Embed Size (px)
Citation preview
1
TPM
FINGERPRINTSECURE
USB
FACE
BIOMETRIC
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICEELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT TPM
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVEACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
USB
FACE
PIN
PASSIVE
ACTIVE
TPM
FINGERPRINT
VOICE
ELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PINACTIVE
SILENT
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
PASSIVE
ACTIVE
FINGERPRINT
VOICE
SECURE
ELEMENT
USB
BIOMETRIC
PIN
TOKEN
RBA PASSIVE
ACTIVE
VOICE
SECURE
NFC
FACE
TOKEN
PASSIVEACTIVE
TPM
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
TPM
FINGERPRINT
SECURE
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
ELEMENT
NFC
USB
TOKEN
RBA
PASSIVE
TPM
VOICE
SECURE
ELEMENT
NFC
FACE
BIOMETRIC
PIN
ACTIVE
TPM
FINGERPRINT
SECURE
USB
TOKEN
ACTIVE SILENT
TPM
FINGERPRINT
VOICENFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
RBA
SILENT
TPMELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
SILENT
TPM
ELEMENT
NFC
USB
PIN
TOKEN
RBA
ACTIVE
FINGERPRINT
ELEMENT
USB
TPM
VOICE
ELEMENT
USB
PIN
RBA
PASSIVE
ACTIVE
TPM
VOICE
SECURE
ELEMENT
USB
FACE
ACTIVE
FINGERPRINT
VOICE
PIN
RBA
PASSIVE
ACTIVE
TPM
FINGERPRINT
ELEMENT
FACE
TOKEN
RBA
ACTIVE
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
PASSIVE
SILENT
VOICE
USB
FACE
BIOMETRIC
RBA
ACTIVE
SECURE
NFC
USB
BIOMETRIC
PIN
SILENT
TPM
VOICE
NFC
USB
FACE
PIN
USB
FACE
BIOMETRIC
PIN
RBA
ACTIVE
FINGERPRINT
NFC
TOKEN
RBA
VOICE
ELEMENT
USB
FACE
PIN
RBA
SILENT
VOICE
SECURE
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
RBA
ACTIVE
TPM
FACE
TOKEN
RBA
ACTIVE SILENT
VOICE
ELEMENT
USB
FACE
PIN
RBA
ACTIVE
SILENT
PIN
TOKEN
RBA
VOICE
SECURE
NFC
USB
TOKEN
PASSIVE
ACTIVE
TPM
FACE
BIOMETRIC
TOKEN
ACTIVE
TPM
FACE
NFC
USB
FACE
BIOMETRIC
TOKEN
PASSIVE
PIN
ACTIVE
TPM
VOICE
ELEMENT
NFC
TPM
VOICE
NFC
USB
FACE
TOKEN
RBA
TPM USB
FACE
BIOMETRIC
RBA
PASSIVE
SILENT
USB
BIOMETRIC
TPM
SECURE
NFC
PIN
RBA
PASSIVE
SILENT
VOICE
SILENT
VOICE
ELEMENT
USB
PIN
TOKEN
RBA
PASSIVE
NFC
FACE
BIOMETRIC
TOKEN
RBA
SILENT
TPM
SECURE
SILENT
VOICE
USB
RBA
USB
FACE
RBA
VOICE
RBA
SILENT
SECURE
USB
PIN
RBA
SILENT
TPM
ELEMENT
USB
FACE
VOICE
NFC
USB
TOKEN
RBA
SECURE
FACE
TPM
FACE
PIN
FINGERPRINT
NFC
RBA
SILENT
USB
FACE
PIN
ACTIVE
SILENT
PIN
RBA
NFC
USB
BIOMETRIC
TPM
VOICE
USB
FACE
PASSIVE
ELEMENT
TOKEN
TPM
VOICE
SILENT
NFC
USB
PIN
RBA
SILENT
TPM
VOICE
NFC
USB
FACE
PASSIVE
TPM
VOICE
TPM
NFC
PIN
TOKEN
ACTIVE
SECURE
USB
RBA
PASSIVE
NFC
USB
FACE
RBA
TPM
TOKEN
PASSIVE
SECURE
USB
FACE
ACTIVE
TPM
FACE
PIN
RBA
VOICE
USB
PASSIVE
TOKEN
RBA
NFC
USB
SILENT
USB
RBA
FACE
PIN
ACTIVE
NFC
USB
USB
PIN
RBA
NFC
SILENT
TPM
VOICE
FACE
PIN
TPM
NFC
USB
TPM
RBA
PASSIVE
NFC
USB
PIN
TPM
PIN
PASSIVE
PIN
USB
