Making authentication your competitive advantage under GDPR and PSD2
summary
Claims a working system that uses secure multi-party computation plus device cryptography to run biometric matching on encrypted templates so the cloud never learns raw biometrics. Shows PSD2 nuance: local FaceID counts as possession not inherence, so the build combines device keys (possession) and encrypted biometric matching (inherence) to meet two independent factors. Stores templates only encrypted, releases a private key to the user after a successful match, enables multi-device use and account recovery while reducing GDPR exposure.
AI-written summary · about
chapters (7)
- 0:00Introduction and agenda
- 1:47Authentication friction and costs
- 6:03PSD2 requirements for authentication
- 9:37GDPR and biometric data protection
- 12:09Secure multi-party computation explained
- 16:20Keyless two-factor authentication solution
- 19:49Competitive advantages summary
related talks
22mComplementing Passkeys with Strong Identity Assurance for High-Risk Actions and Account Recovery
23mPasswordless Authentication in the Regulatory MFA Landscape
27mBringing FIDO passwordless innovation into regulated financial industry
47mFace/Off: The Battle to Authenticate with Biometrics
37mBiometrics & Privacy: Time to Faceoff or is that FaceApp?
22mGuarding the Gate: Strategies for High Security with Passkeys
25mThe Case Against Passwords: Biometric Authentication for SCA and the Pathway Forward
27mSecure Authentication without the Need for Passwords