Chip-to-Cloud Security Forum

PROGRAM

last update: September 21, 2014

This program will be enriched continuously in the coming weeks. Keep posted and follow us on LinkedIn and Twitter!

AT A GLANCE

PROGRAM AT A GLANCE:

DAY 1 – Tuesday September 23

PLENARY OPENING

Cloud and Virtualization Security

Contactless & m-Payment Security: SE-based or Not?	Cloud Services Security
Gala Evening

DAY 2 – Wednesday September 24

Creating Trust on Mobile Platforms

NIST Seminar:
Which Future for US/EU Trusted Cloud Services? (1/2)

M2M & IoT Security

NIST Seminar:
Which Future for US/EU Trusted Cloud Services? (2/2)

The Role of the Root of Trust
in Today and Tomorrow’s
Cybersecurity

DAY 3 – Thursday September 25
Security Evaluation Techniques	Strong Identification & Authentication in the Cloud

Fido Alliance WORKSHOP

SMART SOLUTIONS SHOW – Sept. 22 to Sept. 24

Take the opportunity to source innovation, seek business and network with the market leaders and innovators that are building our "trusted mobile life".

Conference main themes:

Embedded Security Technologies	Trusted Mobile Devices & Services	M2M & IoT Security	Cloud Security

DAY 1 - SEPT. 23

DAY 1 – Tuesday Sept. 23

+ Expand All Collapse All

9.15am – 10.00am: Badge delivery / Registration | 10.00am – 1.00pm: Plenary Opening Session
1.00pm – 2.00pm: Lunch – Networking – Exhibition – Demos

PLENARY OPENING

CLOUD AND VIRTUALIZATION SECURITY

PART I – KEYNOTES

Introductory
Jean-Paul Thomasson, Program Committee Chair

Virtualization appears as one of those revolutionary paradigms that are fundamentally changing the way we think about and approach computing. Migrating systems onto virtualized platforms such as cloud platforms, is often becoming a business imperative. Though Virtualization and Cloud definitions are still often confused. Virtualization, at its core, is the ability to emulate hardware via software. Virtualization allows to increase infrastructure / network capacity without significantly increasing capital investment.

While a widely Industry accepted definition of Cloud Computing has been proposed by NIST, Cloud is a natural extension of virtualization even if it is not a requirement.

The design, implementation and deployment of virtualization technology up to the Cloud have opened up new threats and security issues.

The Plenary Opening will gather eminent security experts to share and discuss these issues while showing ways to provide end-to-end privacy, security and trust in Cloud-based architectures.

Where Trust Begins – A Look at Better Security through Trust

Joerg Borchert
President & Chairman,
Trusted Computing Group (TCG)

Towards privacy, security, and trust in Cloud services

Jovan Golic
Action Line Leader for Privacy Security & Trust, EIT ICT Labs

Fostering Confidence in the Industrial Cloud

Walid Negm
CTO, Accenture Security R&D, Accenture Technology Labs, USA

Hardware Security Modules
in the Cloud

Michael Osborne
Head of Cloud Solutions and Security Group, IBM Research

PART II – PANEL DEBATE

Virtualization and Risks: The Impact of Virtualization Technologies on Mobile Transactions Security

With the current prevalence of mobile devices, especially smartphones and tablets connected to the Internet, it comes as no surprise that virtualization technologies and mobile devices (that also themselves embed virtualization technologies) are becoming more and more entwined with everyday aspects of our lives. We can use them to do just about anything, and that includes using them as a means to provide our credentials for mobile transactions. Cloud services, web applications, proliferation of mobile devices and social networking all continue to be vectors of attack causing major concern to corporations and users. The rising intensity and sophisticated nature of cyber attacks create a hostile and precarious environment for businesses charged with protecting their customers’ personal data and their own assets.
In the mobile transaction domain More

Questions:

With the advent of virtualization, one might ask whether his current security investments are still valid. Will proven strategies continue to work effectively?
As companies deploy more and more virtualization technologies, are there key considerations for people, processes, and technology management?
Should managers consider virtualization as a purely technological problem, and deal with it using a myriad of tools and technologies, rather than adopting a strategy based on the concepts of Risk Management aligning their security objectives with business strategy and ultimately decide which budget battles they can concede and which they can’t as economies continue to struggle?
Which level of security is adequate for which mobile use case: from banking and mobile ID highest security requirement to loyalty applications?
How does the virtualized Secure Element (namely HCE) compare with other available technologies?

