最有看点的互联网金融门户

最有看点的互联网金融门户
其他国际资讯

FIDO联盟推出生物识别组件认证项目,以增加行业互信

现如今,基于生物识别的身份认证已成为一种非常流行的用来取代密码和PIN码的方式。但是,由于生物识别领域标准的缺乏,如何有效界定生物识别技术的准确性和可靠性,一直以来是困扰产业链和用户的难题。为了弥补市场空缺以及打消产业链及用户的顾虑,FIDO联盟近期正式推出FIDO生物识别组件认证项目。该项目在生物识别认证行业领域内处于绝对领先水平。

随着本认证项目的推出,联盟将授权独立的第三方检测实验室对生物识别子组件是否符合国际公认的性能标准,ISO/IEC 19795和ISO/IEC 30107,进行检测认证,这些标准不仅适用于生物识别性能和演示攻击检测(PAD),同时也适用于商业用途。联盟希望通过对生物识别组件的认证,增强企业客户间的互信度,并降低生物识别供应商需反复证明其组件效能的成本。

项目细节

FIDO生物识别组件认证项目面向所有生物识别认证器子组件开放。FIDO联盟及第三方授权检测实验室将向通过检测认证的厂商颁发生物识别子组件认证证书。

为了符合客户的预期和要求,厂商也可以选择对FIDO认证器进行认证(即FIDO安全认证),以验证该认证器与FIDO协议的一致性。对于含有生物识别传感器的认证器,如欲获取FIDO最高级别安全认证,则须先通过生物识别子组件认证;而对于级别较低的FIDO安全认证,FIDO生物识别子组件认证则是可选项。

The FIDO Alliance is launching its own certification program for biometric authentication technology.FIDO Announces Biometrics Certification Program

The aptly named Biometric Component Certification Program will focus primarily on biometric subcomponents, ascertaining whether they meet certain ISO standards, ie. ISO/IEC 19795 and ISO/IEC 30107. It will also assess their capacity for Presentation Attack Detection, an increasingly important area as biometrics are more and more often used for authentication.

In announcing the certification program, the FIDO Alliance asserted that it would use “accredited independent labs” to perform its assessments. The organization did not name any labs in particular, but it may be worth noting that Denver-based iBeta launched its own Presentation Attack Detection program this past spring.

FIDO is already renowned for its certification programs for its Universal Second Factor (U2F) and Universal Authentication Framework (UAF) protocols, of course, and in recent years has established itself as a key standards body for authentication security products and services. With biometrics an increasingly critical component of authentication systems, FIDO’s branching into biometric subcomponents certification is a logical step forward.

As FIDO Alliance Executive Director Brett McDowell explained in a statement announcing the program, “With biometrics being a popular option for mobile and web applications implementing FIDO Authentication, there is a growing need for those service providers to appropriately assess the risk of fraud from lost or stolen devices.” McDowell added that while the law enforcement and border control markets have their own government-focused certification programs, so far no such programs have existed for the growing consumer market.


用微信扫描可以分享至好友和朋友圈

扫描二维码或搜索微信号“iweiyangx”
关注未央网官方微信公众号,获取互联网金融领域前沿资讯。

发表评论

发表评论

您的评论提交后会进行审核,审核通过的留言会展示在下方留言区域,请耐心等待。

评论

您的个人信息不会被公开,请放心填写! 标记为的是必填项

取消

版权所有 © 清华大学五道口金融学院互联网金融实验室 | 京ICP备17044750号-1