TPM
NFC
USB
FACE
FACE
RBA
SILENT
FINGERPRINT
USB
NFC
USB
ACTIVE
VOICE
USB
TPM
PIN
RBA
FACE
TPM
TPM
USB
PIN
TPM
NFC
FACE
TOKEN
RBA
USB
PASSIVE
VOICE
NFC
PIN
USB
FACE
USB
RBA
TPM
PIN
NFC
FACE
RBA
ACTIVE
TPM
USB
USB
TPM
PIN
FACE
NFC
USB
PIN
RBA
FACE
USB
USB
RBA
NFC
NFC
TPM
NFC
RBA
USB
PIN
NFC
USB
PIN
USB
ELEMENT
PIN
PIN
TPM
USB
USB
TPM
VOICE
NFC
RBA
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
USB
NFC
USB
TPM
FACE
USB
PIN
USB
USB
PIN
NFC
VOICE
NFC
USB
USB
USB
USB
FACE
TPM
USB
TPM
USB
USB
TPM
USB
FACE
NFC
RBA
USB
USB
USB
FACE
USB
USB
RBA
PIN
VOICE
USB
PIN
USB
USB
RBA
USB
TPM
RBA
RBA
PIN
NFC
NFC
USB
TPM
USB
TPM
USB
USB
USB
USB
NFC
TPM
NFC
FACE
USB
FACE
USB
USB
TPM
USB
USB
USB
USB
USB
FACE
USB
USB
USB
USBRBA
USB
USB
USB
USB
USB
USB
USB
RBA
USB
USB
USB
NFC
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
LEVERAGING FINGERPRINT VERIFICATION ON MOBILE DEVICES
FPS - A CLEAR USER PREFERENCE
2
49% 83%
FINGERPRINT SENSOR UPTAKE
3
Galaxy S5 Galaxy Tab S iPhone 5s
TOUCH ID API – WHAT DOES IT DO?
4
App
1. Determine if a fingerprint touch was recognized
2. Unlock keychain data with successful touch • Keychain data protected
by secure enclave
Key Store
Secure Enclave
HOW DOES THE SERVER KNOW? THE REMOTE AUTHENTICATION CHALLENGE
5
① Was a user successfully verified? ② Who was verified? ③ How was the user verified? ④ What assurance do we get?
?
Integration Options
6
TPM
FINGERPRINTSECURE
USB
FACE
BIOMETRIC
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICEELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT TPM
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVEACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
USB
FACE
PIN
PASSIVE
ACTIVE
TPM
FINGERPRINT
VOICE
ELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PINACTIVE
SILENT
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
PASSIVE
ACTIVE
FINGERPRINT
VOICE
SECURE
ELEMENT
USB
BIOMETRIC
PIN
TOKEN
RBA PASSIVE
ACTIVE
VOICE
SECURE
NFC
FACE
TOKEN
PASSIVEACTIVE
TPM
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
TPM
FINGERPRINT
SECURE
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
ELEMENT
NFC
USB
TOKEN
RBA
PASSIVE
TPM
VOICE
SECURE
ELEMENT
NFC
FACE
BIOMETRIC
PIN
ACTIVE
TPM
FINGERPRINT
SECURE
USB
TOKEN
ACTIVE SILENT
TPM
FINGERPRINT
VOICENFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
RBA
SILENT
TPMELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
SILENT
TPM
ELEMENT
NFC
USB
PIN
TOKEN
RBA
ACTIVE
FINGERPRINT
ELEMENT
USB
TPM
VOICE
ELEMENT
USB
PIN
RBA
PASSIVE
ACTIVE
TPM
VOICE
SECURE
ELEMENT
USB
FACE
ACTIVE
FINGERPRINT
VOICE
PIN
RBA
PASSIVE
ACTIVE
TPM
FINGERPRINT
ELEMENT
FACE
TOKEN
RBA
ACTIVE
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
PASSIVE
SILENT
VOICE
USB
FACE
BIOMETRIC
RBA
ACTIVE
SECURE
NFC
USB
