Protecting IDAAS with FIDO Authentication
3 likes6,569 views
The document discusses the implementation of FIDO U2F (Universal 2nd Factor) to enhance security in identity as a service (IDaaS) and single sign-on (SSO) applications provided by Trustelem and Neowave. It highlights the growing risks of identity theft and cyber attacks, and presents FIDO U2F as a robust solution against phishing and other security threats, offering advantages like high security and ease of use. The conclusion emphasizes FIDO U2F as a highly recommended authentication method for web SSO users and administrators.
Protecting IDAAS with FIDO Authentication
- 1. All Rights Reserved | FIDO Alliance | Copyright 20171 NEOWAVE + TRUSTELEM PROTECTING IDAAS* (WEB/CLOUD SSO*) WITH FIDO U2F * IDAAS: IDENTITY AS A SERVICE SSO: SINGLE SIGN ON
- 2. All Rights Reserved | FIDO Alliance | Copyright 20172 Deployment Case Study: Trustelem & Neowave Protecting IDAAS with FIDO U2F Gregory Haรฏk, CEO, Trustelem Frederic Martin, Security Architect, NEOWAVE
- 3. All Rights Reserved | FIDO Alliance | Copyright 20173 FIDO U2F TO PROTECT IDENTITY AS A SERVICE
- 4. All Rights Reserved | FIDO Alliance | Copyright 20174 NEOWAVE: SMART CARD BASED SECURITY PRODUCTS NEOWAVE mission is to address these issues through strong authentication, encryption and digital signatures based on secure smart card based products. Identity theft (phishing), fraud, data theft and cyber attacks are on the rise
- 5. All Rights Reserved | FIDO Alliance | Copyright 20175 EASY PHISHING ATTACKS AGAINST SMS CODES User Real website username password SMS username password SMS Send SMS3 1 4 5 2 Fake website or MITM attack
- 6. All Rights Reserved | FIDO Alliance | Copyright 20176 EASY PHISHING ATTACKS AGAINST OTP / TOTP username password OTP username password OTP OTP generator2 1 3 5 4 User Real websiteFake website or MITM attack
- 7. All Rights Reserved | FIDO Alliance | Copyright 20177 EASY PHISHING ATTACKS AGAINST SCANNED QR CODE VALIDATION User Real websiteFake website or MITM attack Give access Read QR Code 2 3 1 Validate (wrong) access4 5
- 8. All Rights Reserved | FIDO Alliance | Copyright 20178 FIDO U2F: SIMPLE / SECURE SOLUTION AGAINST PHISHING ATTACKS 2 โ Data to be signed (challenge, hashed url, etc.) 4 โ Signed Data 3 โ Digital Signature (built-in smart card) 6 โ Signature Verification 1 โ Data to be signed (challenge, hashed url, etc.) 5 โ Signed Data SSL Token Binding MITM protection
- 9. All Rights Reserved | FIDO Alliance | Copyright 20179 FIDO U2F USB SECURITY KEY PLUG KEYDO SECURITY KEY IN ENTER USERNAME & PASSWORD THATโS IT
- 10. All Rights Reserved | FIDO Alliance | Copyright 201710 FIDO U2F NFC CARD APPROACH BADGEO NFC CARD THATโS IT ENTER USERNAME & PASSWORD
- 11. All Rights Reserved | FIDO Alliance | Copyright 201711 TRUSTELEM: IDENTITY AS A SERVICE Company Corporate applications Trustelem enables your IT users to go from one application to another, without the need to re-authenticate. Trustelem manages digital identities of your IT users (IDaaS - Identity-as-a-Service Cloud Single Sign-On, SSO).
- 12. All Rights Reserved | FIDO Alliance | Copyright 201712 FIDO U2F ADVANTAGES FOR WEB SSO LOGON โข No driver installation requirement โข Web browser built-in support โข Multi-platform / multi-channel protocol โข High security level (built-in smart card) โข Ultimate solution against identity theft
- 13. All Rights Reserved | FIDO Alliance | Copyright 201713 SIMPLE /SECURE WEB SSO LOGON Password then FIDO U2F
- 14. All Rights Reserved | FIDO Alliance | Copyright 201714 ALL-IN-ONE USER DASHBOARDS ACCESS PROTECTION Now you donโt have to wait for Microsoft to integrate FIDO U2F authentication :)
- 15. All Rights Reserved | FIDO Alliance | Copyright 201715 APPLICATIONS ACCESS e.g. facebook workplace
- 16. All Rights Reserved | FIDO Alliance | Copyright 201716 ADMIN CONSOLE Setup directories, users, apps, permissionsโฆ Logs, deployment audit
- 17. All Rights Reserved | FIDO Alliance | Copyright 201717 MORE FIDO U2F ADVANTAGES โข FIDO U2F devices are anonymous (no user information, just anonymous keys, association is done on the server side) โข FIDO U2F devices can be filtered, web services can be locked only for our own customized devices (attestation certificate)
- 18. All Rights Reserved | FIDO Alliance | Copyright 201718 CONCLUSION โข FIDO U2F strongly recommended for Web SSO users and/or administrators โข Secure but easy to use and deploy