Dominique Bolignano
CEO, Proven & Run

Olivier Tessier
Project Director, Digital Commerce Programme, GSMA

Janne Uusilehto
Head of Product Security & Privacy for Smart Devices, Microsoft; Co-Chairman
of Mobile Platform Working Group, TCG

1.00pm – 2.00pm: Lunch – Networking – Exhibition | 2.00pm – 6.45pm: Conference | 3.50pm – 4.30pm: Coffee & Refreshments Break – Networking – Exhibition – Demos

Contactless & m-Payment Security:
SE-based or Not?
(jointly with NFC World Congress)

Cloud Services Security

Session Chair: Laurent Sourgen, Board Member, Eurosmart / STMicroelectronics

The rise of host card emulation (HCE) and BLE Beacons, the tokenization specification from EMVco, have reshuffled the security approaches of contactless services, especially with sensitive ones such as m-payment and m-wallets. This track will review and balance the various security approaches: without a local Secure Element, TEE environment or hybrid solution based on mobile virtual cards technology.


Cloud-Based Rights & Contactless Application Management for NFC Devices in Practice More Nicolai Finke, Head of Product Management, LEGIC Identsystems, Switzerland - Experience from building a system that converges cloud, mobile & embedded – Solution & Architecture of cloud based rights and contactless app. management for NFC – State of web technologies (e.g. HTML5, CSS3 etc.) for secure service delivery to customers – Impact of combining NFC, BLE etc. in one solution and how it can be done
An Android Platform for NFC Services Virtualization Based on Host Card Emulation and Cloud of Secure Elements More Pascal Urien, Professor, Telecom ParisTech, France - Since October 2013, Android 4.4 (KitKat) supports the Host Card Emulation (HCE) – In March 2014 EMVco released the Payment Tokenisation Specification – In October 2015 the USA will switch to EMV chip card, and therefore to NFC – All these elements converge towards the virtualization of NFC services
Interworking Between Different Card Emulation Environments Laurence Bringer, Technical Marketing, Standardisation & Technology Department, Gemalto, France
HCE and Tokenisation – a Dream Team for the Future of Mobile Payments More Kurt Schmid, CEO, Nexperts, Austria - HCE explained in detail and experience from the real world usage - How can security be achieved without a local Secure Element - SE element in the cloud versus the EMV tokeninsation concept - Implications for the technical and commercial mobile payment eco-system
How GlobalPlatform’s TEE is Solving The Missing Security Link For Mobile Wallets More Gil Bernabeu, Technical Director, GlobalPlatform, USA - Introduction of the the trusted execution environment (TEE). - Why the TEE is the ideal environment to host sensitive applications such as mobile wallets. - Introduction of the trusted user interface.
A Consumer-Centric Approach to NFC (provisional title) More Fabrice Jogand-Coulomb, Chair GP Ad Hoc Committee, SD Association, France - Independent security token for all types of use cases - A hardware solution where consumer centric approach where user can decide - The perfect combination of hardware security with the benefit of HCE - smartSD can work as NFC SE or as a complement of HCE for strong cloud identification
Presentation by dejamobile (title to be precised) Houssem Assadi, CEO, Jean-Claude Pailles, Security Expert, dejamobile, France

Session Chair: Marc Muller, Head of Common Technologies, Gemalto, France

Security and privacy issues pose as the key roadblock to the fast adoption of cloud computing. Review here the various end-to-end interoperable infrastructures able to create trust in the cloud, through secure chip technology, TPM, etc.

