Introduction to FIDO's Identity Verification & Binding Initiative
Download as PPTX, PDF2 likes2,410 views
The document is a presentation from the FIDO Alliance about establishing an Identity Verification and Binding Working Group. The working group will define criteria for remote identity proofing using government IDs and biometrics. It will create certification programs to evaluate identity verification solutions. The initial focus is on specifying requirements for remote document verification and facial matching during identity proofing. The goal is to provide guidance to help online services strengthen identity assurance when using FIDO authentication without passwords.
Introduction to FIDO's Identity Verification & Binding Initiative
- 1. All Rights Reserved | FIDO Alliance | Copyright 20191 INTRODUCTION TO FIDOâS IDENTITY VERIFICATION & BINDING INITIATIVE THE WEBINAR WILL BEGIN SOON
- 2. All Rights Reserved | FIDO Alliance | Copyright 20192 INTRODUCTION TO FIDOâS IDENTITY VERIFICATION & BINDING INITIATIVE SEPTEMBER 18, 2019
- 3. 3 SPEAKERS All Rights Reserved | FIDO Alliance | Copyright 2019 Andrew Shikiar Executive Director & CMO FIDO Alliance Parker Crockford, Director of Policy & Strategic Accounts, Onfido Rob Carter, Director, Product Development and Innovation, Mastercard
- 4. 4 WELCOME All Rights Reserved | FIDO Alliance | Copyright 2019 âą All attendees are in listen-only mode âą Questions can be asked at any time using the GoToWebinar client âą Question will be addressed at the end of the webinar âą The webinar is being recorded âą The webinar recording and slides will be emailed to you and posted on fidoalliance.org âą Please stay on to take the survey at the conclusion of the webinar
- 5. 5 INTRODUCTION TO FIDO All Rights Reserved | FIDO Alliance | Copyright 2019 Andrew Shikiar Executive Director & CMO FIDO Alliance
- 6. All Rights Reserved | FIDO Alliance | Copyright 20196 Whatâs FIDO? The FIDO Alliance is an open industry association with a focused mission: Develop authentication standards, certification and market adoption programs to help reduce the worldâs over-reliance on passwords.
- 7. All Rights Reserved | FIDO Alliance | Copyright 20197 LEADING THE EFFORT CONSUMER ELECTRONICS PLATFORMS SECURITY & BIOMETRICS HIGH-ASSURANCE SERVICES
- 8. All Rights Reserved | FIDO Alliance | Copyright 20198 SIMPLER AND STRONGER ATHENTICATION SECURITY USABILITY Poor Easy WeakStrong = Single Gesture Phishing-resistant MFA Open standards for simpler, stronger authentication using public key cryptography
- 9. ADJACENT WORK AREAS SUPPORT FIDOâS FOCUS ON AUTHENTICATION Device & User Verification and Onboarding Authentication Federation Single Sign-On Strengthen identity verification assurance to support better account recovery Automate secure device onboarding to remove password use from IoT. All Rights Reserved | FIDO Alliance | Copyright 20199
- 10. 10 NEW WORK AREA: IDENTITY VERIFICATION & BINDING All Rights Reserved | FIDO Alliance | Copyright 2019 Parker Crockford Director of Policy & Strategic Accounts, Onfido Rob Carter Director, Product Development and Innovation, Mastercard
- 11. All Rights Reserved | FIDO Alliance | Copyright 201911 WHOâS INVOLVED?
