FIDO Alliance | All Rights Reserved | Copyright 2017
FIDO IN CHINA UPDATE
Henry Chai
Chair, FCWG
FIDO Ecosystem in China
Henry Chai
FIDO China Working Group,Chair
Uni-ID Technology (Beijing) Co., Ltd,CEO
About FCWG
FIDO Alliance | All Rights Reserved | Copyright 2016 2
Confidential FIDO Alliance | All Rights Reserved | Copyright 2016 2
1
Lead
Collaboration
within and outside
China
2
Collect
Local
Regulatory
Requirements
3
Promote
Deployment of
FIDO Solution
4
Facilitate
the Evolution
of FIDO
Technology
FCWG Mission
FIDO in China– Members & Labs
Board
Sponsor
Associate
Labs
FIDO in China Overall
User Coverage Models FIDO-enabled Authn/Month OEMs
0.1bn+ 0.15bn+25100+ >80%
All Rights Reserved. FIDO Alliance. Copyright 2017.
Currently, FIDO Deployment is mainly in Financial
Industry in China
Third-party
Payment
Banking
Securities
Enterprises
FIDO-enabled OEMs in China
All Rights Reserved. FIDO Alliance. Copyright 2017.
All Rights Reserved | FIDO Alliance | Copyright 2017 7
59 Products Certified by 21 Chinese Companies
FIDO-based Standards Establishment in China
No. Organizations Industry Category FIDO-integrated
1
TAF
(Telecommunication Terminal Testing Technology
Association)
Telecommunication Alliance standard Y
2
CCSA
(China Communications Standards Association) Telecommunication Industry standard Y
3
DCA
(Data Center Alliance) Telecommunication Alliance standard Y
4
NIFA
(National Internet Finance Association of China) Finance
Alliance/industry
standard
Y
5
TC260
(National Information Security Standardization Technical
Committee )
Information Security National standard Y
6
CISTC
(Cryptographic Industry Standard Technical Committee) Cryptography Industry standard Y
• FCWG has been actively engaging with standards formulation agencies in different industries.
• Ultimately, hoping to build FIDO-based, unified standards in different industries, which also meet
China-specific market and government requirements.
All Rights Reserved | FIDO Alliance | Copyright 2017 9
FIDO Beijing Seminar Recap
• The FIDO Beijing
Seminar has been
held in Nov.7.
• Unlike the seminar in
Korea and Tokyo, this
is the first time that
FIDO seminar has
been held in mainland
China.
• Thanks very much for
the support from FIDO
alliance and FFK.
Challenges & Opportunities of FIDO in China
TUSI
Authentication
standards/plat-
forms in China
(Standards Of auThentication
with fingERprint)
(Tencent User Security
Infrastructure)
(Internet Finance Authentication
Alliance)
Establishment
Membership
Deployment
Key members
Authenticatio
n methods
June 2015 Jan 2016Feb 2013 April 2016
PIN + biometrics Wearables
only
Fingerprint only Fingerprint only
106 20+Around 20260+
RPs - Top 5 third party
payment service
providers & banks;
etc
etc
TEE vendors:
OEMs: Vivo, Le, Oppo etc
mainstream brands
Beanpod, GuoHe, Trustonic
——
Devices – 1 billion+, 36brands, 200
device models
RP - Alipay
(0.14 billion fingerprint
users )
Devices- Qkey
Usage Scenario - secure
payment + smart home/smart
city application
Devices- Most devices in the
market are supported
(120 million)
RP- WeChat
(0.8 billion MAU)
Devices – 80%
mainstream mobile
brands in the market
Reviews by
FCWG
Finance-area-focused
No banking deployment yet
WeChat API U2F-like wearable——
Competitive solution (IFAA & SOTER & TUSI) co-exist, standards are very fragmented.
Challenges & Opportunities of FIDO in China (Cont’d)
Regulation
• FIDO is an open standard, which need to
meet the requirement of government
regulation and national cryptographic
algorithm;
• The requirement for CA & e-signature for
bank’s long-distance business;
• Privacy protection is increasingly high.
• China Cybersecurity Law has brought
up new demands for security and
privacy protection;
• Diversified authentication demand has
been raised due to the innovation in
China mobile financial area;
• IoT、citizen real-name requirement and
enterprise SaaS upgrade all need new
online authentication technology.
FIDO in the Future - the Focus and Goal of FCWG
Localization & Standardization:Localize FIDO to meet both regulation and
market requirements; facilitate domestic unified standards establishment.
Expand FIDO Deployment Fields:Apart from financial industry, promote FIDO
adoption into more diversified industry and usage scenario.
Collectively Cooperation:Closely work with the whole ecosystem to facilitate
online-authentication-system upgrade in China.
All Rights Reserved. FIDO Alliance. Copyright 2017.
FIDO Alliance | All Rights Reserved | Copyright 2017
THANK YOU!

