SlideShare a Scribd company logo
1
T
FINGERPRINT
SEC
U
FA
BIOME
TOKEN
RBA
ACTIVE
FINGERPRINT
SECURE
ELEMENT
NFC
BIOMETRIC
PIN
RBA
SILEFINGERPRINT
ELEME
NFFACE
BIOMETRIC
TOKENACTIVE
SILE
ELEMENT
USB
FACE
PIN
TOK
RBA
PASSIVE
SILEN
FINGERPRINT
VOICEUSB
BIOMETRIC
TPM
VOICE
NFC
FACE
TPM
FINGERPRINT
NFC
USB
RBA
ACTIV
TP
FINGERPRINT
SECURE
NFC
FACE
RBA
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
ELEMENT
ACTIVE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
NFC
PIN
TOKEN
PASSIVE
FINGERPRINT
VOICE
SECURE
E
TOKEN
R
VOICE
SECURE
NFC
TOKEN
TPM
PIN
RBA
FINGERPRINT
SECURE
NFC
USB
VOICE
NFC
PASSIVE
USB
TOKEN
PASSIVE
TPM
SECURE
ELE
FACE
BIOMETRIC
ACTIVE
SECURE
USB
ACTIVE
TPM
VOICE
NFC
USB
FACE
PIN
RBA
ACTIVE
TPM
SECURE
ELEMENT
PIN
RBA
SILENT
USB
PIN
SILENT
ELEMENT
NFC
FINGERPRINT
USB
TPM
VOICE
RBA
PASSIVE
ACTIVE
TPM
SECURE
USB
FACE
ACTIVE
VOICE
PIN
PASSIVE
TPM
FINGERPRINT
RBA
ACTIVE
TPM
ELEMENT
ACTIVE
SILENT
TPM
USB
RBA
SECURE
BIOMETRIC
PIN
SILENT
TPM
VOICE
USB
PIN
USB
FACE
BIOMETRIC
NFC
TOKEN
RBA
PIN
RBA
SILENT
FACE
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
RBA
ACTIVE
TPM
TOKEN
ACTIVE SILENT
VOICE
USB
FACE
PIN
RBA
ACTIVE
SILENT
RBA
VOICE
NFC
USB
ACTIVE
TPM
BIOMETRIC
TOKENTPM
FACE
TOKEN
PASSIVE
PIN
TPM
TPM
FACE
TPM
FACE
PASSIVE
SILENT
BIOMETRIC
SECURE
PIN
PASSIVE
SILENT
VOICE
USB
PIN
TOKEN
PASSIVE
NFC
BIOMETRIC
RBA
SILENT
TPM
SECURE
VOICE
USB
USB
FACE
SILENT
SECURE
PIN
SILENT
ELEMENT
USB
FACE
VOICE
USB
SECURE
FACE
PIN
FINGERPRINT
SILENT
PIN
BIOMETRIC
TPM
USB
FACE
ELEMENT
TPM
VOICE
SILENT
USB
RBA
SILENT
TPM
VOICE
FACE
PASSIVE
PIN
TOKEN
ACTIVE
USB
PASSIVE
USB
FACE
TPM
PASSIVE
SECURE
USB
TPM
FACE
PIN
RBA
NFC
USB
RBA
ACTIVE
NFC
USB
PIN NFC
SILENT
VOICE
FACE
PIN
RBA
PASSIVE
NFC
USB
PIN
TPM
PASSIVE
PIN
USB
TPM
NFC
USB
FACE SILENT
FINGERPRINT
USB
USB
USB
TPM
FACE
TPM
USB
PIN
FACE
USB
FACE
USB
NFC
FACE
TPM
PIN
FACE
FACE
USB
TPM
NFC
RBA
USB
PIN
PIN
TPM
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
FACE
PIN
NFC
VOICE
USB
USB
USB
TPM
USB
USB
TPM
FACE
NFC
RBA
USB
FACE
PIN
VOICE
USB
USB
USB
RBA
TPM
NFC
USB
TPM
USB
USB
USB
TPM
FACE
USB
FACE
USB
TPM
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
A NEW AUTHENTICATION 
ARCHITECTURE
Avinash	
  Umap	
  (aumap@noknok.com)	
  
Javed	
  Shah	
  	
  (javed.shah@forgerock.com)	
  
WHEREWEFIT
2
Physical-to-digital Identity 
User Management 
Authentication
Federation
	
  
	
  Single
Sign-On
Strong
 Risk Based
Passwords
NNL ADDRESSES FIRST MILE AUTHENTICATION
3
Recreated PMS
1st Mile
Nok Nok Labs 
 ForgeRock
Authenticate
Identity 
SSO /
Federate
2nd Mile
AUTHENTICATION SILOS
4
COMPLEXITY,REDUNDANCY,COSTS
App A 
App B
?	
  
