Michael Barrett, President, FIDO Alliance
London October 10, 2013
www.fidoalliance.org Copyright 2013, The FIDO Alliance
All Rights Reserved 1
Ø Consumerization of enterprise IT
Ø OEMs acquiring/developing fingerprint sensor capability
Ø Open standards development – FIDO
Ø Holistic ecosystem safety - Shared Signals
Trends in authentication
www.fidoalliance.org Copyright 2013, The FIDO Alliance
All Rights Reserved 20
iPhone 5 authentication as a driver
• Users are at the center of a world of connected intelligence
• Consumerization of enterprise IT is an unstoppable trend
• Apple’s Touch ID is well architected
• Expect to see penetration of these devices into new domains
• Standards are critical to proliferation
Copyright 2013, The FIDO Alliance All Rights Reserved www.fidoalliance.org 2
Opportunity for Better Authentication is Upon Us
For Users For Organizations
Painful to Use
• 25 Accounts • 8 Logins / Day • 6.5 Passwords
Difficult to Secure
• $5.5M / Data Breach • $15M / PWD Reset • $60+ / Token
For the Ecosystem
Impossible to Scale
• Fragmented • Inflexible • Slow to Adopt
www.fidoalliance.org Copyright 2013, The FIDO Alliance
All Rights Reserved 3
Common experiences related to authentication failure (respondents who say it happened to them one or more times over the past 2 years)
Users are frustrated - password complexity requirements working against them instead of supporting them
Experiences with Identity and Authentication
www.fidoalliance.org Copyright 2013, The FIDO Alliance
All Rights Reserved 4
DO YOU REALLY WANT YOUR REFRIGERATOR TO KNOW YOUR PAYPAL
PASSWORD?
Do You Really Want Your Refrigerator to Know Your PayPal Password?
0
20
40
60
80
100
120
2006 2007 2008 2009 2010 2011 2012
Authentication Vendors
A Full Field…
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 7
JUST EASY
“BETTER AUTHENTICATION”
JUST BAD
Hig
h Se
curit
y Lo
w
UNPLEASANT
Low High Usability
Security is not a Continuum…
Copyright 2013, The FIDO Alliance All Rights Reserved www.fidoalliance.org 5
New Technology Options…
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 6
Authentication Standards Combined with Advances in Biometrics Provide a New Path Forward
Copyright 2013, The FIDO Alliance All Rights Reserved www.fidoalliance.org 3
How FIDO Works
FIDO Authenticators
Website Browser
FIDO Plugin
Device Specific Module
64
1
23 5
Validation Cache
secret secrets
refr
esh
Vendor Tokens FIDO
Repository
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 8
• User picks their own token type
• User decides when/if to bind their token to their account
• Existing tokens (like finger) can be used by downloading the FIDO plugin
• User can download the plugin from various sites
• User could have a PIN-protected USB drive to use while travelling
The FIDO “User” Experience
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 9
Please say your passphrase to log into your account
Speak
Voice Experience…
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 10
Finger Experience…
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 11
USB Experience…
www.fidoalliance.org Copyright 2013, The FIDO Alliance All Rights Reserved 12
16
Additive two-factor Authentication…
Copyright 2013, The FIDO Alliance All Rights Reserved www.fidoalliance.org 13
Ø The Internet needs better authentication, now Ø Stronger authentication is not “better
authentication” Ø An industry standards based approach is the
only viable way forward Ø “Whether you believe you can do a thing, or
not, you are right” (Henry Ford) www.fidoalliance.org Copyright 2013, The FIDO Alliance
All Rights Reserved 19
Michael Barrett, CISM, CISSP President, the FIDO Alliance
Thank You for Your Time!
www.fidoalliance.org Copyright 2013, The FIDO Alliance
All Rights Reserved 20
[email protected] http://www.fidoalliance.org
Top Related