- 12. FIDO Authentication has been proven to protect against account takeover through phishing and other credential-based attacks. But⊠âWhat happens if I lose my FIDO authenticator?â All Rights Reserved | FIDO Alliance | Copyright 2019 Why FIDO and ID Verification? 12 For accounts protected with FIDO Authentication, the account recovery process when a FIDO device is lost or stolen becomes critical to maintaining the integrity of the userâs account. All Rights Reserved | FIDO Alliance | Copyright 201912
- 13. Register multiple FIDO authenticators (Ideal solution, when feasible) All Rights Reserved | FIDO Alliance | Copyright 2019 Why FIDO and ID Verification? Our Account Recovery recommendations* 13 *Recommended Account Recovery Practices for FIDO Relying Parties, February 2019 If not an option, re-run onboarding identity proofing process âą Donât fall back on passwords!! âą Weaker mechanisms such as KBA lower the bar for account recovery + reduce the value of the FIDO implementation All Rights Reserved | FIDO Alliance | Copyright 201913
- 14. 14 KBA NO LONGER ADEQUATE IT APPEARS NEXT TO IMPOSSIBLE TO FIND SECRET QUESTIONS THAT ARE BOTH SECURE AND MEMORABLE. GOOGLE SURVEY, âSECRETS, LIES AND ACCOUNT RECOVERYâ of users had answers extracted via email phishing. Data breaches are giving all the answers away The number of consumer records exposed that contained personally identifiable information (PII) more than doubled, from 197.6 million in 2017 to 446.5 million in 2018 â Identity Theft Resource Center 92% of questions had answers routinely listed publicly in online social networking profiles. 16% of users were unable to recall their answers when needed.40% UP 126% EXPOSED Consumer PII Records are All Rights Reserved | FIDO Alliance | Copyright 2019
- 15. HIGHER ASSURANCE: REMOTE, POSSESSION-BASED Ex: Government-issued identity document authentication Biometric âselfieâ matching Has the potential to greatly improve the quality of identity assurance for new account onboarding and account recovery, thereby maintaining integrity of accounts protected with FIDO + All Rights Reserved | FIDO Alliance | Copyright 201915
- 16. 16 OUR GAP ANALYSIS Government Programs Products Aadhaar, E-Identity, Trusted Digital Identity, Pan Canadian Trust Framework, GPG-45 Identity Wallets Document Verification Providers Standards Groups Kantara & Identity Assurance Working Group <Kantara>, ID2020, ISO 29115, FATF, OpenID Foundation - KYC Group
- 17. GAPS IDENTIFIED âą FIDO promotes remote identity proofing through possession. âą Possessed item could be govât ID, device, etc. âą However, no criteria exist for determining whatâs âgood enoughâ for verifying possessed element used during remote identity proofing âą Relying parties are left to their own devices to establish acceptance criteria and performing âbake-offsâ across different vendors âą This testing is time-consuming and expensive âą Testing typically isnât representative of real-world fraud vectors All Rights Reserved | FIDO Alliance | Copyright 201917
- 18. IDWG All Rights Reserved | FIDO Alliance | Copyright 201918 ADDRESSING THE GAPS: IDENTITY VERIFICATION AND BINDING WORKING GROUP âą Define criteria for solution performance âą Create and deploy a program to support the adoption of that criteria âą Similar to biometric certification programs with test requirements, lab procedures, etc. âą Will collaborate with the FIDO Certification Working Group (CWG) and Certification Secretariat âą Produce thought leadership white papers to promote the utilization and market awareness of the new program Provide authoritative guidance and solution certification programs for possession-based identity verification procedures. This includes (but is not limited to) government-issued identity document authentication and biometric âselfieâ matching. MISSION: ACTIVITIES: IDWG will:
- 19. 19 REMOTE DOCUMENT VERIFICATION ELEMENTS AS PART OF IDENTITY PROOFING All Rights Reserved | FIDO Alliance | Copyright 2019All Rights Reserved | FIDO Alliance | Copyright 2019
- 20. Longer term All Rights Reserved | FIDO Alliance | Copyright 201920 PRIORITIES / MILESTONES Define acceptance criteria for identity document verification. Create test program to support adoption of these criteria. Define acceptance criteria for facial similarity: Matching the biometric from the Govt ID to a selfie and/or live video. Binding verification results to FIDO authenticators. Initial focus
- 21. All Rights Reserved | FIDO Alliance | Copyright 201921 BECOME A MEMBER⊠GET INVOLVED WITH THE IDWG!
- 22. 22 ADDITIONAL RESOURCES âą Membership information: fidoalliance.org/membership/ âą Email: info@fidoalliance.org âą Blog: fidoalliance.org/category/blog/ âą Twitter: @FIDOAlliance âą LinkedIn: linkedin.com/company/the-fido-alliance/ âą Upcoming events: https://fidoalliance.org/upcoming-events/ All Rights Reserved | FIDO Alliance | Copyright 2019All Rights Reserved | FIDO Alliance | Copyright 2019
- 23. 23 Q&A All Rights Reserved | FIDO Alliance | Copyright 2019 Andrew Shikiar Executive Director & CMO FIDO Alliance Parker Crockford, Director of Policy & Strategic Accounts, Onfido Rob Carter, Director, Product Development and Innovation, Mastercard
- 24. 24 THANK YOU âą If we didnât have time to answer your question, please reach out to us at help@fidoalliance.org âą The webinar recording and slides will be emailed to you and posted on fidoalliance.org âą Please stay on to take the survey at the conclusion of the webinar All Rights Reserved | FIDO Alliance | Copyright 2019
- 25. All Rights Reserved | FIDO Alliance | Copyright 201925 Connect with FIDO fidoalliance.org