Korea

Busan Bank app focuses on convenient

/ secure authentication with FIDO

Introduced to FinancialSector

FIDO Alliance

2012.07 Alliance established

FIDO Spec 1.0

Interoperability verification

FIDO Spec 2.0 in development

2014.12 FIDO spec v.1.0 released

2015.04 Certification program launched

- 4 - Copyright(c)2016 by RAONSECURE

Money 20/20

- 5 - Copyright(c)2016 by RAONSECURE

FIDO

• USB

• NFC

• Bluetooth LE

PC Environment

Add /Expand

• SAML / OAuth

• FDS

• OOB (2Channel)

Non-FIDO

Biometric

Bio authentication

Variousbiometric

• Face

• Voice

• Signature

• Pattern

3rd party

KFTC – compatible

Samsung Pay /

Samsung Pass

U2FFingerprint

Certificate

Authentication

- 6 - Copyright(c)2016 by RAONSECURE

Various biometric

Fusion of authentication methods

Ensure versatility & security

ManufacturerAuthenticator

LegacyExtension

Ext Interface

S/WAuthenticator

OMS Interface

Easy to integrate variousauthenticators

Standard interface required

- 7 - Copyright(c)2016 by RAONSECURE

B2C

Register

Verify ID

Login

Easy login

eSign

PW-lesseSignature

Transaction

Confirm ID

Auditing

Logmanagement

- 8 - Copyright(c)2016 by RAONSECURE

B2C – Easy registration & easy ID verification

Authentication

ServiceCustomer Authority

- 9 - Copyright(c)2016 by RAONSECURE

B2C - 3rd Party

diversified

management

FIDOClient

FIDOServer

3rd Party authentication Channel

verification Channel

- 10 - Copyright(c)2016 by RAONSECURE

B2C - Password-less eSignature

Bank Securities Shopping Public

Electronic signature

Requestverification

Certificate

Agency

Password-less based certificate verification is available by just changing Client

No need for additional

process – immediate use

- 11 - Copyright(c)2016 by RAONSECURE

Management – Policy & Auditing

- 12 - Copyright(c)2016 by RAONSECURE

B2B

Mobile office

EP / ERP / e-mail VDI

SAC

- 13 - Copyright(c)2016 by RAONSECURE

Evolution of Certificate System

Financial

Inst.

KFTC certificate link

KFTC

Dist. Mgmt. system

KFTC

Cert.

External auth. service link

Future Services

Manufacture / telco

portal site

Legacy Auth.

ID/PWD

OTP

PKI

FIDO Auth.

Auth. Service

Auth.

Service

Group / Company

External authentication service interface

ID/PWD

OTP

PKI

FIDO

Auth. Area Integrated Mgmt Service Area

Bank

Card

Capital

Securities

…

Financia

l service

s

Auth

. linkage

Int. Mgmt.

• Confidence

• Security rating

• Auth. management

• Extensible

Cloud-based

Multi-tenant

Self-provisioning / flexible

combination of auth. services

- 14 - Copyright(c)2016 by RAONSECURE

Evolution of Certificate System

- 15 - Copyright(c)2016 by RAONSECURE

Evolution of Certificate System

Tel. 02-561-4545 / Fax. 02-561-5343

Contact: Richard Kim, Director / cskim@raonsecure.comInquiries: Jason Burnett, Manager / jsburnett@raonsecure.com

Thank you.

This document is copyrighted by Raonsecure Co. Ltd. All rights reserved. Do not redistribute.

USIM Smart Auth.www.usimcert.com

Mobile Device Managementtouchen.raonsecure.com

WhiteHat Centerwhitehat.co.kr

FIDO biometric auth.raonsecure.com/onepass