The document discusses the FIDO Alliance's vision and progress in developing open authentication standards to replace passwords. It summarizes that the FIDO Alliance aims to define interoperable authentication mechanisms that do not rely on passwords. It has gained over 250 members and its standards have been adopted by major companies and are supported on many devices. It outlines continued development of FIDO specifications and growth in certified products and deployments. The Alliance sees 2017 as a milestone year as it works on additional standards efforts and certification programs.

1. INTRODUCTION TO THE FIDO
ALLIANCE
VISION AND STATUS
Brett McDowell, Executive Director
brett@fidoalliance.org
All Rights Reserved | FIDO Alliance | Copyright 2016. 1

2. 2
THE FIDO VISION
PROGRESS THROUGH 2016
THE ROAD AHEAD
All Rights Reserved | FIDO Alliance | Copyright 2016.

3. THE FIDO VISION
3All Rights Reserved | FIDO Alliance | Copyright 2016.

4. 4
Formed in 2012 to Solve the Password Problem
63% of data breaches
in 2015 involved
weak, default, or
stolen passwords
-Verizon Data Breach
Report
Data breaches
expected to reach
1,000 in 2016
up 22% from 2015
-Identity Theft Resource
Center
Each data breach
costs $3.8 million
on average
up 23% from 2013
-Ponemon Institute
All Rights Reserved | FIDO Alliance | Copyright 2016.

5. The FIDO Alliance is an open industry
association of over 250 organizations
with a focused mission:
authentication standards
5All Rights Reserved | FIDO Alliance | Copyright 2016.

6. FIDO Alliance Mission
Develop
Specifications
Operate
Adoption Programs
Pursue Formal
Standardization
1 2 3
All Rights Reserved | FIDO Alliance | Copyright 2016. 6
define an open, scalable, interoperable set of
mechanisms that supplant reliance on passwords
to authenticate users of online services

7. All Rights Reserved | FIDO Alliance | Copyright 2016.
Board Members
7

8. FIDO Standards
online authentication using
public key cryptography
8All Rights Reserved | FIDO Alliance | Copyright 2016.

9. HOW “Shared Secrets” WORK
ONLINE
The user authenticates
themselves online by presenting a
human-readable “shared secret”
9All Rights Reserved | FIDO Alliance | Copyright 2016.

10. HOW FIDO WORKS
AUTHENTICATOR
LOCAL ONLINE
The user authenticates
“locally” to their device
(by various means)
The device authenticates
the user online using
public key cryptography
10All Rights Reserved | FIDO Alliance | Copyright 2016.

11. Support for Two Authentication Experiences
ENABLES MANY AUTHENTICATION OPTIONS | EACH SERVICE PROVIDER REGISTERS UNIQUE FIDO CREDENTIALS
11

12. OPEN STANDARDS R.O.I.
 FIDO-ENABLE ONCE
 GAIN EVERY DEVICE YOU TRUST
 NO MORE ONE-OFF INTEGRATIONS
12All Rights Reserved | FIDO Alliance | Copyright 2016.

13. USABILITY, SECURITY, R.O.I.
and
PRIVACY
13All Rights Reserved | FIDO Alliance | Copyright 2016.

14. No 3rd Party in the Protocol
No Secrets on the Server Side
Biometric Data (if used) Never Leaves Device
No (*new*) Link-ability Between Services
No (*new*) Link-ability Between Accounts
14All Rights Reserved | FIDO Alliance | Copyright 2016.

15. Summary: FIDO Authentication Delivers
Better security
for online services
Reduced cost
for the enterprise
Simpler and safer
for users
15All Rights Reserved | FIDO Alliance | Copyright 2016.

16. 1616
PROGRESS THROUGH 2016:
DEVELOPMENT
All Rights Reserved | FIDO Alliance | Copyright 2016.

17. All Rights Reserved | FIDO Alliance | Copyright 2016.
FIDO Development History
FIDO 1.0
FINALFirst
Deployments
UAF & U2FSpecification
Review Draft
FIDO Ready
Program
Alliance
Announced
FEB
2013
DEC
2013
FEB
2014
FEB-OCT
2014
DEC 9
2014
MAY
2015
FEB
2016
Formal
Standardization
JUNE
2015
Certification
Program
New U2F
Transports
17
NOV
2016
FIDO 1.1

18. FIDO 1.1 Specifications Enhancements
18
UAF U2F
All Rights Reserved | FIDO Alliance | Copyright 2016.

19. 1919
PROGRESS THROUGH 2016:
ADOPTION
All Rights Reserved | FIDO Alliance | Copyright 2016.

20. All Rights Reserved | FIDO Alliance | Copyright 2016.
Certification Growth
20
 An open competitive market
 Ensures interoperability
 Sign of mature FIDO ecosystem
250+
FIDO® Certified
products available
today
152
64
32
62
74
108
162
216
253
Apr-15 Jul-15 Sep-15 Dec-15 Mar-16 May-16 Aug-16
TOTAL

21. All Rights Reserved | FIDO Alliance | Copyright 2016. 21
FIDO Certified

22. FIDO in the Android Ecosystem
22
S5, Mini Alpha Note4,5 Note
Edge
Tab S,
TabS2
S6,
S6Edge
S7,
S7Edge
Vernee
Thor
XperiaZ5 Xperia Z5
Compact
XperiaZ5
Premium
Mate8
V10 G5 Phab2Phab2
Pro Plus
Z2, Z2 Pro
Xperia X
Performance
Xperia XZ Xperia X
Compact
SO-02J
All Rights Reserved | FIDO Alliance | Copyright 2016.
Arrows
NX
Arrows
Fit
Arrows
Tab
F-02HF-04HF-04G
F-01H
Aquos Zeta
SH-01HSH-03G SH-02J

23. All Rights Reserved | FIDO Alliance | Copyright 2016.
iPhone SE iPhone & iPhone+
iPad Air, Mini iPad Pro
FIDO in the Apple Ecosystem
Supported iOS Fingerprint Devices
23

24. 24
FIDO in the Windows and Web Ecosystems
Windows Platforms Web
Yoga 910
All Rights Reserved | FIDO Alliance | Copyright 2016.

25. 25
Global Leaders Deploy FIDO Standards
All Rights Reserved | FIDO Alliance | Copyright 2016.

26. 26
FIDO: THE ROAD AHEAD
All Rights Reserved | FIDO Alliance | Copyright 2016.

27. The Road Ahead
27
W3C Web
Authentication
Specification
Standards Effort
with EMVCo
Client-to-
Authenticator
Protocol (CTAP)
FIDO Gold
Server + New
Certification
Programs
All Rights Reserved | FIDO Alliance | Copyright 2016.

28. All Rights Reserved | FIDO Alliance | Copyright 2016.
2017 Is a Milestone Year in the Making
28
1. FIDO adoption through Web Platform standardization
2. FIDO adoption on mobile through CDCVM in Mobile Payments
3. New FIDO use cases: “companion device” authentication
4. New Certification Programs for a quickly maturing marketplace

29. THANK YOU
Brett McDowell, Executive Director
brett@fidoalliance.org
29All Rights Reserved | FIDO Alliance | Copyright 2016.