9
FIDO Standards Providing a Foundation for simpler, Stronger AAL2 Authentication in Health Care JEREMY GRANT VENABLE LLP [email protected]
![Page 1: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/1.jpg)
FIDO Standards
Providing a Foundation for simpler, Stronger AAL2 Authentication in Health Care JEREMY GRANTVENABLE LLP
![Page 2: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/2.jpg)
©2019 LEAVITT PARTNERS 2
The Challenge: How to Deliver Authentication at AAL2?
All Rights Reserved | FIDO Alliance | Copyright 2019
![Page 3: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/3.jpg)
©2019 LEAVITT PARTNERS 3
1B+ Android Devices Have FIDO “Built In”
All Rights Reserved | FIDO Alliance | Copyright 2019
![Page 4: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/4.jpg)
©2019 LEAVITT PARTNERS 4
800M+ Windows Devices Have FIDO “Built IN”
All Rights Reserved | FIDO Alliance | Copyright 2019
![Page 5: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/5.jpg)
©2019 LEAVITT PARTNERS 5
LEADING THE EFFORT
All Rights Reserved | FIDO Alliance | Copyright 2019
CONSUMER ELECTRONICS SECURITY & BIOMETRICS HIGH-ASSURANCE SERVICES
![Page 6: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/6.jpg)
©2019 LEAVITT PARTNERS 6
FIDO Specifications
All Rights Reserved | FIDO Alliance | Copyright 2019
FIDO UAFFIDO U2F
(@FIDO)
CTAP(@FIDO)
WebAuthn(@W3C)
FIDO2
![Page 7: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/7.jpg)
©2019 LEAVITT PARTNERS 7
Experiences address array of use cases
FIDO standards provide support for user-friendly, privacy-aware user experiences across platforms to meet varying requirements
PASSWORDLESS EXPERIENCES (UAF & FIDO2) SECOND FACTOR EXPERIENCES (U2F & FIDO2) • Biometrics authn via mobile device• Biometric authn via PC• Biometrics authn to PC via mobile device
• External token to PC (USB, BLE)• External token to mobile device (NFC/BLE)• Embedded second factor on PC
All Rights Reserved | FIDO Alliance | Copyright 2019
![Page 8: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/8.jpg)
©2019 LEAVITT PARTNERS 8
NEW NIST guidance (SP 800-63-3)
NIST AUTHENTICATOR ASSURANCE LEVEL 1
NIST AUTHENTICATOR
ASSURANCE LEVEL 3
NIST AUTHENTICATOR
ASSURANCE LEVEL 2
• Easily compromised credentials
• Credentials stored in the cloud
• Example: passwords (“memorized secrets”)
• Public Key Cryptography -Credentials stored ON DEVICE
• Focus on Verifier Impersonation Resistance
“Authenticators that involve the manual entry of an authenticator output, such as out-of-band and OTP authenticators, SHALL NOT be considered verifier impersonation-resistant because the manual entry does not bind the authenticator output to the specific session being authenticated.”
• SMS OTPs now RESTRICTED
• Single and Multi-Factor Cryptographic Devices
All Rights Reserved | FIDO Alliance | Copyright 2019
![Page 9: &/ K ^ v W } À ] ] v P & } µ v ] } v ( } ] u o U ^ } v P ... · Title: Microsoft PowerPoint - CARIN_DIGITAL ID SUMMIT_Slides_Authentication Author: LaurenWard Created Date: 6/28/2019](https://reader030.documents.pub/reader030/viewer/2022041104/5f052a337e708231d4119851/html5/thumbnails/9.jpg)
©2019 LEAVITT PARTNERS 9
One more item – IAL and new OMB memo
• Key question with Remote Identity Proofing at new account opening – how do you know if someone is who they claim to be?• Government documents work in the in-person world – how to tackle
online?• KBA, other legacy tools have challenges
• New OMB Memo 19-17 – released May 21 • “Agencies that are authoritative sources for attributes (e.g., SSN) utilized in identity proofing events,
as selected by OMB and permissible by law, shall establish privacy enhanced data validation APIs for public and private sector identity proofing services to consume, providing a mechanism to improve the assurance of digital identity verification transactions based on consumer consent.
These selected agencies, in coordination with OMB, shall establish standard processes and terms of use for public and private sector identity proofing services that want to consume the APIs.”