BIOMETRIC
PIN
SILENT
TPM
VOICE
NFC
USB
FACE
PIN
USB
FACE
BIOMETRIC
PIN
RBA
ACTIVE
FINGERPRINT
NFC
TOKEN
RBA
VOICE
ELEMENT
USB
FACE
PIN
RBA
SILENT
VOICE
SECURE
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
RBA
ACTIVE
TPM
FACE
TOKEN
RBA
ACTIVE SILENT
VOICE
ELEMENT
USB
FACE
PIN
RBA
ACTIVE
SILENT
PIN
TOKEN
RBA
VOICE
SECURE
NFC
USB
TOKEN
PASSIVE
ACTIVE
TPM
FACE
BIOMETRIC
TOKEN
ACTIVE
TPM
FACE
NFC
USB
FACE
BIOMETRIC
TOKEN
PASSIVE
PIN
ACTIVE
TPM
VOICE
ELEMENT
NFC
TPM
VOICE
NFC
USB
FACE
TOKEN
RBA
TPM USB
FACE
BIOMETRIC
RBA
PASSIVE
SILENT
USB
BIOMETRIC
TPM
SECURE
NFC
PIN
RBA
PASSIVE
SILENT
VOICE
SILENT
VOICE
ELEMENT
USB
PIN
TOKEN
RBA
PASSIVE
NFC
FACE
BIOMETRIC
TOKEN
RBA
SILENT
TPM
SECURE
SILENT
VOICE
USB
RBA
USB
FACE
RBA
VOICE
RBA
SILENT
SECURE
USB
PIN
RBA
SILENT
TPM
ELEMENT
USB
FACE
VOICE
NFC
USB
TOKEN
RBA
SECURE
FACE
TPM
FACE
PIN
FINGERPRINT
NFC
RBA
SILENT
USB
FACE
PIN
ACTIVE
SILENT
PIN
RBA
NFC
USB
BIOMETRIC
TPM
VOICE
USB
FACE
PASSIVE
ELEMENT
TOKEN
TPM
VOICE
SILENT
NFC
USB
PIN
RBA
SILENT
TPM
VOICE
NFC
USB
FACE
PASSIVE
TPM
VOICE
TPM
NFC
PIN
TOKEN
ACTIVE
SECURE
USB
RBA
PASSIVE
NFC
USB
FACE
RBA
TPM
TOKEN
PASSIVE
SECURE
USB
FACE
ACTIVE
TPM
FACE
PIN
RBA
VOICE
USB
PASSIVE
TOKEN
RBA
NFC
USB
SILENT
USB
RBA
FACE
PIN
ACTIVE
NFC
USB
USB
PIN
RBA
NFC
SILENT
TPM
VOICE
FACE
PIN
TPM
NFC
USB
TPM
RBA
PASSIVE
NFC
USB
PIN
TPM
PIN
PASSIVE
PIN
USB
TPM
NFC
USB
FACE
FACE
RBA
SILENT
FINGERPRINT
USB
NFC
USB
ACTIVE
VOICE
USB
TPM
PIN
RBA
FACE
TPM
TPM
USB
PIN
TPM
NFC
FACE
TOKEN
RBA
USB
PASSIVE
VOICE
NFC
PIN
USB
FACE
USB
RBA
TPM
PIN
NFC
FACE
RBA
ACTIVE
TPM
USB
USB
TPM
PIN
FACE
NFC
USB
PIN
RBA
FACE
USB
USB
RBA
NFC
NFC
TPM
NFC
RBA
USB
PIN
NFC
USB
PIN
USB
ELEMENT
PIN
PIN
TPM
USB
USB
TPM
VOICE
NFC
RBA
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
USB
NFC
USB
TPM
FACE
USB
PIN
USB
USB
PIN
NFC
VOICE
NFC
USB
USB
USB
USB
FACE
TPM
USB
TPM
USB
USB
TPM
USB
FACE
NFC
RBA
USB
USB
USB
FACE
USB
USB
RBA
PIN
VOICE
USB
PIN
USB
USB
RBA
USB
TPM
RBA
RBA
PIN
NFC
NFC
USB
TPM
USB
TPM
USB
USB
USB
USB
NFC
TPM
NFC
FACE
USB
FACE
USB
USB
TPM
USB
USB
USB
USB
USB
FACE
USB
USB
USB
USBRBA
USB
USB
USB
USB
USB
USB
USB
RBA
USB
USB
USB
NFC
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
LOCAL AUTHENTICATION API
7
App
Yes/No
ü Was a user successfully verified? o Who was verified? o How was the user verified? o What assurance do we get?
PASSWORD IN IOS KEYCHAIN
8
App
ü Was a user successfully verified? ü Who was verified? o How was the user verified? o What assurance do we get?
COOKIE IN IOS KEYCHAIN
9
App
ü Was a user successfully verified? ü Who was verified? o How was the user verified? o What assurance do we get?
KEY IN IOS KEYCHAIN
10
App
ü Was a user successfully verified? ü Who was verified? o How was the user verified? Ø What assurance do we get?
