Connecting the world and beyond

Strong Authentication Resources for DFS

A passwordless user authentication reduces risks associated with the use of vulnerable "shared secrets" like passwords and one-time passwords that can be phished or stolen. Deploying stronger passwordless authentication raises the bar for user privacy and security and improves the user experience by eliminating the inconvenience of having to remember passwords and laboriously typing them at every login.

BLOCKCHAIN SECURE AUTHENTICATION (BSA)

Blockchain Secure Authentication (BSA) leverages on the robust and secure foundation of blockchain technology. This approach integrates a passwordless system with multifactor authentication, offering a seamless blend of security and user covenience.

BSA's development is based on the Zero Trust Framework, prioritizing security, privacy, and trust from the ground up. This approach aligns with the contemporary emphasis on data protection and privacy, ensuring that BSA is not just a tool for authentication but comprehensive for safeguarding digital identities.

The ITU, in collaboration with FNSV, conducted a Blockchain Secure Authentication Application Challenge, which was concluded in October 2024.

Fast IDentity Online (FIDO)

Recommendation ITU-T X.1277 describes Fast Identity Online (FIDO) Universal Authentication Framework (UAF) that describes secure authentication using cryptography and a simple user login experience with biometrics such as fingerprint or face ID.

Under the Financial Inclusion Global Initiative (FIGI) tbe ITU has compiled a compendium of resources for developer focused on FIDO UAF to help developers adopt use of strong passwordless authentication for user login and transaction confirmation, especially for digital financial services.

The FIDO Developer Resources are available to developers and include:

Step by step guidelines for Android and iOS developer
A demo application is available on the Google Play store.

The ITU would like to thank Acceppto for contributing this work in the Security Infrastructure and Trust Working group under FIGI