FIDO @ LINE - #idcon vol.24

1. LINE FIDO
LINE Corporation
K.Sekimizu(LINEID:kirimanjirou)

2. • U2F/FIDO2 UAF
• LINE FIDO

3. U2F/FIDO2 UAF

4. FIDO
FIDO2 Project
FIDO UAF Hardware-backed Keystore Authenticator (HKA)
Universal Server

5. FIDO U2F/FIDO2
https://github.com/Yubico
FIDO UAF
https://github.com/eBay/UAF
FIDO
https://fidoalliance.org/download/

6. FIDO2 Project
FIDO UAF
FIDO U2F
(@FIDO)
CTAP
(@FIDO)
WebAuthn
(@W3C)
FIDO2 Project

7. •
• Authenticator

8. ()
,

9. (U2F)

10. ,
(U2F)
C
() , C
C E ILB D
/
O N
+(
() , F
Javascript API
(U2F1.x)
CTAP 1.x(USB/NFC/BLE)

11. ,
(FIDO2)
C
() , C
C E ILB D
/
S O
+(
() , F
Javascript API
(Web Authn)
CTAP 2(USB/NFC/BLE)
N
O

12. (UAF)
ab A
() , A
A SM A
ab
() , O M U
/ / - ,
() , ( -
() , ( - / : - / : :
ab I MO S je cFD CJdfih

13. (UAF)
A
A
, D
Attestation
User

14. (UAF) HW
Finger Print API
(Android 4.0 or later)
----
#iOS
KeychainTouchID:
Using Touch ID with Keychain
and Local Authentication
(iOS 10.0 or later)
Attestation
User

15. (UAF) Hardware-backed Keystore Authenticator (HKA)
A
Keystore API with :
Android key attestation
and Fingerprint API
(Android 8.0 or later)
Attestation
User

16. (UAF)
A
Attestation
User

17. Message Format
Protocol Specification
U2F/FIDO2UAF
Message Format
Protocol Specification
WebAuthn(W3C)

18. U2F Assertion Data
FIDO U2F
Registration Success MSG Authentication Success MSG

19. FIDO2 Assertion Data(authData)
FIDO2
Registration Success MSG Authentication Success MSG

20. FIDO2 Assertion Data(authData)
FIDO2
Registration Success MSG Authentication Success MSG
FIDO U2F Signature

21. UAF Assertion Data
FIDO UAF

22. Universal Server
Ensures interoperability with all
FIDO Certified Authenticators
FIDO Universal Server

23. LINE FIDO

24. LINE
= ?

25. Clova IoT

26. Finance

27. Log in with LINE
Federation

28. Device Loss
X ID
Cannot be established
Private Key Public Key
Cryptographic
Binding
ID
Device
Loss !
Private Key Public Key

29. KYC Known Your Customer https://onfido.com/product/
ID Record Check
Document Check
Facial Check

30. • U2F/FIDO2 UAF
• FIDO
•
• Device Loss Enrollment
•