CG FIDO Passwordless Authentication System-Security Authentication

Introduction

With the rapid development of the internet today, everyone inevitably owns many accounts, yet account theft incidents are frequently heard of. Faced with increasingly sophisticated and pervasive hackers, the security of account passwords is a crucial issue that governments, enterprises, and citizens must face. Therefore, the FIDO (Fast Identity Online) Alliance, established in 2012, is dedicated to creating an open standard that utilizes public-private key encryption architecture and biometrics to achieve secure and fast login.

Why is FIDO more secure? The key lies in the fact that the server side no longer stores passwords, meaning there are no passwords to steal. Furthermore, it adopts a public-private key architecture where the private key is kept by the user, and only the public key is stored on the system side. This also means that under the FIDO standard, we are moving toward a truly passwordless approach.

Features

Changing Information Technology's CG FIDO Passwordless Authentication System includes both UAF and FIDO2, both of which have obtained FIDO Alliance certification[cite: 1].

UAF

Log in through mobile device fingerprint recognition, facial recognition, Personal Identification Number (PIN), pattern verification, and other methods, getting rid of the traditional process of entering lengthy passwords. By installing and integrating the Changing CG FIDO App/SDK, you can log in to the system quickly and securely.

FIDO2

It is composed of the World Wide Web Consortium's (W3C) Web Authentication specifications (WebAuthn) and FIDO's Client-to-Authenticator Protocols (CTAP). Its feature is support for major browsers, including Google Chrome, Mozilla Firefox, Microsoft Edge, and Apple Safari, allowing users to use device-native biometrics for identity verification when logging into systems through the aforementioned browsers, achieving passwordless authentication.