Showing results for: FIDO Alliance

David Maples

The Future of Online Authentication

Last week, Yubico delivered a glimpse into the future of online authentication with a presentation at Mozilla. If you missed the live talk about FIDO Alliance Universal 2nd Factor (U2F) and in-the-browser authentication for the mass market, please watch the archived video below.

In the 60 minute presentation, Yubico discusses the motivation behind U2F, provides a demo of U2F in action, explains the user privacy and security issues that are addressed, highlights the importance of browser support for U2F and dives into some key details about the protocol.

FIDO Alliance U2F is a new, open authentication standard focused on adding public-key cryptography to existing password authentication mechanisms, offering high security with friction-less user experience. U2F represents a crucial step in driving the rapid adoption of strong authentication technology, where the user will be able to use a simple password/passcode, which even if compromised, does not compromise the user’s identity. The elegance of the protocol lies in the fact that the user in possession of the authenticator can authenticate to any number of web-based services using only one device, without the need to install any drivers or client software. The added benefit of U2F also lies in the simplicity of how this protocol can be easily integrated into an existing password authentication model.

For more background on Yubico’s work with the FIDO Alliance and the future YubiKey NEO with U2F, please visit here.

Ronnie Manning

Meet Yubico at Cloud Identity Summit

Yubico is invited to showcase the YubiKey and FIDO U2F ready devices at the upcoming Cloud Identity Summit, in Monterey, California. On Saturday, July 19, you can meet our team at the FIDO Alliance interoperability showcase and demo at the Bonsai II room from 1:30-4:30 p.m. On July 20-22, we welcome you to the Yubico booth #TT8. To schedule a meeting, please email us at press@yubico.com.

David Maples

Bank of America Joins FIDO Alliance

Today, Bank of America, has joined the FIDO Alliance and been appointed to the Board of Directors. Among the world’s leading financial institutions, Bank of America is committing to FIDO standards for strong authentication, along with other leaders in the financial sector, including Discover Financial Services, MasterCard and Goldman Sachs.

“Historically, strong two factor hardware authentication has been too costly and complicated to scale for mass markets,” said Stina Ehrensvard, CEO and founder of Yubico. “We are pleased to see an ever-increasing number of large online services and financial institutions joining the FIDO Alliance and addressing the issues. FIDO certified devices offer better security and a greatly improved user experience over traditional software-and-hardware based authentication technologies.”

FIDO Alliance members commit to share technology and collaborate to deliver open specifications for universal strong authentication that enables FIDO-compliant authentication methods to be interoperable, more secure and private, and easier-to-use. The YubiKey NEO is the industry’s first FIDO Universal 2nd Factor (U2F) Ready device and is currently being demonstrated at RSA 2014 at the NXP booth. (* Please note – as of May 21, 2015, Yubico FIDO Ready™ products became official FIDO Certified™ products.  Read more here).

“Providing our customers with a convenient, secure digital banking experience is a top priority for us,” said Dave Godsman, Bank of America Digital Banking Solutions & Operations Executive. “As the world rapidly changes, our involvement in the FIDO Alliance will help ensure we continue to provide the convenient and secure solutions our customers want.”

“Bank of America is counted among the world’s leaders in financial services. As an institution responsible to secure high-value interests and relationships across consumer, government, enterprise, and business, Bank of America is among a select few ‘Relying Parties’ ideally positioned to drive adoption of FIDO standards at Internet scale,” said Michael Barrett, president of the FIDO Alliance. “We welcome Bank of America to our Board of Directors at a pivotal point in FIDO Alliance history. With our review draft specifications just publicly released, and the marketplace poised to deploy ‘FIDO Ready’ certified solutions in 2014, both users and those who serve them are eager to embrace simpler, stronger FIDO authentication.”

