Chip-to-Cloud Security Forum

PROGRAM

last update: August 14, 2014

This program will be enriched continuously in the coming weeks. Keep posted and follow us on LinkedIn and Twitter!

DAY 3 - SEPT. 25

DAY 3 – Thursday Sept. 25

+ Expand All Collapse All

9.00am – 1.00pm: Conference | 10.50am – 11.20am: Coffee & Refreshments Break – Networking
1.00pm – 2.00pm: Lunch – Networking– FIDO Alliance Demos

Security Evaluation Techniques

Strong Identification & Authentication
in the Cloud

Session Chair: Eric Vetillard, Sr Principal Product Manager, Oracle, France

Embedded devices security requires the evaluators to be very accurate in the methodology they develop to cover all attack paths and parameters. Find here state-of-the-art techniques, models and appropriate countermeasures –relay attacks, side channel analysis, fault injection, locking phenomenon, etc.– with a highlight on random key generation and physical unclonable functions.


Keynote Defeating Relay Attacks by Distance Bounding More Pr. Serge Vaudenay, Head of Security and Cryptography Laboratory (LASEC), EPFL, Switzerland - The most promising countermeasure to relay attacks is the notion of distance bounding protocol, were access control fails when the two participants are too far away. - Challenges and possible solutions - Recent academic achievements - Feasibility of implementations
Two Decades of Security Evaluations on Secure Elements More Jean-Christophe Courrège, Technical Manager, Thales Communications & Security, France; Benoit Feix, Embedded Cryptography Evaluation Team Manager, Hugues Thiebeauld, Security Laboratory Manager, Underwriters Laboratories Security Transactions, France - Evolution of attacks from the oldest to most recent ones in evaluation - Methodology to select and apply attacks in complex products evaluation
Holistic Integrity Checking of ID Cards More Carsten Rust, Senior R &D Project Manager, Morpho Cards, Germany - Update on European research initiative HINT - R&D on hardware integrity checks based on PUFs and Side Channel Analysis - Industry driven application scenario on uncloneable ID cards - Results with a concrete ID card prototype
Advances in Random Number Generation for Data Security More Viktor Fischer, Professor, Florent Bernard, Assistant Professor, Hubert Curien Laboratory, Jean Monnet University of St Etienne, France - Security aspects in random number generation - Weak designs and attacks on random number generators - New security approach in random number generator design - Dedicated embedded statistical tests as a security guard
The Trouble with Random More Mike Borza, Chief Technology Officer, Elliptic Technology, Canada - The practical need for high quality random number generators - What to does the withdrawal of NIST SP 800-90 mean, and what to do about it? - Hardware and software implementations and their tradeoffs
A Dual PUF/TRNG Design Based on Transient Effect Ring Oscillators and Insensitive to Locking Phenomenon More Abdelkarim Cherkaoui, Post Doctoral Researcher, Hubert Curien Laboratory, University of Saint Etienne, France - IRO (Inverter Ring Oscillators), often used to build PUF designs, are sensitive to locking phenomeno. It constitutes a security thread - TERO (Transient Effect Ring Oscillators) are insensitive to locking phenomenon - Presentation of the new dual PUF/TRNG based on TERO, a characterization and a security evaluation of the design

The shift from traditional desktop to online applications has raised the security stakes. Password authentication schemes continue to be the prime target of cyber-attacks. This track reviews the state of online identification and authentication technologies, from federated identity services to PKI-based solutions, including FIDO approach and other innovative user-centric authentication systems.