WHAT ABOUT OTHER DEVICES?
11
Android 52%
iOS 42%
Windows Phone
3%
Blackberry 2%
Others 1% Q1 ‘14
And older devices…….?
AND STEP UP AUTHENTICATION?
12
$20,000 ??
AND EDGE CASES?
• User loses device • User upgrades device • User doesn’t prefer Touch ID • User employs multiple access account • User deregisters fingerprint • User switches fingers • User is wearing gloves
13
MFAC
UAF + IOS KEYCHAIN
14
App
ü Was a user successfully verified? ü Who was verified? ü How was the user verified? ü What assurance do we get?
UAF
MFAC
UAF + IOS KEYCHAIN END-TO-END REMOTE AUTHENTICATION
15
App
1. Registration + Authentication 2. Authenticator Attestation 3. Transaction Confirmation
+ PIN + Face Recognition + Voice Recognition + Other devices
Coming Soon
UAF
STANDARDS BASED
16
The UAF Protocol
17
TPM
FINGERPRINTSECURE
USB
FACE
BIOMETRIC
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICEELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT TPM
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVEACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
USB
FACE
PIN
PASSIVE
ACTIVE
TPM
FINGERPRINT
VOICE
ELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PINACTIVE
SILENT
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
PASSIVE
ACTIVE
FINGERPRINT
VOICE
SECURE
ELEMENT
USB
BIOMETRIC
PIN
TOKEN
RBA PASSIVE
ACTIVE
VOICE
SECURE
NFC
FACE
TOKEN
PASSIVEACTIVE
TPM
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
TPM
FINGERPRINT
SECURE
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
ELEMENT
NFC
USB
TOKEN
RBA
PASSIVE
TPM
VOICE
SECURE
ELEMENT
NFC
FACE
BIOMETRIC
PIN
ACTIVE
TPM
FINGERPRINT
SECURE
USB
TOKEN
ACTIVE SILENT
TPM
FINGERPRINT
VOICENFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
RBA
SILENT
TPMELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
SILENT
TPM
ELEMENT
NFC
USB
PIN
TOKEN
RBA
ACTIVE
FINGERPRINT
ELEMENT
USB
TPM
VOICE
ELEMENT
USB
PIN
RBA
PASSIVE
ACTIVE
TPM
VOICE
SECURE
ELEMENT
USB
FACE
ACTIVE
FINGERPRINT
VOICE
PIN
RBA
PASSIVE
ACTIVE
TPM
FINGERPRINT
ELEMENT
FACE
TOKEN
RBA
ACTIVE
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
PASSIVE
SILENT
VOICE
USB
FACE
BIOMETRIC
RBA
ACTIVE
SECURE
NFC
USB
BIOMETRIC
PIN
SILENT
TPM
VOICE
NFC
USB
FACE
PIN
USB
FACE
BIOMETRIC
PIN
RBA
ACTIVE
FINGERPRINT
NFC
TOKEN
RBA
VOICE
ELEMENT
USB
FACE
PIN
RBA
SILENT
VOICE
SECURE
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
RBA
ACTIVE
TPM
FACE
TOKEN
RBA
ACTIVE SILENT
VOICE
ELEMENT
USB
FACE
PIN
RBA
ACTIVE
SILENT
PIN
TOKEN
RBA
VOICE
SECURE
NFC
USB
TOKEN
PASSIVE
ACTIVE
TPM
FACE
BIOMETRIC
TOKEN
ACTIVE
TPM
FACE
NFC
USB
FACE
BIOMETRIC
TOKEN
PASSIVE
PIN
ACTIVE
TPM
VOICE
ELEMENT
NFC
TPM
VOICE
NFC
USB
FACE
TOKEN
RBA
TPM USB
FACE
BIOMETRIC
RBA
PASSIVE
SILENT
USB
BIOMETRIC
TPM
SECURE
NFC
PIN
RBA
PASSIVE
SILENT
VOICE
SILENT
VOICE
ELEMENT
USB
PIN
TOKEN
RBA
PASSIVE
NFC
FACE
BIOMETRIC
TOKEN
RBA
SILENT
TPM
SECURE
SILENT
VOICE
USB
RBA
USB
FACE
RBA
VOICE
RBA
SILENT
SECURE
USB