To find out more and to read the release in its entirety, please visit FIDOAlliance.org

David Maples

User-Centric ID Live

If you are attending User-Centric ID Live at the Washington DC Convention Center, be sure to check out the ¨Drivers and innovators: Meet leaders from the major identity initiatives¨ session today (10/15/13) from 4:00pm – 5:15pm. Our CEO and Founder, Stina Ehrensvard, will be participating on this panel with other FIDO Alliance members from Google, Blackberry, NXP Semiconductors and Nok Nok Labs. The panel will be discussing how the FIDO Alliance works on open standards for simpler, stronger open authentication standards.

Also, do not miss the session “Track 1: Identity Ecosystems & Technologies: User-centric identity concepts, technologies and how they will impact business”  tomorrow (10/16/13)  from 9-10:15 AM. In this session Stina will be presenting more details about Universal 2nd Factor Authentication (U2F). As one of the technical specifications hosted by FIDO Alliance, U2F introduces the first driverless smart card with user presence. Successfully deployed inside Google, it also challenges the traditional business model for secure online identities, allowing users to buy and control any number of real and “anonymous” identities to easily and securely access any number of services.

User-Centric ID Live is an event focused on the business of user-centric identity. Conference sessions focus on technologies, standards, implementations, applications, and business models in the new user-centric identity ecosystem.

Stina Ehrensvard

Yubico joins FIDO Alliance

Yubico has joined FIDO Alliance as a board member, and will be a part of the Universal 2nd Factor (U2F) working group that Google is creating  focusing on open authentication standards work for strong, universal second-factor devices.

The U2F working group will continue the work that was presented earlier this year in an IEEE paper and Wired, based on the technical specifications that jave now been successfully proven with thousands of YubiKey NEOs and users. By end of the year we expect more than 200,000 U2F protocol compliant YubiKey NEOs being deployed within Google and elsewhere.

U2F will be available as a stand-alone offering, and the working group will also collaborate closely with the already existing FIDO UAF Technical working group, to ensure harmonization of specifications. UAF aims to create a web eco-system including a broader range of authentication methods, including biometrics.

 

Ronnie Manning

UK Becomes the First Government to Offer Secure Online Identities Based on FIDO U2F Standards

STOCKHOLM & AMSTERDAM, March 23, 2016 – Yubico, the leading provider of simple, open and strong authentication, and Digidentity, a leading identity service provider, today announced a partnership to enable FIDO Universal 2nd Factor (U2F) authentication and YubiKeys for UK government services. The joint solution allows all UK citizens to easily and securely access GOV.UK Verify digital public services.

Compromised online identities have reached a level that has exposed the weaknesses in usernames and passwords as well as traditional software security solutions. Government services around the world have a growing demand for strong two-factor authentication, but traditional hardware technologies have been too costly and complicated to scale for most countries and internet users.

The new open authentication standard FIDO U2F changes that model. Successfully deployed and supported by leading commercial service providers, including Gmail and Dropbox, FIDO U2F is now also supported in UK government services, including for identity assurance.

GOV.UK Verify is a new simple way for UK citizens to access an increasing range of UK government services online. This is the first government service in the world to make support for simple and strong FIDO U2F authenticators. The service works using a roster of identity providers, who check and confirm a user’s identity before they can access a government service. Digidentity is one of the UK government’s certified identity service providers.

“UK citizens can easily purchase a FIDO U2F device online and register it with Digidentity,” says Marcel Wendt, Digidentity CTO and co-founder. “With a quick online process, the user’s identity is verified and tied to the U2F device, and the data is encrypted to safeguard a user’s privacy. We are pleased to partner with Yubico, a driving contributor of the FIDO U2F standard, to make this happen.”

To authenticate to GOV.UK Verify using Digidentity with FIDO U2F, the user inserts a U2F YubiKey device into their computer’s USB port, and then touches the device. There are no drivers or client software to install. Later this year, U2F authentication via Near Field Communication (NFC) and Bluetooth will be supported by Digidentity for secure login from mobile devices.

“We are impressed with the online identity services that GOV.UK and Digidentity have developed and are now offering to UK citizens,” says Stina Ehrensvard, CEO and founder, Yubico. “We share their mission of making secure online identities easy and available for everyone.”