Trust in the Cloud More

Stacy Cannady, Technical Marketing, Trustworthy Computing, TRIAD, Cisco, USA

- Use of TPM to create trust in the cloud
- Why TPM is vital to the Cloud architecture
- The tools to create a proof of concept that demonstrates the value proposition

GlobalPlatform: a Secure Solution for Deploying Value-Added Mobile Services More

Kevin Gillick, Executive Director, GlobalPlatform, USA

- Introduction into the importance of end-to-end interoperability and security during mobile innovation.
- Insight into the work of GlobalPlatform to support a secure end-to-end infrastructure.
- Overview of how GlobalPlatform’s Specifications can be leveraged to support different mobile architectures.

Requirements and Recommendations for Assurance in the Cloud Security More

Aljosa Pasic, Technology Transfer Director, Atos, Spain

- Certification and use of standards to increase trust in the Cloud
- The proliferating standards and certification schemes
- Achieving a global, trusted and widely accepted scheme

Context in Security of Distributed e-Services Environments More

Pawel Lubomski, Deputy Director of Information Systems Development, Gdansk University of Technology, Poland

- How to improve security of e-services located in Cloud and distributed environments
- Definition of dynamic context-oriented security model and real framework
- Possibilities of wide context acquisition and its analysis
- A practical implementation in service oriented university system.

Security Automation Tips, Tricks and Techniques More

Henk Birkholz, Trust & Security, Fraunhofer SIT, Germany

- Different views on a network can reveal very different insights

- The difference between configuration and state (and how it is sometimes not that different)
- A standardized representation is key to Security Automation
- Security Automation is only as good as the security-related information available

Gala Evening

DAY 2 - SEPT. 24

DAY 2 – Wednesday Sept. 24

+ Expand All Collapse All

9.00am – 1.00pm: Conference | 10.50am – 11.20am: Coffee & Refreshments Break – Networking – Exhibition – Demos

Creating Trust on Mobile Platforms

NIST Seminar
Which Future for US/EU Trusted Cloud Services?
Procurement, SLAs, standardisation on a global scale (1/2)

Session Chair: Gisela Meister, Director, Head of Technology Consulting, Mobile Security, Giesecke & Devrient, Germany

As various efforts have been made to add mobile apps and other point security solutions, one clear option is to ensure the base platform is safe and trusted. This track covers the latest advances of embedded mobile security technologies (eUICC, eSE, TEE, TPM), their deployment and management in the very demanding constraints of the mobile value chain.


Keynote Mobile & Embedded Security (provisional title) Ahmad-Reza Sadeghi, Director System Security Lab, Director Intel Collaborative Research Institute for Secure Computing, Cased Darmstadt, Germany
Mobile Security Goes Embedded – The Skill Sets Needed to Master the Complexity of Embedded Products in the Mobile Value Chain More Ralf Schedel, Global Sales Manager Enterprise/OEM, Giesecke & Devrient, Germany - Provisioning and managing the product life cycle of the embedded mobile security solutions (eSE, eUICC; TEE) - New skill sets, roles and collaboration models to address the new “embedded” value chains as emerging in the mobile markets
Basic Security Principles with OTA Management of Trusted Execution Environments More Dr. Stephan Spitz, EVP Engineering, Trustonic, Germany - Security challenges with remote management of Trusted Execution Environments (TEEs) - Basic security concepts to manage remotely Trusted Applications (TAs) in a mobile - Differences in remote management of Secure Elements (SEs) and TEEs
Trust Goes Mobile: Creating Mobile Trustworthy Mobile devices More Janne Uusilehto, Head of Product Security & Privacy for Smart Devices, Microsoft; Co-Chairman of Mobile Platform Working Group, TCG, UK - Learn key concepts of trusted platforms - Learn key concepts of the TEE - See how the TPM can be used with the TEE
Raising the Level of Mobile Security by Using Formal Methods More Dominique Bolignano, CEO, Prove & Run, France - Mobile platform security, - TEE, virtualisation, TUI (i.e. Trusted User Interface), - Secure elements in mobile devices, - Formal Methods
Easing Development and Deployment of Trusted Applications More Eric Vetillard, Sr Principal Product Manager, Oracle, France - Java, from the language to the platform - A solution for embedded and secure platforms - The TEE, a perfect match for Java - Bringing security to mobile and embedded platforms
A Walkthrough for Mobile Security Evaluation More Georges Gagnerot, Security Expert, Underwriters Laboratories (UL), France - Security concerns for mobile devices - Description of the mobile security state of the art - Live Attack on Android Devices - Google API Hacking

