Secure Authentication without the Need for Passwords
summary
Claims that behavioral biometrics using keystroke timing only can remove passwords and scale as a frictionless second factor, backed by numbers — 665 million breached records, 35–40% of Fortune 500 adopting MFA, and a cited 66% CAGR in card fraud. Describes an open OATH reference architecture, OTP/TOTP/HOTP algorithms, provisioning and a portable symmetric key container, plus a certification program and 60–70 products on the market. Demonstrations are software-based, compare timing cadences to a stored library, and report deployable results and revocable attributes.
AI-written summary · about
chapters (22)
- 0:00Start
- 0:53Why the need for Strong Authentication?
- 11:04Traditional Authentication
- 11:30OATH History
- 13:09OATH Reference Architecture: Establishing 'common ground
- 13:34Standardized Authentication Algorithms
- 13:56OATH Roadmap
- 14:18Token Innovation and Choice
- 14:33Certification Program
- 15:38OATH Authentication Framework 2.0
- 16:01OATH and FIDO
- 16:20Credential Provisioning
- 17:45OATH Timeline
- 17:59Risk Based Authentication Architecture
- 18:40Authentication Sharing - Centralized Token Service model
- 19:00Authentication Sharing - Distributed Validation Model
- 19:15Authentication Sharing - Credential Wallet
- 19:28Identity Federation & OATH
- 20:59The Behavioral Advantage Key Attributes
- 25:23Summary
- 26:46Open Source Implementation
- 26:59Questions & Answers
related talks
19mAdvanced Authentication Framework
30mGoing Beyond Passwords: The Future of User Authentication
32mStop Counting Factors... Start Describing Authentication Events
28mAuthentication Digital Financial Services
24mStreaming Authentication
47mThe Psychology of Multi-Factor Authentication
23mPasswordless Authentication in the Regulatory MFA Landscape
20mThe End of User Authentication & the Coming Auto Authentication by the Server