YubiKeys with FIDO U2F support are available (starting from £13/$18) at Amazon.com or from the Yubico Store. The same U2F key that works with GOV.UK Verify and Digidentity also works for logging in to a growing number of large scale commercial services, without any personal data or encryption secrets shared between service providers.

About Yubico
Yubico sets new world standards for simple, secure login, preventing unauthorized access to computers, servers, and internet accounts.

Supporting multiple authentication and encryption protocols on all devices and platforms, YubiKeys protect access to user accounts for the world’s largest enterprises with a simple touch, and with no driver or client software needed. Yubico is a leading contributor to the FIDO Universal 2nd Factor open authentication standard, and Yubico’s technology is used, and loved, in more than 150 countries.
Founded in 2007, Yubico is privately held with offices in Sweden, US and UK. For more information, please visit www.yubico.com.

About Digidentity
Digidentity makes your online life simpler and safer by enabling secure and verified digital identities for everyone.

To do this, Digidentity developed services focused on a unique digital identity, where the user and their privacy are key. Digidentity is also a supplier of SSL certificates and qualified digital signatures. Digidentity provides national digital identity solutions to the Dutch and British governments, as well as solutions for a large variety of organizations. Providing identities to more than 12 million Europeans, Digidentity executes more than 150 million secure online transactions per year between people, organizations, and governments.

Founded in 2008, Digidentity is privately held in The Netherlands. For more information, please visit www.digidentity.com.

Media Contact
Ronnie Manning
Director, Public Relations
Yubico, Inc.
Ronnie@Yubico.com
1.619.822.2239

Ronnie Manning

YubiKey and U2F at CES ShowStoppers – Yubico Demonstrates Mobile Contactless, Tokenless, and Passwordless Authentication

PALO ALTO, CA, JAN. 6, 2016 – Yubico, the leading provider of simple and open online identity protection, today announced it will be participating at ShowStoppers @ CES (Consumer Electronics Show) 2016.  Yubico will be demonstrating the first FIDO U2F-certified NFC-enabled YubiKey and a preview of a software-based U2F mobile client that brings public-key cryptography to both consumer and enterprise mobile users with a tokenless and passwordless experience.

YubiKey NEO

One Touch, Secure Login with YubiKey at ShowStoppers @ CES

Yubico will be exhibiting at booth B-12 at ShowStoppers on Wednesday, January 6, 2016, 6-10 p.m., at the Wynn Las Vegas.

Hacking, data loss, and identity theft is no longer just a concern to enterprises, but a threat that reaches everyone online.  The time is now and the technology is here for consumers to protect themselves beyond just a username and password.  Yubico’s YubiKey holds the promise of a more secure online and mobile consumer experience, and a dramatic increase in enterprise security.

The YubiKey NEO is the first device certified for U2F mobile authentication over NFC (Near Field Communication).  At ShowStoppers, Yubico will demonstrate how a single YubiKey NEO securely authenticates to both online services via USB and a U2F supported mobile login, with a simple tap of the YubiKey to an NFC-enabled mobile device.

“2016 is the year when FIDO U2F will unfold its promise of a ‘universal’ second factor,” said Stina Ehrensvard, CEO and Founder, Yubico, Inc. “This year, we expect to see many more large-scale online service providers announce their support for U2F and YubiKeys, targeting both consumers and enterprises.”

Also at Showstoppers, Yubico is demonstrating a software-based U2F mobile client (iOS/Android) that does not require additional hardware. With the U2F mobile client, second-factor authentication can be a password or the fingerprint used to unlock the phone, enabling the first tokenless and passwordless user experience for FIDO U2F.

While external hardware authenticators without internet connections offer the highest level of identity protection, Yubico’s U2F mobile client provides a heightened level of security compared to a static username and password login. As an example, an online bank that adds supports for U2F can allow its mobile users to perform lower-value transactions using the U2F mobile client only, while higher-value transactions would require U2F hardware authentication.

The YubiKey NEO is available today at Amazon.com and Yubico web store for $50 (single quantity retail price).

 

 

 

Media Contact
Ronnie Manning
Director, Public Relations
619.822.2239
Ronnie@Yubico.com