OpenAM
?
Applications
Authentication Methods
THE NOK NOK LABS UNIFIED APPROACH 
5
ANYDEVICE. ANYAPPLICATION. ANYAUTHENTICATOR.
App A
OpenAM
App B
NOK NOK LABS
Unified Authentication
Protocol
?
Applications
Authentication Methods
HOW THE FIDO ARCHITECTURE WORKS
6
Standardized Protocol
Local user verification
unlocks key
Key used to
authenticate to server
SOLUTIONARCHITECTURE
7
NOK NOK LABS
 3RD PARTY


PROTOCOLS
Relying Party
MFAS


Web Application/
Mobile App Server/
Federation Server
Risk &
Identity
Systems
Browser
Device
Mobile
App
MFAC
Policy
Rules
MFAS
Web Browser 
FORGEROCK INTEGRATION
8
AUTHENTICATIONMODULEINTEGRATION
USER’SDESKTOPDEVICE
Browser Extension
HTML
Javascript
MFAC
Customer
Web Application
Relying Party
 NOK NOK
 3rd party
OpenAM
(SAML, OpenID, etc.)

Authentication Module

AUTHENTICATIONINFRASTRUCTURE
Authen=ca=on	
  
Registra=on	
  
Authen=ca=on	
  
ForgeRock
J2EE
Agent
Oracle/
Postgres
1
2
3
SSO/Federate	
  
REGISTRATION 
9
Initiate Provisioning
Registration Response 
+ Public Key 
Validate Response
& Attestation
Registration Request
+ Policy 

MFAS
MFAC
 Self
Service

Reg 
App

J2EE
Agent
Protected
Pages
Browser
/App
2
4
5
Device
 Relying Party
1
3
Enroll User & 
Generate Keys
AUTHENTICATION 
10
Initiate Authentication
Authentication Response
Validate
Response
Authentication Request
+ Challenge + Policy 

MFAS
MFAC
 OpenAM

Login
Page



Auth
Module
Browser
/App
2
4
5
Device
 Relying Party
1
3
 Authenticate User
& Unlock Key
TRANSACTION CONFIRMATION 
11
Initiate Transaction
Authentication Response
+ Text Hash
Validate
Response & 
Text Hash
Auth Req+ Challenge +
Policy + Transaction Text

MFAS
MFAC
Web 
App
Browser
/App
2
4
5
Device
 Relying Party
1
3
Display Text,
Authenticate User
& Unlock Key
INTEGRATION PATTERNS
12
STRONGAUTHPROVIDER
Custom	
  Authen=ca=on	
  Module	
  
