Bringing FIDO passwordless innovation into regulated financial industry
summary
Badge claims a 20‑patent method that derives ephemeral keys from biometrics, PINs or device signals so no biometrics, private keys, or hashed credentials are stored; Badge asserts compliance with PSD2, GDPR and Bippa and demonstrates X.509 certs-on‑the‑fly at Thales and Cisco integrations. Guidance includes requiring attestation and key provenance, publishing authenticator data to FIDO MDS, planning account‑recovery that preserves phishing resistance, auditing data‑jurisdiction policy, and a call‑center deployment using cert+face+PIN with local recovery workflows.
AI-written summary · about
chapters (10)
- 0:00Introduction and speakers
- 1:48Rising passwordless security challenges
- 6:20FIDO certification and policy details
- 9:08Avoiding passwordless pitfalls
- 11:55Authentication resilience guidance
- 15:00Architectural standards beyond AD
- 18:14Solving legacy app authentication
- 20:00Innovations in passwordless recovery
- 23:52Cross-platform authentication demo
- 24:17Q&A session