The National Institute of Standards and Technology gathers government officials, industry and academics to explore the future of Cloud Computing.

The procurement of Cloud Computing services is driven by the business and technical requirements of an organization. However, in a few years, it is expected that 80% of all cloud services will be consumed by other cloud services. The types of contracts that will need to be in place for these transactions will have to involve legal, local & regional concerns in order for cloud services to be useful on a global scale.

Service Level Agreements (SLAs) support the customer’s requirements and the terms need to be measureable for the buying and selling of trusted and reliable cloud services. Currently no standard way in which SLAs are supported across industry exists. What are the necessary components of an SLA and what are the definitions of the terms to be measured? How can the US & EU work together to ensure high quality SLAs that will provide the trusted cloud services to serve their citizens? Are there specific items in which the US and EU find challenging?

Billing is also part of the cloud future. What are those items that the US and the EU find necessary? Where do the other challenges lie? How will service brokering occur? Is it needed? Is transparency needed or required?


NIST Cloud Computing Program Overview Abdella Battou, Senior Advisor for Cloud Computing, NIST, USA
NIST Cloud & Mobile Conference Report Out Robert Bohn, NIST Cloud Computing Technical Program Manager, NIST, USA
PANEL DEBATE Comparing and contrasting US with EU approaches regarding SLAs and billing/trading/brokering Moderator: – Silvana Muscella, Trust-IT Services, UK Panellists: – Alan Sill, Senior Scientist, Texas Tech University, USA – John Calhoun, Microsoft, USA – Alain Pannetrat, Senior Researcher, Cloud Security Alliance, EMEA – Jean-Pierre Laisne, Lead of Compatible One, France – Bob Jones, CERN

1.00pm – 2.00pm: Lunch – Networking – Exhibition | 2.00pm – 6.45pm: Conference | 3.50pm – 4.30pm: Coffee & Refreshments Break – Networking – Exhibition – Demos

M2M & IoT Security
(jointly with M2M Innovation World Congress)

NIST Seminar
Which Future for US/EU Trusted Cloud Services?
Procurement, SLAs, standardisation on a global scale (2/2)


Use Cases – NIST SAJAAC Cloud Testbeds for Standards Development and Innovation Alan Sill, Senior Scientist, Texas Tech University, USA
Use Cases – Security PIV to Cloud…Via Mobile Devices Salvatore Francomacaro, IT Specialist, NIST, USA
PANEL DEBATE The Future of Cloud Services The forecast for cloud services remains bright and sunny, but in the not-too-distance future, most cloud services will be consumed by other clouds. What else is in store for the future of cloud services? What will be the proper course of action that the US and EU will take with regard to cloud services in the future? How large of a role will shared & interoperable services play in the landscape? What will international standards need to consider for these new kinds of services? Will older standards be updated and modified or can they remain unaltered? Where the industry is going forward in the cloud and what are the most important areas of standardization for the Industry? Standards based- EU vs US approach. Moderator : Robert Bohn, NIST Panellists: – Joel Fleck, HP, Secretary of DAPS38, Chair IEEE Adaptive Management for Cloud Computing study group and serving as secretary for P2301 – Francisco Medeiros, Deputy Head of Unit, Software & Services, Cloud, DG CONNECT, European Commission – Dawn Leaf, CIO, Department of Labor, USA – James Mitchell, Strategic Blue, UK – Aljosa Pasic, Atos Research, Spain