Strong	
  
AuthN	
  
Client	
  
External
AuthN
Servlet
REST	
  /	
  SOAP	
  
POST	
  /	
  GET	
  
Strong	
  
AuthN	
  
Server	
  
Custom	
  Authen=ca=on	
  Module	
  
RedirectCallback	
  
Customized	
  Login	
  Page	
  
External	
  
AuthN	
  
Provider	
  
Browser	
  Redirect	
  
Iden=ty	
  Provider	
  
SAML	
  2.0	
  /	
  OAuth	
  2.0	
  
Strong	
  
AuthN	
  
Client	
  
PasswordCallback	
  
OPENAM
Any Device.
Any Application.
Any Authenticator. 
13
T
FINGERPRINT
SEC
U
FA
BIOME
TOKEN
RBA
ACTIVE
FINGERPRINT
SECURE
ELEMENT
NFC
BIOMETRIC
PIN
RBA
SILEFINGERPRINT
ELEME
NFFACE
BIOMETRIC
TOKENACTIVE
SILE
ELEMENT
USB
FACE
PIN
TOK
RBA
PASSIVE
SILEN
FINGERPRINT
VOICEUSB
BIOMETRIC
TPM
VOICE
NFC
FACE
TPM
FINGERPRINT
NFC
USB
RBA
ACTIV
TP
FINGERPRINT
SECURE
NFC
FACE
RBA
PASSIVE
SILENT
TPM
FINGERPRINT
VOICE
ELEMENT
ACTIVE
BIOMETRIC
PIN
PASSIVE
SILENT
TPM
FINGERPRINT
SECURE
ELEMENT
NFC
PIN
TOKEN
PASSIVE
FINGERPRINT
VOICE
SECURE
E
TOKEN
R
VOICE
SECURE
NFC
TOKEN
TPM
PIN
RBA
FINGERPRINT
SECURE
NFC
USB
VOICE
NFC
PASSIVE
USB
TOKEN
PASSIVE
TPM
SECURE
ELE
FACE
BIOMETRIC
ACTIVE
SECURE
USB
ACTIVE
TPM
VOICE
NFC
USB
FACE
PIN
RBA
ACTIVE
TPM
SECURE
ELEMENT
PIN
RBA
SILENT
USB
PIN
SILENT
ELEMENT
NFC
FINGERPRINT
USB
TPM
VOICE
RBA
PASSIVE
ACTIVE
TPM
SECURE
USB
FACE
ACTIVE
VOICE
PIN
PASSIVE
TPM
FINGERPRINT
RBA
ACTIVE
TPM
ELEMENT
ACTIVE
SILENT
TPM
USB
RBA
SECURE
BIOMETRIC
PIN
SILENT
TPM
VOICE
USB
PIN
USB
FACE
BIOMETRIC
NFC
TOKEN
RBA
PIN
RBA
SILENT
FACE
RBA
PASSIVE
ACTIVE
SILENT
TPM
FINGERPRINT
RBA
ACTIVE
TPM
TOKEN
ACTIVE SILENT
VOICE
USB
FACE
PIN
RBA
ACTIVE
SILENT
RBA
VOICE
NFC
USB
ACTIVE
TPM
BIOMETRIC
TOKENTPM
FACE
TOKEN
PASSIVE
PIN
TPM
TPM
FACE
TPM
FACE
PASSIVE
SILENT
BIOMETRIC
SECURE
PIN
PASSIVE
SILENT
VOICE
USB
PIN
TOKEN
PASSIVE
NFC
BIOMETRIC
RBA
SILENT
TPM
SECURE
VOICE
USB
USB
FACE
SILENT
SECURE
PIN
SILENT
ELEMENT
USB
FACE
VOICE
USB
SECURE
FACE
PIN
FINGERPRINT
SILENT
PIN
BIOMETRIC
TPM
USB
FACE
ELEMENT
TPM
VOICE
SILENT
USB
RBA
SILENT
TPM
VOICE
FACE
PASSIVE
PIN
TOKEN
ACTIVE
USB
PASSIVE
USB
FACE
TPM
PASSIVE
SECURE
USB
TPM
FACE
PIN
RBA
NFC
USB
RBA
ACTIVE
NFC
USB
PIN NFC
SILENT
VOICE
FACE
PIN
RBA
PASSIVE
NFC
USB
PIN
TPM
PASSIVE
PIN
USB
TPM
NFC
USB
FACE SILENT
FINGERPRINT
USB
USB
USB
TPM
FACE
TPM
USB
PIN
FACE
USB
FACE
USB
NFC
FACE
TPM
PIN
FACE
FACE
USB
TPM
NFC
RBA
USB
PIN
PIN
TPM
USB
RBA
RBA
PIN
USB
USB
USB
USB
NFC
FACE
PIN
NFC
VOICE
USB
USB
USB
TPM
USB
USB
TPM
FACE
NFC
RBA
USB
FACE
PIN
VOICE
USB
USB
USB
RBA
TPM
NFC
USB
TPM
USB
USB
USB
TPM
FACE
USB
FACE
USB
TPM
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
NOK NOK LABS AUTHENTICATION MODULE 
14
AUTHENTICATION CHAIN
15
OPENAM POLICIES
16