PIN
RBA
SILENT
TPM
ELEMENT
USB
FACE
VOICE
NFC
USB
TOKEN
RBA
SECURE
FACE
TPM
FACE
PIN
FINGERPRINT
NFC
RBA
SILENT
USB
FACE
PIN
ACTIVE
SILENT
PIN
RBA
NFC
USB
BIOMETRIC
TPM
VOICE
USB
FACE
PASSIVE
ELEMENT
TOKEN
TPM
VOICE
SILENT
NFC
USB
PIN
RBA
SILENT
TPM
VOICE
NFC
USB
FACE
PASSIVE
TPM
VOICE
TPM
NFC
PIN
TOKEN
ACTIVE
SECURE
USB
RBA
PASSIVE
NFC
USB
FACE
RBA
TPM
TOKEN
PASSIVE
SECURE
USB
FACE
ACTIVE
TPM
FACE
PIN
RBA
VOICE
USB
PASSIVE
TOKEN
RBA
NFC
USB
SILENT
USB
RBA
FACE
PIN
ACTIVE
NFC
USB
USB
PIN
RBA
NFC
SILENT
TPM
VOICE
FACE
PIN
TPM
NFC
USB
TPM
RBA
PASSIVE
NFC
USB
PIN
TPM
PIN
PASSIVE
PIN
USB
TPM
NFC
USB
FACE
FACE
RBA
SILENT
FINGERPRINT
USB
NFC
USB
ACTIVE
VOICE
USB
TPM
PIN
RBA
FACE
TPM
TPM
USB
PIN
TPM
NFC
FACE
TOKEN
RBA
USB
PASSIVE
VOICE
NFC
PIN
USB
FACE
USB
RBA
TPM
PIN
NFC
FACE
RBA
ACTIVE
TPM
USB
USB
TPM
PIN
FACE
NFC
USB
PIN
RBA
FACE
USB
USB
RBA
NFC
NFC
TPM
NFC
RBA
USB
PIN
NFC
USB
PIN
USB
ELEMENT
PIN
PIN
TPM
USB
USB
TPM
VOICE
NFC
RBA
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
USB
NFC
USB
TPM
FACE
USB
PIN
USB
USB
PIN
NFC
VOICE
NFC
USB
USB
USB
USB
FACE
TPM
USB
TPM
USB
USB
TPM
USB
FACE
NFC
RBA
USB
USB
USB
FACE
USB
USB
RBA
PIN
VOICE
USB
PIN
USB
USB
RBA
USB
TPM
RBA
RBA
PIN
NFC
NFC
USB
TPM
USB
TPM
USB
USB
USB
USB
NFC
TPM
NFC
FACE
USB
FACE
USB
USB
TPM
USB
USB
USB
USB
USB
FACE
USB
USB
USB
USBRBA
USB
USB
USB
USB
USB
USB
USB
RBA
USB
USB
USB
NFC
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
REGISTRATION
18
Initiate Provisioning
Registration Response + Public Key
Validate Response & Attestation
Registration Request + Policy
MFAS MFAC
Relying P
arty Server
Relying Party App
2
4
5
Device Relying Party
1
3 Enroll User & Generate Keys
AUTHENTICATION
19
Initiate Authentication
Authentication Response
Validate Response
Authentication Request+ Challenge + Policy
MFAS MFAC
Relying P
arty Server
Relying Party App
2
4
5
Device Relying Party
1
3 Authenticate User & Unlock Key
TRANSACTION CONFIRMATION
20
Initiate Transaction
Authentication Response + Text Hash
Validate Response &
Text Hash
Auth Req+ Challenge + Policy + Transaction Text
MFAS MFAC
Relying P
arty Server
Relying Party App
2
4
5
Device Relying Party
1
3 Display Text,
Authenticate User & Unlock Key
The S3 Authentication Suite
21
TPM
FINGERPRINTSECURE
USB
FACE
BIOMETRIC
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICEELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT TPM
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVEACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
USB
FACE
PIN
PASSIVE
ACTIVE
TPM
FINGERPRINT
VOICE
ELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PINACTIVE
SILENT
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
PASSIVE
ACTIVE
FINGERPRINT
VOICE
SECURE
ELEMENT
USB
BIOMETRIC
PIN
TOKEN
RBA PASSIVE
ACTIVE
VOICE
SECURE
NFC
FACE
TOKEN
PASSIVEACTIVE
TPM
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
TPM
FINGERPRINT
SECURE
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
