Use of FIDO Authentication Data in 3-D Secure Messages

on YouTube ↗22m

" summary

Describes a concrete EMV 3-D Secure payload: merchants put a JSON up to 3DS requestor otd (20,000 chars) carrying RP ID, a registration attestation blob, device binding info and an authentication assertion blob plus an SPC flag. Flow shows IDV then on-device passkey creation, a registration 3DS message to the issuer, and later an assertion message the issuer can verify against the stored public key. Pilots are running and issuers can ignore the optional field today or consume it for risk or audit evidence.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 1:25EMV 3DS overview
3. 2:41How the 3DS protocol works
4. 6:16FIDO and EMV 3DS integration
5. 7:53Enrollment and authentication
6. 11:09Message formats and structure
7. 13:11Strategic call-outs and future
8. 14:45Q&A session

" related talks

• 25mEMV® 3DS: Enhancing secure, convenient authentication ...Arman Aygen · Authenticate 2022
• 25mKeynote Reshaping Digital Payment AuthenticationDoug Fisher · Authenticate 2022
• 24mWhere FIDO Meets SSIDmitry Barinov · Authenticate 2022
• 14mSecuring Authentication with and within FIDOManish Khedawat · Authenticate 2022
• 02h 22mFIDO 101David Turner, Paul Heim, Christina Hulka · Authenticate 2022
• 24mStreaming AuthenticationNick Steele · Authenticate 2022
• 28mAuthentication Digital Financial ServicesPedro Martinez · Authenticate 2022
• 23mEnhancing FIDO2 Security for Safety-Critical Applications: Best Practices and Consid...Rishita Shaw · Critical Software Summit @ Open Source Summit Japan 2023