More Related Content

PDF
Leveraging Fingerprint Verification on Mobile Devices
PDF
CIS14: Building Blocks for Mobile Authentication and Security
PDF
New Trends in Mobile Authentication
PPTX
Perangkat output komputer
PDF
CIS 2015 Mobile Security, Identity & Authentication: Reasons for Optimism - R...
PDF
easyLive Smart Alarm System Brochure
PPTX
Android voip mobile dialer
PDF
Android voip mobile dialer
Leveraging Fingerprint Verification on Mobile Devices
CIS14: Building Blocks for Mobile Authentication and Security
New Trends in Mobile Authentication
Perangkat output komputer
CIS 2015 Mobile Security, Identity & Authentication: Reasons for Optimism - R...
easyLive Smart Alarm System Brochure
Android voip mobile dialer
Android voip mobile dialer

Viewers also liked (20)

PDF
ARM: Trusted Zone on Android
PDF
CIS14: FIDO 101 (What, Why and Wherefore of FIDO)
PDF
Why FIDO Matters: Digital Government Services
PDF
2014 IoT Forum_ Fido Alliance
PDF
Authentication.Next
PDF
FIDO UAF 1.0 Specs: Overview and Insights
PDF
Building HTML5 Chromecast Apps
PDF
FIDO, PKI & beyond: Where Authentication Meets Identification
PDF
raonsecure_en_min
PPTX
Comment sécuriser une démarche BYOD
PPTX
Webinar: ForgeRock Identity Platform Preview (Dec 2015)
PDF
La gouvernance IAM au service des stratégies métiers
PDF
Identity access management
PPTX
Webinar: Extend The Power of The ForgeRock Identity Platform Through Scripting
PPTX
OIS Architecture Review
PDF
Les processus IAM
PPTX
SNAPDRAGON SoC Family and ARM Architecture
PDF
ForgeRock Platform Release - Summer 2016
PDF
Five Things You Gotta Know About Modern Identity
ARM: Trusted Zone on Android
CIS14: FIDO 101 (What, Why and Wherefore of FIDO)
Why FIDO Matters: Digital Government Services
2014 IoT Forum_ Fido Alliance
Authentication.Next
FIDO UAF 1.0 Specs: Overview and Insights
Building HTML5 Chromecast Apps
FIDO, PKI & beyond: Where Authentication Meets Identification
raonsecure_en_min
Comment sécuriser une démarche BYOD
Webinar: ForgeRock Identity Platform Preview (Dec 2015)
La gouvernance IAM au service des stratégies métiers
Identity access management
Webinar: Extend The Power of The ForgeRock Identity Platform Through Scripting
OIS Architecture Review
Les processus IAM
SNAPDRAGON SoC Family and ARM Architecture
ForgeRock Platform Release - Summer 2016
Five Things You Gotta Know About Modern Identity
Ad

More from ForgeRock (20)