ELEMENT
NFC
USB
TOKEN
RBA
PASSIVE
TPM
VOICE
SECURE
ELEMENT
NFC
FACE
BIOMETRIC
PIN
ACTIVE
TPM
FINGERPRINT
SECURE
USB
TOKEN
ACTIVE SILENT
TPM
FINGERPRINT
VOICENFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
RBA
SILENT
TPMELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
SILENT
TPM
ELEMENT
NFC
USB
PIN
TOKEN
RBA
ACTIVE
FINGERPRINT
ELEMENT
USB
TPM
VOICE
ELEMENT
USB
PIN
RBA
PASSIVE
ACTIVE
TPM
VOICE
SECURE
ELEMENT
USB
FACE
ACTIVE
FINGERPRINT
VOICE
PIN
RBA
PASSIVE
ACTIVE
TPM
FINGERPRINT
ELEMENT
FACE
TOKEN
RBA
ACTIVE
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
PASSIVE
SILENT
VOICE
USB
FACE
BIOMETRIC
RBA
ACTIVE
SECURE
NFC
USB
BIOMETRIC
PIN
SILENT
TPM
VOICE
NFC
USB
FACE
PIN
USB
FACE
BIOMETRIC
PIN
RBA
ACTIVE
FINGERPRINT
NFC
TOKEN
RBA
VOICE
ELEMENT
USB
FACE
PIN
RBA
SILENT
VOICE
SECURE
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
RBA
ACTIVE
TPM
FACE
TOKEN
RBA
ACTIVE SILENT
VOICE
ELEMENT
USB
FACE
PIN
RBA
ACTIVE
SILENT
PIN
TOKEN
RBA
VOICE
SECURE
NFC
USB
TOKEN
PASSIVE
ACTIVE
TPM
FACE
BIOMETRIC
TOKEN
ACTIVE
TPM
FACE
NFC
USB
FACE
BIOMETRIC
TOKEN
PASSIVE
PIN
ACTIVE
TPM
VOICE
ELEMENT
NFC
TPM
VOICE
NFC
USB
FACE
TOKEN
RBA
TPM USB
FACE
BIOMETRIC
RBA
PASSIVE
SILENT
USB
BIOMETRIC
TPM
SECURE
NFC
PIN
RBA
PASSIVE
SILENT
VOICE
SILENT
VOICE
ELEMENT
USB
PIN
TOKEN
RBA
PASSIVE
NFC
FACE
BIOMETRIC
TOKEN
RBA
SILENT
TPM
SECURE
SILENT
VOICE
USB
RBA
USB
FACE
RBA
VOICE
RBA
SILENT
SECURE
USB
PIN
RBA
SILENT
TPM
ELEMENT
USB
FACE
VOICE
NFC
USB
TOKEN
RBA
SECURE
FACE
TPM
FACE
PIN
FINGERPRINT
NFC
RBA
SILENT
USB
FACE
PIN
ACTIVE
SILENT
PIN
RBA
NFC
USB
BIOMETRIC
TPM
VOICE
USB
FACE
PASSIVE
ELEMENT
TOKEN
TPM
VOICE
SILENT
NFC
USB
PIN
RBA
SILENT
TPM
VOICE
NFC
USB
FACE
PASSIVE
TPM
VOICE
TPM
NFC
PIN
TOKEN
ACTIVE
SECURE
USB
RBA
PASSIVE
NFC
USB
FACE
RBA
TPM
TOKEN
PASSIVE
SECURE
USB
FACE
ACTIVE
TPM
FACE
PIN
RBA
VOICE
USB
PASSIVE
TOKEN
RBA
NFC
USB
SILENT
USB
RBA
FACE
PIN
ACTIVE
NFC
USB
USB
PIN
RBA
NFC
SILENT
TPM
VOICE
FACE
PIN
TPM
NFC
USB
TPM
RBA
PASSIVE
NFC
USB
PIN
TPM
PIN
PASSIVE
PIN
USB
TPM
NFC
USB
FACE
FACE
RBA
SILENT
FINGERPRINT
USB
NFC
USB
ACTIVE
VOICE
USB
TPM
PIN
RBA
FACE
TPM
TPM
USB
PIN
TPM
NFC
FACE
TOKEN
RBA
USB
PASSIVE
VOICE
NFC
PIN
USB
FACE
USB
RBA
TPM
PIN
NFC
FACE
RBA
ACTIVE
TPM
USB
USB
TPM
PIN
FACE
NFC
USB
PIN
RBA
FACE
USB
USB
RBA
NFC
NFC
TPM
NFC
RBA
USB
PIN
NFC
USB
PIN
USB
ELEMENT
PIN
PIN
TPM
USB
USB
TPM
VOICE
NFC
RBA
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
USB
NFC
USB
TPM
FACE
USB
PIN
USB
USB
PIN
NFC
VOICE
NFC
USB
USB
USB
USB
FACE
TPM
USB
TPM
USB
USB
TPM
USB
FACE
NFC
RBA
USB
USB
USB
FACE
USB
USB
RBA
PIN
VOICE
USB
PIN
USB
USB
RBA
USB
TPM
RBA
RBA
PIN
NFC
NFC
USB
TPM
USB
TPM
USB
USB
USB
USB
NFC
TPM
NFC
FACE
USB
FACE
USB
USB
TPM
USB
USB
USB
USB
USB
FACE
USB
USB
USB
USBRBA
USB
USB
USB
USB
USB
USB
USB
RBA
USB
USB
USB
NFC
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
UNIFIED AUTHENTICATION
22
ANY DEVICE. ANY APPLICATION. ANY AUTHENTICATOR.