Innovative Building Blocks for Future Identity Management and Cloud Infrastructures More Detlef Hühnlein, CEO, ecsec, Germany - the “SkIDentity” service: electronic identification and strong authentication as a service - “Universal Authentication Service” feature: arbitrary authentication protocols given a simple authentication protocol specification - “Identity Broker” feature: easier integration and identity management by the user using attribute based cryptographic credentials based on hash trees or zero knowledge techniques.
Simply Secure – Delivering Mobile Authentication More Chris Edwards, CTO, Intercede, UK - PKI, FIDO or Federation - Private key protection - Optimising the user experience - Credential Management and Policy
ID Wallet – A User Centric Concept for Identification More Alexander Summerer, Technology Consultant, Giesecke & Devrient, Germany - How the derived credential technology can be used for mobile authentication - The concept of derived credentials from a user perspective - The opportunities of derived IDs for different application fields - Overview of the different derived credential standards
Authentication 2.0 or the FIDO "War on Passwords" More Michael Poitner, Global Segment Marketing Director, NXP Semiconductors, USA - Authentication past and today - Two Factor authentication - Machine to machine authentication - FIDO Authentication scheme
User-Centric Security for m-Commerce Services More Salman Taherian, Technical Director, Kasra Technologies, UK - Security is important, but can it also be made desirable for the user? - How can we design security to fit consumer behaviour and not vice-versa - How does technology and design play a role in improving user experience - What are the emerging m-commerce services and how can you build one today

More on this theme at other World Smart Week conferences:
World e-ID Conference Plenary Opening and Strong Authentication tracks on Tuesday Sept. 23.

1.00pm – 2.00pm: Lunch – Networking – FIDO Alliance demos – 2.00pm – 4.00pm: Workshop

Fido Alliance WORKSHOP

Spend half-a-day with the FIDO Alliance and find out what the future of online authentication is going to look like.

This workshop will give you a good overview of the FIDO Alliance, what it has been working on, and the benefits of the FIDO approach. You will hear what progress the Alliance has made in a year-and-a-half. The FIDO standards will be explained and illustrated by concrete case studies. You will also have an opportunity to see and to discuss demonstrations of FIDO Ready products from Alliance member companies during the breaks.

Most important, there will be lots of opportunity to ask questions and talk to the people who know!

Agenda

Demos at lunch time

AGNITiO – Nok Nok Labs – Yubico

The FIDO Alliance Story So Far More

Rajiv Dholakia, VP Products, Nok Nok Labs

• the genesis of the Alliance
• its mission/operations
• evolution over the past year-and-a-half
• FIDO’s impact on the market.

An Overview of the FIDO Specifications — UAF and U2F More

Dr. Rolf Lindemann, Senior Director Products & Technology, Nok Nok Labs

• A passwordless experience thanks to UAF UAF protocol
• Open strong 2nd factor standard with U2F Rolf will explain both, their motivations, and some use cases
• The APIs
• The FIDO client on the Samsung Galaxy S5

Deploying FIDO: Case Studies
Companies TBA

Panel FIDO and the future of Authentication

Panellists include:
• Donal O’Shea, FIDO Alliance
• Rajiv Dholakia, VP Products, Nok Nok Labs
• Dr. Rolf Lindemann, Senior Director Products & Technology, Nok Nok Labs
• Didier Serra, EVP of Global Partnerships, SecureKey
• Mamadou Ba, Digital Identities Market Director, Morpho
• Jamie Cowper, Senior Director, Nok Nok Labs

Demos

Currently a dozen companies have products that have participated in and satisfied the requirements of the FIDO Alliance testing program and have been authorized to use the FIDO Ready mark. Some of these companies will show off their products during the breaks in the FIDO seminar.

These demos will include:

AGNITiO

Create voice print on a phone. Use it as authenticator to communicate with FIDO client and to FIDO server, to show approving a transaction.

Nok Nok Labs

Nok Nok Labs will be demonstrating the Nok Nok FIDO client and server, running on the Samsung Galaxy S5, plus a Lenovo laptop. This will show fingerprint and PIN-based authentication and transaction verification.

Yubico

Demonstrating the YubiKey NEO being a FIDO Ready U2F Authenticator. U2F or Universal Second Factor replaces passwords with PIN and Touch authentication.

There is a limited number of seats, please reserve now.

This link will direct you to the Chip-to-Cloud Security Forum registration platform.
If you have already registered to the Congress, please use select "Place a new order" and the option named "Fido Alliance Workshop”

End of the FORUM