All Rights Reserved | FIDO Alliance | Copyright 2019
![o < o À P o } P o P ] v µ v · 2019-12-18 · µ v P µ X h v P v l o µ u ] P u u v U u v ] P µ U Z À ] ( ( t v u µ v P](https://static.documents.pub/doc/80x56/5fb98d91d1680979b16ecea5/o-o-p-o-p-o-p-v-v-2019-12-18-v-p-x-h-v-p-v-l-o-u-p-u.jpg)
![Fiesta MY2020.75 - final srpski...K } v v d ] v ] µ u ] À ^d r> ] v ^ds ] P v o DW ~ l ] i u À } P µ P o o l ] v ] u U P i v ] u } À ] Ì } ] u µ µ } Ì } v i u Ì v } o Ì](https://static.documents.pub/doc/80x56/60903cc65839742bbd19bb9c/fiesta-my202075-final-srpski-k-v-v-d-v-u-d-r-v-ds-.jpg)
![P l } o v d À ] v v v o l } o · 2020-05-27 · P P } u u o i ] Z o } u u ( ] v U } P o Ç ] v ] À ] µ o o o v X , À ] µ v l Z u U](https://static.documents.pub/doc/80x56/5f483ee46fe8343e605bd700/p-l-o-v-d-v-v-v-o-l-o-2020-05-27-p-p-u-u-o-i-z-o-u-u-v-u-.jpg)
![u } ( ] } ] v ] } ] W u } ( Z , µ u v' µ } v v } Z u } Z P ] Z ] Z ] } o ......^ ] P v ] ( ] v ] o P } Á Z ] v Z i i µ v µ u v ] o µ u U u } o Ç ] v Z ] o Z } µ o o X U W](https://static.documents.pub/doc/80x56/5fe8f78cb53138045e647015/-u-v-w-u-z-u-v-v-v-z-u-z-p-z-z-o-.jpg)
![Æ v u v } ( Z } ] o ] u } ( Z P µ ] } v } ( v P o Z ( } u Z P } Ç ......^ ] } ( Z } u u ] ( } À o } u v W } o ] Ç U h v ] E ] } v u v ( } } v } u ] v ^ } ] o ( ( ] U í U î ì](https://static.documents.pub/doc/80x56/60abf540d41fca44cc46e0de/-v-u-v-z-o-u-z-p-v-v-p-o-z-u-z-p-.jpg)
![LGS Presentation Ne · KDD Z / > lZ d /> µ ] v U µ ] u v o ] v P } u v ] U o ] À } l v ] v P U u ] v v v Wh >/ tKZ](https://static.documents.pub/doc/80x56/5f919b0cc4185e1eb62a9a52/lgs-presentation-kdd-z-lz-d-v-u-u-v-o-v-p-u-v-u-o-.jpg)
![Re- } v µ o ] ] v P D ] µ u } ( W ( } u v - IAML · Medium of Performance – RDA < ] u u Ç ^ Ì } { Z - } v µ o ] ] v P D ] µ u } ( W ( } u v > ] v l { / D> } v P {](https://static.documents.pub/doc/80x56/5f968d75f366dd3044622990/re-v-o-v-p-d-u-w-u-v-iaml-medium-of-performance-a-rda.jpg)
![FINAL for Public Release - Oranga Tangata Oranga Whanau ... · K v P d v P U K v P t Z v µ í K v P d v P U K v P t Z v µ K v P d v P U K v P t Z v µ î Æ µ ] À ^ µ u u Ç](https://static.documents.pub/doc/80x56/5f8a7988b7732707fe0132ae/final-for-public-release-oranga-tangata-oranga-whanau-k-v-p-d-v-p-u-k-v-p.jpg)
![µ Ç } v Ç v u ] } v } ( u ] r µ u ] o ( o } ] v P Á ] v µ ...€¦ · µ Ç } v Ç v u ] } v } ( u ] r µ u ] o ( o } ] v P Á ] v µ ] v } v ] ] v P } u ] v Á À v µ v o](https://static.documents.pub/doc/80x56/6044ee0af0a78610cc1ddacf/-v-v-u-v-u-r-u-o-o-v-p-v-v-.jpg)
