Can the FIDO Alliance Help Obsolete Username Password Authentication?
John Oltsik, NetworkWorld
What does this specification do? Simply stated, it provides standard protocols so that devices (like smart phones, tablets, PCs, IoT sensors, etc.) can easily participate in PKI infrastructure using just about any type of authentication technology as one of the factors. Don’t have a thumbprint reader on your phone? No problem. FIDO can find some other unique identifier (a TPM chip for example) and use this to create a key pair and act as the root of trust. Additionally, FIDO can create unique key pairs for different applications and services (i.e. Windows logon, Facebook, Paypal, etc.) and FIDO provides an abstraction layer so the actual private keys never leave the device and remain secure.
MORE FIDO in the News
CNBC: Here’s why Google, Apple and Microsoft think it’s time to kill the password
FIDO Alliance Executive Director and CMO Andrew Shikiar spoke with...January 19, 2020
CNBC: Everything you know about passwords could be wrong
FIDO Alliance Executive Director and CMO Andrew Shikiar spoke with...December 25, 2019
Biometric Update: FIDO Alliance gains momentum, certifies 688 authentication products in 2019
FIDO Alliance certified over 688 products in 2019 ranging from...December 19, 2019