Welkom Network Solutions Nederland heet u van harte welkom op Zorg & ICT 2015 en gaat verder als Een nieuwe naam bij een ervaren team Safety Gebruikersidentificatie | Toegangsmanagement Control Applicaties | Werkplekken | Informatiesystemen Consultancy Bedrijfsprocessen | Trends | Optimalisatie Sterke authenticatie Referentie: ZorgSaam Zeeuws Vlaanderen FIDO alliance Yubico en Yubikeys Tord Fransson VP Sales EMEA Yubico Changing the Nature of Authentication The New Standards for One Touch, Secure Login to Health Care Services and Beyond Tord Fransson VP Sales EMEA 2 Yubico Today Founded in 2007 in Sweden HQ relocated to Silicon Valley 2011 Privately held 25 employees 3 offices worldwide: Palo Alto, London, Stockholm 2M users, 50K customers, 140 countries 3 The YubiKey Invention • The keyboard authenticator – no client software! • Instant, one touch user authentication • No batteries, practically indestructible, manufactured in USA & Sweden • FIPS cert. nr 2267 140-2, Oct 2014 YubiKey login Enter PIN/password **** Touch YubiKey 4 Web passwords are broken Reused Phished Keylogged 5 Yubico vision - One key all Internet 6 YubiKey NEO 7 FIDO U2F emerging global standard • No drivers, client software or middleware – Native drivers, browser support • Highly scalable, protecting your privacy – New encryption keys for every service, only stored on specific service – No secrets shared between service providers • Great user experience – To register and authenticate; a simple touch of a button! – One U2F device to any number of services 8 U2F Entities User Side U2F Authenticator Browser FIDO Client Relying Party Web Application User Action U2F JS API Secure U2F Element Transport USB (HID) U2F Library U2F Code USB (HID) API Public Key + KeyHandles Registration FIDO Client/ Browser U2F Token Relying Party app id, challenge check app id a a; challenge, origin, channel id, etc. generate: key kpub key kpriv handle h c kpub, h, attestation cert, signature(a,c,kpub,h) s c, kpub, h, attestation cert, s cookie store: key kpub handle h for user Authentication FIDO Client/ Browser U2F Token Relying Party handle, app id, challenge check app id h a retrieve: key kpub from handle h h, a; challenge, origin, channel id, etc. retrieve: key kpriv from handle h; counter++ c counter, signature(a,c,counter) s counter, c, s set cookie check: signature using key kpub Getting from username+password Relying Party username+password+U2F Original DB U2F DB Original Database U2F Database user_id user_id Users Password Users Password Resources Strengthen 2 step verification with Security Key Google security blog Yubico Security Key yubico.com/security-key Yubico Libraries, Plugins, Sample Code, Documentation developers.yubico.com FIDO U2F Protocol Specification fidoalliance.org/specifications Yubico Demo Server - Test U2F demo.yubico.com/u2f Yubico Demo Server - Test Yubico OTP demo.yubico.com 13 Contact information Contact information Tord Fransson Mail: [email protected] Cell: +46 70 673 33 13 yubico.com 14 yubico.com Two factors. One touch. Zero drivers Dankt u voor uw aandacht Wij spreken u graag op onze stand E62 in hal 11.
© Copyright 2024