Focus Track

The Role of the Root of Trust in Today
and Tomorrow’s Cybersecurity


TPM Goes 2.0: A Look at the New Specification for the Trusted Platform Module More By Nicolai Kuntze, Fraunhofer SIT, Germany - Trusted Platform Module 2.0 adds a number of capabilities and supports today’s requirements for a root of trust and for evolving cryptography - Core concepts, use and new features of TPM 2.0 - Quick look at the PC Client spec.
PANEL: TPM 2.0: challenges and prospects Panellists: Joerg Borchert, President and Chairman, Trusted Computing Group; VP Chip Card and Security, Infineon Technologies; Stacy Cannady, Technical Marketing, Trustworthy Computing, TRIAD, Cisco, USA; Nicolai Kuntze, Fraunhofer SIT, Germany

Session Chair: Olivier Chavrier, Director of R&D and Innovative Projects, French World Class Cluster “Secured Communicating Solutions“, France

The announced billion “things” connected to the Internet are all potentially vulnerable to attacks, hacks and malware due to design and embedded systems software issues. This track will review and discuss the latest advances of security mechanisms to provide large scale secure deployment and end-to-end secured communications. Concrete use cases will also be detailed.


Ensuring M2M Systems Security More Didier Appell, Director of Security offering, Sogeti High Tech, France - Risk analysis of a systems of connected objects - Possibilities of software and hardware attacks - Planning security measures - Security at the communication canal and object levels
Who Can You Trust in the Internet of Things? More Stacy Cannady, Technical Marketing, Trustworthy Computing, TRIAD, Cisco, USA - The use of hardware roots of trust to assure that platforms have protected, unique identities - How integrity information can alert an enterprise when a platform becomes compromised by an attacker - Different technical approaches used to implement virtualization on a platform - How to secure the hypervisor using roots of trust and access control
Lightweight Handshake for IoT Deployment More Christine Hennebert, Doctor/Engineer, CEA Grenoble, France - Lightweight handshake mechanism based on elliptic curve cryptography - Compliant with 6LoWPAN protocol stack - Enable easy bootstrapping to the network of “Plug&Play” constrained devices - Application to large scale secure deployment of “Things”
Who Are You, What Are You? More Peter Clark, Sales Director, Intercede, UK - Perimeter control is a crucial defensive technology - Device identity and trust are increasingly important - Combined device and personal identities can enhance trust - Policy-driven management of all forms of identity is vital
Simple, Scalable, Secure Networks with EST More Emily McAdams, Technical Marketing Engineer, Cisco Systems, USA - Devices connected to the network need certificates for secure communication - Presentation on a new standards-based protocol recently ratified by IETF - Show how enabling EST in networks can simplify end-to-end security
Security Energy Consumption Overhead In Mesh Networks Herve Ganem, System Architect, Gemalto, France
GlobalPlatform’s Proposition for the Internet of Things More Gil Bernabeu, Technical Director, GlobalPlatform, USA - The rapidly evolving Internet of Things / Machine-to-Machine market. - The GlobalPlatform’s IoT Task Force and the group’s current work priorities. - GlobalPlatform’s IoT positioning paper
Secure Connection for a Smarter World More Jerome Schang, Cybersecurity Global Segment Marketing Manager, NXP Semiconductors, USA - Strong Authentication for SCADA M2M services - A real and deployed use case for Smart Healing Grid with S&C electric - Paving the way to secure cloud applications and embedded security

DAY 3 - SEPT. 25

DAY 3 – Thursday Sept. 25

+ Expand All Collapse All

9.00am – 1.00pm: Conference | 10.50am – 11.20am: Coffee & Refreshments Break – Networking
1.00pm – 2.00pm: Lunch – Networking– FIDO Alliance Demos

Security Evaluation Techniques

Strong Identification & Authentication
in the Cloud

Session Chair: Eric Vetillard, Sr Principal Product Manager, Oracle, France

Embedded devices security requires the evaluators to be very accurate in the methodology they develop to cover all attack paths and parameters. Find here state-of-the-art techniques, models and appropriate countermeasures –relay attacks, side channel analysis, fault injection, locking phenomenon, etc.– with a highlight on random key generation and physical unclonable functions.


