UAF (FIDO)

from Wikipedia, the free encyclopedia
UAF-ready logo of the FIDO alliance

UAF ( U niversal A uthentication F ramework, in German: universal framework for authentication ) is an industry standard for generally applicable authentication without a password . The network protocol regulates the process for verifying access authorization for web-based services. The user has to register with an online service and can then log in locally with his device as often as required. Various biometric features are supported for authentication within the framework of UAF , such as the recognition of a fingerprint , face , iris or human voice . This method of authentication can be combined with other factors, such as a personal identification number (PIN) or as part of the two-factor authentication U2F of the FIDO alliance .

The UAF specifications were developed by the members of the FIDO alliance. On December 9, 2014, the first corresponding standard FIDO v1.0 was published.

Products

The first smartphone that the UAF supports to meet up with the built-in device fingerprint scanner at payment service PayPal to authenticate, the Samsung Galaxy S5 .

The member of the FIDO alliance Sonavation has developed an ultrasound , three-dimensional scanning fingerprint scanner for the standard.

The company Agnitio brought the end of 2014 with the product KIVOX mobile certified according to the standard UAF voice recognition on the market.

features

In addition to the general advantage of cryptographically secured authentication, the UAF has the following features:

  • User owns a device with a UAF-compatible application
  • Authentication with locally available biometric data
  • Can be combined with passwords
  • Manufacturer independence
  • Operating system independence
  • Vendor independence
  • Royalty free authentication
  • Independence from patent holders
  • Publicly accessible process description (specification)
  • Support from leading companies
  • Authentication servers do not need to store any personal data, only identifiers and public keys
  • Ease of use, no categorical entry of passwords required

Web links

Individual evidence

  1. Specifications Overview - Passwordless User Experience (UAF) , FIDO Alliance, accessed December 18, 2014
  2. FIDO 1.0 Specifications are Published and Final Preparing for Broad Industry Adoption of Strong Authentication in 2015 , FIDO Alliance, accessed December 18, 2014
  3. How do I Use the Finger Print Scanner to Manage Passwords and Unlock my Samsung Galaxy S® 5? - Pay using PayPal , Samsung , accessed December 18, 2014
  4. Technology , sonavation.com, accessed 1 January 2015
  5. Commercial Products , Agnito, accessed 1 January 2015