PDF
Digital Identities in the Internet of Things - Securely Manage Devices at Scale
PPTX
Get the Exact Identity Solution You Need - In the Cloud - AWS and Beyond
PDF
Identity Live Sydney: Identity Management - A Strategic Opportunity
PDF
Identity Live Singapore: Transform Your Cybersecurity Capability
PDF
Identity Live Singapore 2018 Keynote Presentation
PDF
Identity Live Sydney 2018 Keynote Presentation
PDF
Identity Live Singapore: Just Ask 'Em
PDF
Identity Live Singapore: Building Trust & Privacy in a Connected Society
PDF
Identity Live Sydney: Intelligent Authentication
PDF
Identity Live Sydney: Building Trust and Privacy in a Connected Society
PDF
Get the Exact Identity Solution you Need in the Cloud - Deep Dive
PPTX
Get the Exact Identity Solution You Need - In the Cloud - Overview
PDF
ForgeRock and Trusona - Simplifying the Multi-factor User Experience
PDF
Opening Keynote (Identity Live Berlin 2018)
PDF
Steinberg - Customer identity as the cornerstone of our approach to digitaliz...
PDF
BMW Group - Identity Enables the Next 100 Years.. (Identity Live Berlin 2018)
PDF
Trust is Everything - The Future of Identity and the ForgeRock Platform (Iden...
PDF
Silo Busters- The Value of User and Data Centricity beyond IoT Devices (Ident...
PDF
Shift from GDPR readiness to sustained compliance to improve your business an...
PDF
Intelligent Authentication (Identity Live Berlin 2018)
Digital Identities in the Internet of Things - Securely Manage Devices at Scale
Get the Exact Identity Solution You Need - In the Cloud - AWS and Beyond
Identity Live Sydney: Identity Management - A Strategic Opportunity
Identity Live Singapore: Transform Your Cybersecurity Capability
Identity Live Singapore 2018 Keynote Presentation
Identity Live Sydney 2018 Keynote Presentation
Identity Live Singapore: Just Ask 'Em
Identity Live Singapore: Building Trust & Privacy in a Connected Society
Identity Live Sydney: Intelligent Authentication
Identity Live Sydney: Building Trust and Privacy in a Connected Society
Get the Exact Identity Solution you Need in the Cloud - Deep Dive
Get the Exact Identity Solution You Need - In the Cloud - Overview
ForgeRock and Trusona - Simplifying the Multi-factor User Experience
Opening Keynote (Identity Live Berlin 2018)
Steinberg - Customer identity as the cornerstone of our approach to digitaliz...
BMW Group - Identity Enables the Next 100 Years.. (Identity Live Berlin 2018)
Trust is Everything - The Future of Identity and the ForgeRock Platform (Iden...
Silo Busters- The Value of User and Data Centricity beyond IoT Devices (Ident...
Shift from GDPR readiness to sustained compliance to improve your business an...
Intelligent Authentication (Identity Live Berlin 2018)
Ad

Recently uploaded (20)

PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 41
PDF
How to Migrate SBCGlobal Email to Yahoo Easily
PDF
Design an Analysis of Algorithms II-SECS-1021-03
PDF
PTS Company Brochure 2025 (1).pdf.......
PDF
Wondershare Filmora 15 Crack With Activation Key [2025
PDF
Flood Susceptibility Mapping Using Image-Based 2D-CNN Deep Learnin. Overview ...
PDF
Why TechBuilder is the Future of Pickup and Delivery App Development (1).pdf
PDF
EN-Survey-Report-SAP-LeanIX-EA-Insights-2025.pdf
PDF
Digital Strategies for Manufacturing Companies
PPTX
Reimagine Home Health with the Power of Agentic AI​
PPTX
ai tools demonstartion for schools and inter college
PDF
Adobe Premiere Pro 2025 (v24.5.0.057) Crack free
PPTX
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
PDF
top salesforce developer skills in 2025.pdf
PPTX
Agentic AI : A Practical Guide. Undersating, Implementing and Scaling Autono...
PDF
Odoo Companies in India – Driving Business Transformation.pdf
PDF
SAP S4 Hana Brochure 3 (PTS SYSTEMS AND SOLUTIONS)
PDF
Upgrade and Innovation Strategies for SAP ERP Customers
PPTX
Transform Your Business with a Software ERP System
PPTX
history of c programming in notes for students .pptx
Internet Downloader Manager (IDM) Crack 6.42 Build 41
How to Migrate SBCGlobal Email to Yahoo Easily
Design an Analysis of Algorithms II-SECS-1021-03
PTS Company Brochure 2025 (1).pdf.......
Wondershare Filmora 15 Crack With Activation Key [2025
Flood Susceptibility Mapping Using Image-Based 2D-CNN Deep Learnin. Overview ...
Why TechBuilder is the Future of Pickup and Delivery App Development (1).pdf
EN-Survey-Report-SAP-LeanIX-EA-Insights-2025.pdf
Digital Strategies for Manufacturing Companies
Reimagine Home Health with the Power of Agentic AI​
ai tools demonstartion for schools and inter college
Adobe Premiere Pro 2025 (v24.5.0.057) Crack free
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
top salesforce developer skills in 2025.pdf
Agentic AI : A Practical Guide. Undersating, Implementing and Scaling Autono...
Odoo Companies in India – Driving Business Transformation.pdf
SAP S4 Hana Brochure 3 (PTS SYSTEMS AND SOLUTIONS)
Upgrade and Innovation Strategies for SAP ERP Customers
Transform Your Business with a Software ERP System
history of c programming in notes for students .pptx

Technical Overview of FIDO Solution