FIDO - The Value of Membership

All Rights Reserved | FIDO Alliance | 2016 1

THE VALUE OF MEMBERSHIPBrett McDowell, Executive Director

[email protected]

mailto:[email protected]


WHY FIDO ALLIANCE?


Solving the Password Problem

63% of data breaches in 2015 involved weak,

default, or stolen

passwords-Verizon Data Breach

Report

Data breaches expected to reach

1,000 in 2016 up 22% from 2015

-Identity Theft Resource Center

Each data breach costs

$3.8 million on average

up 23% from 2013-Ponemon Institute


WHO IS FIDO ALLIANCE?


The FIDO Alliance is an open industry association of over 250 organizations with a focused mission: authentication standards


Board Members


WHAT IS FIDO AUTHENTICATION?


HOW “Shared Secrets” WORK

ONLINE

The user authenticates themselves online by presenting a human-

readable “shared secret”


HOW FIDO WORKS

AUTHENTICATOR

LOCAL ONLINE

The user authenticates

“locally” to their device (by various

means)

The device authenticates the user online using

public key cryptography


Support for Two Authentication Experiences

ENABLES MANY AUTHENTICATION OPTIONS | EACH SERVICE PROVIDER REGISTERS UNIQUE FIDO CREDENTIALS


USABILITY, SECURITY, R.O.I. and

PRIVACY


No 3rd Party in the Protocol

No Secrets on the Server Side

Biometric Data (if used) Never Leaves Device

No (*new*) Link-ability Between Services

No (*new*) Link-ability Between Accounts


MARKET ADOPTION


FIDO Development History

FIDO 1.0 FINALFirst

Deployments UAF & U2FSpecification

Review DraftFIDO Ready

ProgramAlliance Announced

FEB

2013

DEC 2013

FEB 2014

FEB-OCT 2014

DEC 92014

MAY 2015

FEB2016

Formal Standardization

JUNE 2015

Certification Program

New U2F Transports

DEC2016

FIDO 1.1

All Rights Reserved | FIDO Alliance | 2016

Sample FIDO Adoption/Announcements

15

16

Certification Growth

All Rights Reserved | FIDO Alliance | 2016

An open competitive market Ensures interoperability Sign of mature FIDO

ecosystem

250+

FIDO® Certified products available today

Apr-15 Jul-15 Sep-15 Dec-15 Mar-16 May-16 Aug-16

152

6432

62 74108

162

216

253 TOTAL

Leading OEMs Shipping FIDO Certified Devices

S5, Mini Alpha Note 4,5 Note Edge Tab S, Tab S2

S6, S6 Edge

S7, S7 Edge Vernee Thor

Aquos Zeta Xperia Z5

Xperia Z5 Compact

Xperia Z5 Premium

Mate 8

V10 G5

Phab2 Pro

Phab2 Plus

Z2, Z2 Pro

Arrows NX

Arrows Fit

Arrows Tab



FIDO in Windows & Web EcosystemsWindows Platforms

Yoga 910

Web


Summary: FIDO Authentication Delivers

Better securityfor online services

Reduced costfor the enterprise

Simpler and saferfor users


GETTING ENGAGED

21All Rights Reserved | FIDO Alliance | 2016

How FIDO Works

MembershipLevels

TechnicalWorkstreams

Marketing & AdoptionWorkstreams


Membership Levels

BoardSets strategy and overall direction for Alliance

SponsorLeads development through FIDO working groups & in

marketplace

AssociateAnnual networking opportunity, participate in broader

ecosystem


Technical Working Groups

Security Requirements

“FIDO 2.0” Technology

Universal Authentication

Framework Technology

Universal 2nd Factor

Technology


Membership Value: Technology• Influence FIDO’s specifications and

technical output• Gain early visibility into specs to help

guide your product development and/or deployments • Benefit from the “IPR Promise”• Network with technical peers across

industry segments


“The IPR Promise” Process - 6.2.1.1

“For each Working Group in which one or more Bound Entities participates, Signatory, on behalf of itself, all its Related Entities and its and their successors in interest and assigns, promises not to assert its or its Related Entity’s Granted Claims against any Participant in such Working Group for its Public Permitted Uses or Working Group Permitted Uses, subject to the terms and conditions of this Agreement. [...]”

• A reciprocal promise to not assert patents against the normative requirements in FIDO specification

• Enables unencumbered growth of FIDO ecosystemhttp://fidoalliance.org/membership/details

http://fidoalliance.org/membership/details


Technical Working Groups

Security Requirements

FIDO 2.0 Technology

Universal Authentication

Framework Technology

Universal 2nd Factor

Technology

Influence Early Visibility

Peer-based

Networking


Adoption Working Groups

Certification Marketing Deploymen

t-at-Scale

Regional (China,

India, etc.)

Privacy & Public Policy


Membership Value: Marketing & Adoption• Tap into FIDO’s ecosystem marketing activities

• Reduced fees for certification testing & logo usage• Take part in FIDO Pavilions at leading industry

events (turnkey, discounted presence)• Gain insights from Market Research programs • Engage with experts to drive regional adoption

• Understand and establish deployment best practices (benefit from early adopter experience)• Influence, understand and engage on emerging policy issues


The Road AheadWeb

Authentication Specification

Brings FIDO to the Platform

Standards Effort with EMVCo

Client-to-Authenticator

Protocol (CTAP)

FIDO Gold Server + New

Certification Programs


What Our Members Say


NEXT STEPS


Membership Application Procedures

• Ready to join? • Visit https://fidoalliance.org/membership/

• Have more questions (even after our Q&A)? • Email [email protected]• Follow us @fidoalliance• Meet us at upcoming Industry events

• https://fidoalliance.org/upcoming-events/

https://fidoalliance.org/membership/

https://fidoalliance.org/upcoming-events/


JOIN THE FIDO ALLIANCE


THANK YOU!QUESTIONS?

[email protected] | [email protected]



Date post:	16-Apr-2017
Category:	Technology
Upload:	fido-alliance
View:	3,666 times
Download:	0 times