![E Á } l d Z v } o } P Ç u ] v ] ] } v v ^ µ ] Ç W } r P ...€¦ · } P u Z } µ U À ] ] Z } P u o ] v l W Á Á Á X À X l ] v v ] } v o l } P u l } P u r l Z v } o } P Ç](https://static.documents.pub/doc/80x56/60cf0ebabad1e35e520e83f5/e-l-d-z-v-o-p-u-v-v-v-w-r-p-p-u-z-u-.jpg)
![P v Ç Z µ ] v P d Z W } i W Z ] o ^ ( Ç u v PIJ... · 2020-04-10 · z z z E z z z z E z z z {W } P u D v P u v ~ } v } }W } P u D v P u v ~ v µ Z o o } i u ] v ] v } v ] v }](https://static.documents.pub/doc/80x56/5f29c6618e2932551e389057/p-v-z-v-p-d-z-w-i-w-z-o-u-v-pij-2020-04-10-z-z-z-e-z-z.jpg)
![h v ] v } ( } o ] } v D Z o Ç l v } Á o P } ( ( Ç u v P u ... · , wz< î ì ñ Ç } µ v ] u o U u ] v v v v u v } P u ] v u µ o µ Ç u , W Z ï ì ð](https://static.documents.pub/doc/80x56/60b39bd26276134c0b72d4ab/h-v-v-o-v-d-z-o-l-v-o-p-u-v-p-u-wz-.jpg)
![Residential Tenancy Application Form · d v v Ç o ] ] } v & } u t Z v } u o ] v P v µ u ] ] v P v o ] ] } v ( } v o } Ç Z ( } o o } Á ] v P µ ] u v Dh^d u v](https://static.documents.pub/doc/80x56/5fc9dfbef7fea82a510bf230/residential-tenancy-application-form-d-v-v-o-v-u-t-z-v-u-o-.jpg)
![u P ] v P d v ] v / v µ ] o D } } ] ] À v ^ Ç u ( } ] u } À ] v P v P Ç ( ( ] ] v Ç · 2019-04-18 · v P Ç ( ( ] ] v Ç ] v u } } Ç u ^/ D E^ í í í ñ Z t í í ï ì](https://static.documents.pub/doc/80x56/5f478237b8243515803786b8/u-p-v-p-d-v-v-v-o-d-v-u-u-v-p-v-p-.jpg)
![v ] µ W Z } } } µ ] / u P ] v P } ( Ç ] v } Z À o Z D Z v ] u } ( > ] u ... · 2019. 7. 18. · / v ] µ W Z } } } µ ] / u P ] v P } ( Ç ] v } Z À o Z D Z v ] u } ( > ] u](https://static.documents.pub/doc/80x56/605669a2db3e6636e335f901/v-w-z-u-p-v-p-v-z-o-z-d-z-v-u-u-.jpg)
![u } ] } v o } } } ( ] P Z r Á ] v P } o ] ] o } µ o ] u D ... · u } ] } v o } } } ( ] P Z r Á ] v P } o ] ] o } µ o ] u ... u } ] } v o } } } ( ] P Z r Á ] v P } o ] ] o } µ](https://static.documents.pub/doc/80x56/5e0ee75edea8723fe9108e76/u-v-o-p-z-r-v-p-o-o-o-u-d-u-v-o-.jpg)
![0LVXUH DGRWWDWH · 0LVXUH DGRWWDWH x ] À ] } ] ] v P } o u µ } } µ ] ï ó U ñ £ x K o ] P } ] ] v } o u Z ] v P o ] « x / v À ] } ] o ] v ] v } v u v v o v P } Ì ] } ] ¶](https://static.documents.pub/doc/80x56/5f0a287c7e708231d42a4ae7/0lvxuh-dgrwwdwh-0lvxuh-dgrwwdwh-x-v-p-o-u-u-.jpg)
![^ u µ ] o ] v P Z ( v < ] h ' µ ] ~ ^h ' µ ] · 2019-08-15 · u } ] } v ] v Ç ] u Á ] Z ] v Z v Æ ñ u ] v µ X K v o Ç ( ] v P v } u } ] } v µ ] v P ñ u ] v µ](https://static.documents.pub/doc/80x56/5e2fa78d0cbb0973f54f3874/-u-o-v-p-z-v-h-h-2019-08-15-u-v-v-.jpg)