Keynote Defeating Relay Attacks by Distance Bounding More Pr. Serge Vaudenay, Head of Security and Cryptography Laboratory (LASEC), EPFL, Switzerland - The most promising countermeasure to relay attacks is the notion of distance bounding protocol, were access control fails when the two participants are too far away. - Challenges and possible solutions - Recent academic achievements - Feasibility of implementations
Two Decades of Security Evaluations on Secure Elements More Jean-Christophe Courrège, Technical Manager, Thales Communications & Security, France; Benoit Feix, Embedded Cryptography Evaluation Team Manager, Hugues Thiebeauld, Security Laboratory Manager, Underwriters Laboratories Security Transactions, France - Evolution of attacks from the oldest to most recent ones in evaluation - Methodology to select and apply attacks in complex products evaluation
Holistic Integrity Checking of ID Cards More Carsten Rust, Senior R &D Project Manager, Morpho Cards, Germany - Update on European research initiative HINT - R&D on hardware integrity checks based on PUFs and Side Channel Analysis - Industry driven application scenario on uncloneable ID cards - Results with a concrete ID card prototype
Advances in Random Number Generation for Data Security More Viktor Fischer, Professor, Florent Bernard, Assistant Professor, Hubert Curien Laboratory, Jean Monnet University of St Etienne, France - Security aspects in random number generation - Weak designs and attacks on random number generators - New security approach in random number generator design - Dedicated embedded statistical tests as a security guard
The Trouble with Random More Mike Borza, Chief Technology Officer, Elliptic Technology, Canada - The practical need for high quality random number generators - What to does the withdrawal of NIST SP 800-90 mean, and what to do about it? - Hardware and software implementations and their tradeoffs
A Dual PUF/TRNG Design Based on Transient Effect Ring Oscillators and Insensitive to Locking Phenomenon More Abdelkarim Cherkaoui, Post Doctoral Researcher, Hubert Curien Laboratory, University of Saint Etienne, France - IRO (Inverter Ring Oscillators), often used to build PUF designs, are sensitive to locking phenomeno. It constitutes a security thread - TERO (Transient Effect Ring Oscillators) are insensitive to locking phenomenon - Presentation of the new dual PUF/TRNG based on TERO, a characterization and a security evaluation of the design

Session Chair: Jean-Paul Thomasson, Program Committee Chair, France

The shift from traditional desktop to online applications has raised the security stakes. Password authentication schemes continue to be the prime target of cyber-attacks. This track reviews the state of online identification and authentication technologies, from federated identity services to PKI-based solutions, including FIDO approach and other innovative user-centric authentication systems.


Innovative Building Blocks for Future Identity Management and Cloud Infrastructures More Detlef Hühnlein, CEO, ecsec, Germany - the “SkIDentity” service: electronic identification and strong authentication as a service - “Universal Authentication Service” feature: arbitrary authentication protocols given a simple authentication protocol specification - “Identity Broker” feature: easier integration and identity management by the user using attribute based cryptographic credentials based on hash trees or zero knowledge techniques.
Simply Secure – Delivering Mobile Authentication More Chris Edwards, CTO, Intercede, UK - PKI, FIDO or Federation - Private key protection - Optimising the user experience - Credential Management and Policy
ID Wallet – A User Centric Concept for Identification More Alexander Summerer, Technology Consultant, Giesecke & Devrient, Germany - How the derived credential technology can be used for mobile authentication - The concept of derived credentials from a user perspective - The opportunities of derived IDs for different application fields - Overview of the different derived credential standards
Authentication 2.0 or the FIDO "War on Passwords" More Michael Poitner, Global Segment Marketing Director, NXP Semiconductors, USA - Authentication past and today - Two Factor authentication - Machine to machine authentication - FIDO Authentication scheme
User-Centric Security for m-Commerce Services More Salman Taherian, Technical Director, Kasra Technologies, UK - Security is important, but can it also be made desirable for the user? - How can we design security to fit consumer behaviour and not vice-versa - How does technology and design play a role in improving user experience - What are the emerging m-commerce services and how can you build one today
How Risk Analysis was applied at Marseille’s City Hall More Jerôme Poggi, Jerôme Poggi, Security Architect, City Hall of Marseille, France - Security is important, but can it also be made desirable for the user? - How can we design security to fit consumer behaviour and not vice-versa - How does technology and design play a role in improving user experience - What are the emerging m-commerce services and how can you build one today

