Bringing FIDO2 to National Identity
summary
Norway’s BankID modernizes its national eID by implementing FIDO2/WebAuthn with an OpenID Connect integration, using a companion BankID app for onboarding and out‑of‑band auth. The system targets 99% of adults and has half a million onboarded via passport scan, face liveness and app-based OTP; pilots run with multiple banks and Android works in production. Requirement: keys in hardware secure enclaves and local attestation (non‑discoverable credentials) to meet PSD2/SCA, but iOS 16 removed attestation support, forcing an app‑switch fallback and delaying full dual‑platform launch.
AI-written summary · about
chapters (14)
- 0:00Introduction and speaker introduction
- 1:28Bank ID overview and history
- 3:55Bank ID usage and market penetration
- 6:28Level of assurance and verification methods
- 8:54Modernizing Bank ID with FIDO2
- 11:43FIDO2 implementation and standards
- 13:13Technical details of FIDO2 solution
- 14:59Roadmap and pilot phases
- 16:47Apple iOS 16 compatibility challenge
- 19:17Next steps and future plans
- 21:03Q&A session part 1
- 22:32Q&A session part 2
- 24:40Q&A session part 3
- 27:53Closing remarks
related talks
50mPasswordless BankID with Passkeys and WebAuthn
23mEnhancing FIDO2 Security for Safety-Critical Applications: Best Practices and Consid...
25mA FIDO web wallet for digital identity
27mBringing FIDO passwordless innovation into regulated financial industry
25mAuthentication and Beyond Using FIDO and Push Notifications
22mSmartphone ID+ - eIDAS compliant, but smart!
40mWebAuthn 201: How to FIDO
59mOAuth2 on a national level - how to secure extremely sensitive apis