The FIDO Certified program is a core activity of the FIDO Alliance that underpins the B2B FIDO ecosystem of interoperable products and services. A growing majority of service providers are specifying FIDO Certified products in their RFPs as they are seeking the benefits of having a standards-based and future-proof foundation for user authentication. Beyond those core benefits, we’re seeing growing use cases and demand for more advanced Certified Authenticators – as well as in FIDO’s biometric component certification program, which is a useful mechanism for assessing how well biometric products perform against industry standard metrics. Are you thinking about developing FIDO products and getting certified? Are you a service provider wondering what FIDO Certified means for you? Are you just wondering what the different certification programs are and how they relate to each other? View the presentation.

1. © FIDO Alliance 2021
1
WEBINAR

2. © FIDO Alliance 2021
2

3. © FIDO Alliance 2021
Today’s Speakers
Dr. Rae Rivera
Director of Certification
FIDO Alliance
Megan Shamas
Director of Marketing &
Chief Question Asker
FIDO Alliance

4. © FIDO Alliance 2021

5. © FIDO Alliance 2021
Standardization for
industry
Market
differentiation
Regulatory
requirement
Consumer
protection

6. © FIDO Alliance 2021
FIDO’s Perspective

7. © FIDO Alliance 2021

8. © FIDO Alliance 2021
Stand out against competition
Increased product rigor
Competitive edge

9. © FIDO Alliance 2021
INDUSTRY
REQUIREMENT
MEETS COMPLIANCE
ASPECTS
VALIDATED IN
MARKET

10. © FIDO Alliance 2021
Confidence in
product quality
Security and
trust
Informed
purchases
Product rigor

11. © FIDO Alliance 2021
FIDOCertificationProgram

12. © FIDO Alliance 2021
12

13. © FIDO Alliance 2021
Functional Certification
Conformance Test Validation
• Validates product against
specification
Interoperability
• Validates implementability of
product in the marketplace

14. © FIDO Alliance 2021
•
•
•
14

15. © FIDO Alliance 2021
15
Functional
Certification
Security
Evaluation
Authenticator
Certification

16. © FIDO Alliance 2021
Vendor
Questionnaire
Test
Procedures
Secretariat or
Lab
Evaluation

17. © FIDO Alliance 2021
17
AUTHENTICATOR SECURITY LEVELS
Level 1
• Basic authenticator security
• Software based solutions
Level 2
• Adds Allowed Restricted Operating Requirement (AROE)
• Increased assurances based on the AROE
Level 3
• All requirements of level 1 and 2, with added assurances
related to hardware protections
• Companion Program required

18. © FIDO Alliance 2021
18

19. © FIDO Alliance 2021
19

20. © FIDO Alliance 2021
20
What is tested?
• False Accept Rate (FAR)
• False Reject Rate (FRR)
• Presentation Attack Detection (PAD)
• Program includes Self-attestation (validated based on vendor test data)
Using a Certified Biometric Subcomponent:
• Optional for Authenticators using a Biometric at L1-L2.
• The Security Requirements enforce Biometric Certification of the
biometric at L3 and higher when a biometric is used in the authenticator.
• Once L2+ is finalized Biometric Certification will also be required
• Results in a “FIDO Certified” Authenticator

21. © FIDO Alliance 2021
21

22. © FIDO Alliance 2021
22

23. © FIDO Alliance 2021
Thank you

24. © FIDO Alliance 2021
Ask FIDO Anything
Dr. Rae Rivera
Director of Certification
FIDO Alliance
Megan Shamas
Director of Marketing &
Chief Question Asker
FIDO Alliance