App 2
App 1
New App
NOK NOK LABS
Unified Authentication Protocol
?
Applications Authentication Methods
NOK NOK’S S3 SUITE ARCHITECTURE
23
NOK NOK LABS 3RD PARTY
THE DEVIL IS IN THE DETAILS LAYERED SECURITY MECHANISMS
24
Authenticator
MFAC
TLS Channel
ASM
App Web Backend
MFAS User consent
Channel binding
Key handle access token FacetID token match
Unique Uauth keys
Uauth keys protection
Authenticator attestation
Client-side nonces
Signature counter
Transaction confirmation
Channel binding/AppID TLS server key
FacetID list
Round-trip integrity
Server-side nonces
Authenticator metadata
Secured verifier DB
Registration confidentiality
Uauth.pub Keys
Metadata Service
Certified authenticators
Account secrecy
AVAILABLE ON THE GALAXY S5
25
50-60M Units Expected to ship
150 Launch Countries
World’s First FIDO Ready Smartphone
Introducing Fingerprint Authentication
Used by
INTER-DEVICE AUTHENTICATION USE QR CODES OR PUSH NOTIFICATIONS
26
Login 1
Notify 2
Redirect 4 3
2
CONCLUSION
27
Touch ID
Authentication
Transactions
Other Authenticators
Other Devices
Inter-Device Authentication • Touch ID API offers
local authentication only
• Integration options differ in levels of authentication integrity
• Nok Nok Labs’ solution, built on FIDO Alliance’s UAF offers a turnkey robust option
EVALUATE NNL IOS CLIENT TODAY!
Today: PIN or Voice Fall 2014: Touch ID support Request evaluation from: https://www.noknok.com
PRIVATE & CONFIDENTIAL 28
Any Device. Any Application. Any Authenticator.
29
TPM
FINGERPRINTSECURE
USB
FACE
BIOMETRIC
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICEELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT TPM
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVEACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
USB
FACE
PIN
PASSIVE
ACTIVE
TPM
FINGERPRINT
VOICE
ELEMENT
NFC
USB
FACE
BIOMETRIC
TOKEN
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURENFC
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PINACTIVE
SILENT
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
SECURE
ELEMENT
NFC
USB
FACE
PIN
TOKEN
PASSIVE
ACTIVE
FINGERPRINT
VOICE
SECURE
ELEMENT
USB
BIOMETRIC
PIN
TOKEN
RBA PASSIVE
ACTIVE
VOICE
SECURE
NFC
FACE
TOKEN
PASSIVEACTIVE
TPM
ELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
TPM
FINGERPRINT
SECURE
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
NFC
FACE
BIOMETRIC
PIN
PASSIVE
SILENT
ELEMENT
NFC
USB
TOKEN
RBA
PASSIVE
TPM
VOICE
SECURE
ELEMENT
NFC
FACE
BIOMETRIC
PIN
ACTIVE
TPM
FINGERPRINT
SECURE
USB
TOKEN
ACTIVE SILENT
TPM
FINGERPRINT
VOICENFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
ACTIVE
SILENT
TPM
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
RBA
