Fido forms part of UK future cybersecurity plans

Biometric authentication through the Fido Alliance protocol will form part of the UK government's cybersecurity plans from 2016, according to a new planning document.As part of plans to better secure government transactions, the UK government plans use FIDO authentication to move beyond passwords, notes the document.The UK govt will “invest in technologies like Trusted Platform Modules (TPM) and emerging industry standards such as Fast Identity Online (FIDO), which do not rely on passwords for user authentication, but use the machine and other devices in the user's possession to authenticate. The Government will test innovative authentication mechanisms to demonstrate what they can offer, both in terms of security and overall user experience.”The Fido Alliance has welcomed the plans, stating that with this move, the U.K. government is demonstrating leadership by acknowledging critical aspects of improving authentication.Brett McDowell, executive director, FIDO Alliance, said:” Users should no longer need to type in a one-time code and/or deal with extra screens; rather, modern authentication can leverage increasingly-available devices being shipped with built-in FIDO “single gesture, multi-factor” authentication technology, e.g., swipe a fingerprint, take a selfie, touch a security key. These new solutions are 'secure by default' and provide a user experience that is highly secure and extremely easy to use.”He added that In addition to the U.K., there are signs that other governments are beginning to understand the importance of authentication reform in overall cybersecurity policy. The U.S., for example, has shown understanding of the need to move beyond passwords for years.”The U.K.'s updated strategy is part of a growing trend that started in the U.S. with the National Strategy for Trusted Identities in Cyberspace (NSTIC). Given the clear value, I believe that other governments around the world would benefit from following the U.K.'s lead by investing in initiatives that will accelerate the evolution of their internet-dependent economies from highly vulnerable password-based security to hardened FIDO-based security based on public key cryptography, often with on-device biometrics or convenient second factors that facilitate ease-of-use”, said McDowell.

Also in the news:

Redrock Biometrics waiving fees for PalmID Nigeria implements ‘fraud-proof’ pensions biometric system Facebook’s Moments tool launched in Canada, the EU