The FIDO (Fast IDentity Online) Alliance, an industry consortium that drives open standards for online security, Tuesday introduced additions to the FIDO 1.0 specifications with new transport protocols for FIDO U2F to support Bluetooth Classic and Low Energy (BLE) and Near Field Communication (NFC) wireless connectivity in two-factor authentication tokens. The existing FIDO specs define the creation of authentication tokens that can be plugged into USB ports.
With the new transport specifications, FIDO U2F is said to be appropriate for mobile and wireless applications, and for devices that do not have a USB port to deliver FIDO authentication. The FIDO Alliance plans to change the nature of authentication by developing specifications that define an open, scalable and interoperable set of mechanisms that supplant reliance on passwords to securely authenticate users of online services.
In addition, the U2F Bluetooth transport specification is designed to create special-purpose, Bluetooth Low Energy U2F devices that require just the press of a button to authenticate to an online service. At the same time, the U2F NFC transport specification allows the creation of portable U2F devices such as credit cards and keyfobs that are simply tapped against the target device to authenticate to an online service. Alternatively, a mobile phone with NFC capability can be programmed to act as an NFC U2F device.
Dustin Ingalls, president of the FIDO Alliance
Within months of publishing the first FIDO standards, the FIDO Alliance continues to see strong demand from the marketplace. Already enjoying robust adoption, FIDO U2F is ready for more implementers to join us in creating a stronger authentication environment.
FIDO Alliance executive director Brett McDowell
The addition of NFC and Bluetooth support in FIDO U2F illustrates our commitment to ensure FIDO standards are flexible, extensible and future-proof by design. With this strategy, FIDO standards will continue to see accelerated industry adoption as we move ever closer to our goal of ubiquitous FIDO authentication that is more secure, private and easy to use.