SILENT
TPMELEMENT
NFC
USB
FACE
PIN
TOKEN
RBA
PASSIVE
SILENT
TPM
ELEMENT
NFC
USB
PIN
TOKEN
RBA
ACTIVE
FINGERPRINT
ELEMENT
USB
TPM
VOICE
ELEMENT
USB
PIN
RBA
PASSIVE
ACTIVE
TPM
VOICE
SECURE
ELEMENT
USB
FACE
ACTIVE
FINGERPRINT
VOICE
PIN
RBA
PASSIVE
ACTIVE
TPM
FINGERPRINT
ELEMENT
FACE
TOKEN
RBA
ACTIVE
TPM
ELEMENT
NFC
USB
FACE
BIOMETRIC
RBA
ACTIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
USB
FACE
PIN
TOKEN
PASSIVE
SILENT
VOICE
USB
FACE
BIOMETRIC
RBA
ACTIVE
SECURE
NFC
USB
BIOMETRIC
PIN
SILENT
TPM
VOICE
NFC
USB
FACE
PIN
USB
FACE
BIOMETRIC
PIN
RBA
ACTIVE
FINGERPRINT
NFC
TOKEN
RBA
VOICE
ELEMENT
USB
FACE
PIN
RBA
SILENT
VOICE
SECURE
FACE
PIN
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
VOICE
RBA
ACTIVE
TPM
FACE
TOKEN
RBA
ACTIVE SILENT
VOICE
ELEMENT
USB
FACE
PIN
RBA
ACTIVE
SILENT
PIN
TOKEN
RBA
VOICE
SECURE
NFC
USB
TOKEN
PASSIVE
ACTIVE
TPM
FACE
BIOMETRIC
TOKEN
ACTIVE
TPM
FACE
NFC
USB
FACE
BIOMETRIC
TOKEN
PASSIVE
PIN
ACTIVE
TPM
VOICE
ELEMENT
NFC
TPM
VOICE
NFC
USB
FACE
TOKEN
RBA
TPM USB
FACE
BIOMETRIC
RBA
PASSIVE
SILENT
USB
BIOMETRIC
TPM
SECURE
NFC
PIN
RBA
PASSIVE
SILENT
VOICE
SILENT
VOICE
ELEMENT
USB
PIN
TOKEN
RBA
PASSIVE
NFC
FACE
BIOMETRIC
TOKEN
RBA
SILENT
TPM
SECURE
SILENT
VOICE
USB
RBA
USB
FACE
RBA
VOICE
RBA
SILENT
SECURE
USB
PIN
RBA
SILENT
TPM
ELEMENT
USB
FACE
VOICE
NFC
USB
TOKEN
RBA
SECURE
FACE
TPM
FACE
PIN
FINGERPRINT
NFC
RBA
SILENT
USB
FACE
PIN
ACTIVE
SILENT
PIN
RBA
NFC
USB
BIOMETRIC
TPM
VOICE
USB
FACE
PASSIVE
ELEMENT
TOKEN
TPM
VOICE
SILENT
NFC
USB
PIN
RBA
SILENT
TPM
VOICE
NFC
USB
FACE
PASSIVE
TPM
VOICE
TPM
NFC
PIN
TOKEN
ACTIVE
SECURE
USB
RBA
PASSIVE
NFC
USB
FACE
RBA
TPM
TOKEN
PASSIVE
SECURE
USB
FACE
ACTIVE
TPM
FACE
PIN
RBA
VOICE
USB
PASSIVE
TOKEN
RBA
NFC
USB
SILENT
USB
RBA
FACE
PIN
ACTIVE
NFC
USB
USB
PIN
RBA
NFC
SILENT
TPM
VOICE
FACE
PIN
TPM
NFC
USB
TPM
RBA
PASSIVE
NFC
USB
PIN
TPM
PIN
PASSIVE
PIN
USB
TPM
NFC
USB
FACE
FACE
RBA
SILENT
FINGERPRINT
USB
NFC
USB
ACTIVE
VOICE
USB
TPM
PIN
RBA
FACE
TPM
TPM
USB
PIN
TPM
NFC
FACE
TOKEN
RBA
USB
PASSIVE
VOICE
NFC
PIN
USB
FACE
USB
RBA
TPM
PIN
NFC
FACE
RBA
ACTIVE
TPM
USB
USB
TPM
PIN
FACE
NFC
USB
PIN
RBA
FACE
USB
USB
RBA
NFC
NFC
TPM
NFC
RBA
USB
PIN
NFC
USB
PIN
USB
ELEMENT
PIN
PIN
TPM
USB
USB
TPM
VOICE
NFC
RBA
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
USB
NFC
USB
TPM
FACE
USB
PIN
USB
USB
PIN
NFC
VOICE
NFC
USB
USB
USB
USB
FACE
TPM
USB
TPM
USB
USB
TPM
USB
FACE
NFC
RBA
USB
USB
USB
FACE
USB
USB
RBA
PIN
VOICE
USB
PIN
USB
USB
RBA
USB
TPM
RBA
RBA
PIN
NFC
NFC
USB
TPM
USB
TPM
USB
USB
USB
USB
NFC
TPM
NFC
FACE
USB
FACE
USB
USB
TPM
USB
USB
USB
USB
USB
FACE
USB
USB
USB
USBRBA
USB
USB
USB
USB
USB
USB
USB
RBA
USB
USB
USB
NFC
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
