[WSO2Con USA 2018] Design and Implementation of the Veridium Authenticator: A Biometric WSO2 Federated Authenticator
1 like497 views
The document details the design and implementation of the Veridium Authenticator, a biometric authentication solution that integrates with WSO2 to provide multi-factor authentication using biometrics. It highlights products like VeridiumID and VeridiumAD, offering features such as low false rejection rates and compatibility with various enterprise environments, while also showcasing awards and recognition for innovation in biometric technology. The solution supports multiple modes of integration, including push notifications and QR codes, enhancing security and user accessibility.
[WSO2Con USA 2018] Design and Implementation of the Veridium Authenticator: A Biometric WSO2 Federated Authenticator
- 1. Design and Implementation of the Veridium Authenticator: A Biometric WSO2 Federated Authenticator John Callahan, CTO © 2018 Veridium IP Ltd. All Rights Reserved 1
- 2. OUR APPROACH Single-Step Multi-Factor Biometric Authentication PHONE What You Have PIN CODE What You Know BIOMETRICS What You Are © 2018 Veridium IP Ltd. All Rights Reserved 2
- 3. OUTLINE © 2018 Veridium IP Ltd. All Rights Reserved 3 • Products VeridiumID VeridiumAD 4Fingers TouchlessID • Biometric Authentication Push notification QR-code mode • Configuration Not covered: • Conditional MFA via XACML (in WSO IS 5.6+) • Use with WSO2 API Manager (OAuth2 use cases)
- 4. PRODUCTS Platform Enterprise Plugin Biometrics © 2018 Veridium IP Ltd. All Rights Reserved 4
- 5. VERIDIUMID © 2018 Veridium IP Ltd. All Rights Reserved 5 Authenticate • Authorize • Access Extensible Platform
- 6. IEEE 2410-2017 Biometric Open Protocol Standard (BOPS)
- 7. 2410-2017 configuration options Storage Matching Mobile Server Mobile ✅ (FIDO UAF compliant) ✅ Server ✅ ✅ Shares (both mobile and server) ✅ ✅ Proprietary and Confidential 7
- 8. • VeridiumAD (VAD) is an enterprise plugin that extends VeridiumID (VID) to Microsoft Active Directory (AD) environments • VAD can replace passwords for companies using AD and for companies using Citrix StoreFront and AD • VAD can replace software or hardware tokens as a second-factor for enterprises using AD with NetScaler or other VPNs using RADIUS • Offline login is supported • VAD is verified as Citrix Ready VERIDIUMAD © 2018 Veridium IP Ltd. All Rights Reserved 8
- 9. • False rejection rate (FRR) is as low as 2% at a false acceptance rate (FAR) of 0.1% • 4 Fingers is one of the most secure biometrics available • More secure than Face, Touch ID, or Voice 4 Fingers is reliable in any environment 4 FINGERS TOUCHLESSID © 2018 Veridium IP Ltd. All Rights Reserved 9
- 10. Integration © 2018 Veridium IP Ltd. All Rights Reserved 10
- 11. PUSH NOTIFICATION MODE © 2018 Veridium IP Ltd. All Rights Reserved 11
- 12. PUSH NOTIFICATION MODE © 2018 Veridium IP Ltd. All Rights Reserved 12
- 13. Proprietary and Confidential 13
- 14. © 2018 Veridium IP Ltd. All Rights Reserved 14
- 15. QR-CODE MODE © 2018 Veridium IP Ltd. All Rights Reserved 15
- 16. © 2018 Veridium IP Ltd. All Rights Reserved 16
- 17. INTEGRATED DEMO © 2018 Veridium IP Ltd. All Rights Reserved 17
- 18. © 2018 Veridium IP Ltd. All Rights Reserved 18
- 19. CONFIGURATION © 2018 Veridium IP Ltd. All Rights Reserved 19
- 20. © 2018 Veridium IP Ltd. All Rights Reserved 20
- 21. © 2018 Veridium IP Ltd. All Rights Reserved 21
- 22. © 2018 Veridium IP Ltd. All Rights Reserved 22
- 23. © 2018 Veridium IP Ltd. All Rights Reserved 23
- 24. SELECTED AWARDS & RECOGNITION Winner of the DFS Tech Biometrics Challenge, Sponsored by the Bill & Melinda Gates Foundation ABA 2018 Stevie Silver Winner - Most Innovative Tech Company of the Year - Up to 100 Employees 2017 Winner of Innovative Tech of the Year (Security) Cyber Defense Magazine 2018 Infosec Awards Best Product – Multi-Factor Authentication Fast Company World Changing Ideas 2018 Finalist Selected Vendor – Biometric Authentication Methods in six 2017 Hype Cycles Entrepreneurial Company of the Year - Biometric Authentication Solutions Industry KNOW Identity Awards 2018 Finalist Greatest Social Impact Through Identity & CEO of the Year InfoSecurity Products Guide Global Excellence Awards 2018 Bronze Winner: Authentication Sovrin Stewart – Veridium iBeta Independent Accuracy Report 2017 CRN Emerging Vendor in Security Certified to match against Peru's national fingerprint database © 2018 Veridium IP Ltd. All Rights Reserved CRADA with NIST Contactless Fingerprint Capture program (SP 500-305) Member of the Decentralized Identity Foundation (DIF) . C O M IN G SO O N