FIDO Ecosystem in China

  • 1.
    FIDO Alliance |All Rights Reserved | Copyright 2017 FIDO IN CHINA UPDATE Henry Chai Chair, FCWG FIDO Ecosystem in China Henry Chai FIDO China Working Group,Chair Uni-ID Technology (Beijing) Co., Ltd,CEO
  • 2.
    About FCWG FIDO Alliance| All Rights Reserved | Copyright 2016 2 Confidential FIDO Alliance | All Rights Reserved | Copyright 2016 2 1 Lead Collaboration within and outside China 2 Collect Local Regulatory Requirements 3 Promote Deployment of FIDO Solution 4 Facilitate the Evolution of FIDO Technology FCWG Mission
  • 3.
    FIDO in China–Members & Labs Board Sponsor Associate Labs
  • 4.
    FIDO in ChinaOverall User Coverage Models FIDO-enabled Authn/Month OEMs 0.1bn+ 0.15bn+25100+ >80% All Rights Reserved. FIDO Alliance. Copyright 2017.
  • 5.
    Currently, FIDO Deploymentis mainly in Financial Industry in China Third-party Payment Banking Securities Enterprises
  • 6.
    FIDO-enabled OEMs inChina All Rights Reserved. FIDO Alliance. Copyright 2017.
  • 7.
    All Rights Reserved| FIDO Alliance | Copyright 2017 7 59 Products Certified by 21 Chinese Companies
  • 8.
    FIDO-based Standards Establishmentin China No. Organizations Industry Category FIDO-integrated 1 TAF (Telecommunication Terminal Testing Technology Association) Telecommunication Alliance standard Y 2 CCSA (China Communications Standards Association) Telecommunication Industry standard Y 3 DCA (Data Center Alliance) Telecommunication Alliance standard Y 4 NIFA (National Internet Finance Association of China) Finance Alliance/industry standard Y 5 TC260 (National Information Security Standardization Technical Committee ) Information Security National standard Y 6 CISTC (Cryptographic Industry Standard Technical Committee) Cryptography Industry standard Y • FCWG has been actively engaging with standards formulation agencies in different industries. • Ultimately, hoping to build FIDO-based, unified standards in different industries, which also meet China-specific market and government requirements.
  • 9.
    All Rights Reserved| FIDO Alliance | Copyright 2017 9 FIDO Beijing Seminar Recap • The FIDO Beijing Seminar has been held in Nov.7. • Unlike the seminar in Korea and Tokyo, this is the first time that FIDO seminar has been held in mainland China. • Thanks very much for the support from FIDO alliance and FFK.
  • 10.
    Challenges & Opportunitiesof FIDO in China TUSI Authentication standards/plat- forms in China (Standards Of auThentication with fingERprint) (Tencent User Security Infrastructure) (Internet Finance Authentication Alliance) Establishment Membership Deployment Key members Authenticatio n methods June 2015 Jan 2016Feb 2013 April 2016 PIN + biometrics Wearables only Fingerprint only Fingerprint only 106 20+Around 20260+ RPs - Top 5 third party payment service providers & banks; etc etc TEE vendors: OEMs: Vivo, Le, Oppo etc mainstream brands Beanpod, GuoHe, Trustonic —— Devices – 1 billion+, 36brands, 200 device models RP - Alipay (0.14 billion fingerprint users ) Devices- Qkey Usage Scenario - secure payment + smart home/smart city application Devices- Most devices in the market are supported (120 million) RP- WeChat (0.8 billion MAU) Devices – 80% mainstream mobile brands in the market Reviews by FCWG Finance-area-focused No banking deployment yet WeChat API U2F-like wearable—— Competitive solution (IFAA & SOTER & TUSI) co-exist, standards are very fragmented.
  • 11.
    Challenges & Opportunitiesof FIDO in China (Cont’d) Regulation • FIDO is an open standard, which need to meet the requirement of government regulation and national cryptographic algorithm; • The requirement for CA & e-signature for bank’s long-distance business; • Privacy protection is increasingly high. • China Cybersecurity Law has brought up new demands for security and privacy protection; • Diversified authentication demand has been raised due to the innovation in China mobile financial area; • IoT、citizen real-name requirement and enterprise SaaS upgrade all need new online authentication technology.
  • 12.
    FIDO in theFuture - the Focus and Goal of FCWG Localization & Standardization:Localize FIDO to meet both regulation and market requirements; facilitate domestic unified standards establishment. Expand FIDO Deployment Fields:Apart from financial industry, promote FIDO adoption into more diversified industry and usage scenario. Collectively Cooperation:Closely work with the whole ecosystem to facilitate online-authentication-system upgrade in China. All Rights Reserved. FIDO Alliance. Copyright 2017.
  • 13.
    FIDO Alliance |All Rights Reserved | Copyright 2017 THANK YOU!