More on this theme at other World Smart Week conferences:
World e-ID Conference Plenary Opening and Strong Authentication tracks on Tuesday Sept. 23.

1.00pm – 2.00pm: Lunch – Networking – FIDO Alliance demos – 2.00pm – 4.00pm: Workshop

Fido Alliance WORKSHOP

Spend half-a-day with the FIDO Alliance and find out what the future of online authentication is going to look like.

This workshop will give you a good overview of the FIDO Alliance, what it has been working on, and the benefits of the FIDO approach. You will hear what progress the Alliance has made in a year-and-a-half. The FIDO standards will be explained and illustrated by concrete case studies. You will also have an opportunity to see and to discuss demonstrations of FIDO Ready products from Alliance member companies during the breaks.

Most important, there will be lots of opportunity to ask questions and talk to the people who know!

Agenda

Demos at lunch time

AGNITiO – Nok Nok Labs – Yubico

The FIDO Alliance Story So Far More

Rajiv Dholakia, VP Products, Nok Nok Labs

• the genesis of the Alliance
• its mission/operations
• evolution over the past year-and-a-half
• FIDO’s impact on the market.

An Overview of the FIDO Specifications — UAF and U2F More

Dr. Rolf Lindemann, Senior Director Products & Technology, Nok Nok Labs

• A passwordless experience thanks to UAF UAF protocol
• Open strong 2nd factor standard with U2F Rolf will explain both, their motivations, and some use cases
• The APIs
• The FIDO client on the Samsung Galaxy S5

Deploying FIDO: Case Studies
Companies TBA

Panel FIDO and the future of Authentication

Panellists include:
• Donal O’Shea, FIDO Alliance
• Rajiv Dholakia, VP Products, Nok Nok Labs
• Dr. Rolf Lindemann, Senior Director Products & Technology, Nok Nok Labs
• Didier Serra, EVP of Global Partnerships, SecureKey
• Mamadou Ba, Digital Identities Market Director, Morpho
• Jamie Cowper, Senior Director, Nok Nok Labs

Demos

Currently a dozen companies have products that have participated in and satisfied the requirements of the FIDO Alliance testing program and have been authorized to use the FIDO Ready mark. Some of these companies will show off their products during the breaks in the FIDO seminar.

These demos will include:

AGNITiO

Create voice print on a phone. Use it as authenticator to communicate with FIDO client and to FIDO server, to show approving a transaction.

Nok Nok Labs

Nok Nok Labs will be demonstrating the Nok Nok FIDO client and server, running on the Samsung Galaxy S5, plus a Lenovo laptop. This will show fingerprint and PIN-based authentication and transaction verification.

Yubico

Demonstrating the YubiKey NEO being a FIDO Ready U2F Authenticator. U2F or Universal Second Factor replaces passwords with PIN and Touch authentication.

There is a limited number of seats, please reserve now.

This link will direct you to the Chip-to-Cloud Security Forum registration platform.
If you have already registered to the Congress, please use select "Place a new order" and the option named "Fido Alliance Workshop”

End of the FORUM