Deployment Snapshots from Japan

All Rights Reserved | FIDO Alliance | Copyright 2019
FIDO Authentication Seminar – Seoul, South Korea
Deployment Snapshots from Japan
September 23rd, 2019
Koichi Moriyama
Senior Director of Product Innovation, Product Department, NTT DOCOMO, INC.
An Executive Council Member, a Board of Directors, and Chair of FIDO Japan WG, FIDO Alliance

• NTT DOCOMO’s FIDO Deployment, “Your Security, More Simple.”
• FIDO Japan WG: Missions, Activities, and Recent Major Activities
• Recent Notable FIDO Deployments in Japan
• Yahoo! JAPAN, ISR, Fujitsu, and More
• FIDO Japan WG: Vision Towards the Next
Agenda

FIDO Alliance Seminar in Seoul
Creating a World without Passwords
“Your Security, More Simple.”
September 23, 2019
Koichi Moriyama
Senior Director of Product Innovation, Product Dept., NTT DOCOMO, INC.
An Executive Council Member, a Board of Directors, and Chair of FIDO Japan WG, FIDOAlliance
FIDO Seminar in Seoul @ 9/23/2019 © 2019 NTT DOCOMO, INC. All Rights Reserved.

Iris Fingerprints Login Unlock
Carrier Billing
Payment
Passwords-less AuthN
using Biometrics
d ACCOUNT and FIDO Authentication
• NTT DOCOMO used to provide multiple passwords such as 4-digit pin, and started
to offer OpenID based d ACCOUNT, with which DOCOMO offers login and payment
service experience not only for DOCOMO’s but also its partner services.
• In order to improve customer experience, we started an initiative, “Your Security,
More Simple.” We met FIDO Alliance which drives Simpler, Stronger Authentication,
decided to utilize FIDO standards quickly, and commercially deployed in May, 2015.
4© 2019 NTT DOCOMO, INC. All Rights Reserved.FIDO Seminar in Seoul @ 9/23/2019
生体認証で注文・決済した初めてのピザ
72015年5月26日ドコモの生体認証について
The former president Mr. Kato demonstrated to order a pizza by NTT DOCOMO service d delivery™ with the world first Iris
scanner equipped device Arrows NX at the NTT DOCOMO New Products and Services Announcement on 5/13/2015.
The ordered pizza was illustrated at the NTT
DOCOMO Press Announcement Event with
FIDO Alliance on 5/26/2015

5
Was he, ordered a pizza,
really Mr. Kato?
© 2019 NTT DOCOMO, INC. All Rights Reserved.FIDO Seminar in Seoul @ 9/23/2019

Yes, he was Mr. Kato indeed.
Was he, ordered a pizza,
really Mr. Kato?
d ACCOUNT Authentication and Identity Proofing
• NTT DOCOMO used to own its infrastructure which allows us to proof his/her
identity if he/she really is himself/herself as a telecom (mobile network) operator,
and it helps for initial setting and account recovery for the FIDO adaptation at NTT
DOCOMO.
Three methods for identity proofing at NTT DOCOMO:
– Face-to-face identity proofing using identification cards at shops
– Non-F2F identity proofing using transfer unnecessarily mail or specified item
transmission type person-only reception mail
– NTT DOCOMO’s Network 4-digit pin, which is valid only when he/she has a SIM,
a valid contract with the sim, and 4-digit pin online within the carrier network
6© 2019 NTT DOCOMO, INC. All Rights Reserved.FIDO Seminar in Seoul @ 9/23/2019

The FIDO Server Hosts Your Authentication!
7
…
DOCOMO Branded
Services
Carrier Billing
Partner Services
Billing
System ServersSystem Server
Android
iOS
SH-01H SO-03H SO-01H SO-02HF-02HSC-05G SH-04HF-04H SO-04HSC-02HF-04G SC-04G F-01HSH-03G
2015 Summer 2015-16Winter/Spring 2016 Summer
SO-02JF-01J SH-02J DM-01JSO-01J L-01J d-01JSC-03JSO-04J SC-02JSO-03J SH-03J SC-04J
2016-17Winter/Spring 2017 Summer
SH-01KSC-01K F-01K DM-01K
2017-18Winter/Spring
L-01KF-02K d-01K L-02K Z-01K
2017-18Winter/Spring 2018 Summer
2018-19Winter/Spring
SO-02KSO-01K SO-03K SO-04K SO-05K SC-02K‡ SC-03K‡ HW-01K SC-03K
LG-03K F-04K d-02K SO-01L SC-01L‡ SC-02L SH-01L † †
† The server works for both UAF 1.0 and UAF 1.1.
・・・
© 2019 NTT DOCOMO, INC. All Rights Reserved.FIDO Seminar in Seoul @ 9/23/2019

Creating a World without Passwords
“The new of today, the norm of tomorrow.”
• Through collaboration with the FIDO Alliance, NTT DOCOMO
will further deliver “Your Security, More Simple.”
FIDO Seminar in Seoul @ 9/23/2019 8© 2019 NTT DOCOMO, INC. All Rights Reserved.
Security
Cost Coverage
Usability
UX
 NTT DOCOMO has a strong intention to utilize FIDO2 and
WebAuthn in the future to deal with cost, usability, and
coverage perspectives.
 Also, NTT DOCOMO is considering how we may create a real
world without passwords – please stay tuned!
• NTT DOCOMO became a Board member in 2015, and has continuously been
contributing and focusing on FIDO adoption through taking a leadership at Consumer
Deployment WG (a.k.a. Deployment at Scale WG), FIDO Japan WG, and others.

FIDO Authentication Seminar – Seoul, South Korea
FIDO JAPAN WG AND
ADOPTIONS IN JAPAN
September 23, 2019
KOICHI MORIYAMA
Senior Director of Product Innovation, Product Dept., NTT DOCOMO, INC.
An Executive Council Member, a Board of Directors, a Board of Directors,
and Chair of FIDO Japan WG, FIDO Alliance

FIDO Japan WG of Global Members
10 when announced, 11 when launched, and now 40 members as of September 23, 2019
Capy, Inc. eDoktor Co, Ltd. Passlogy Co., Ltd PixelPin Quado, Inc. SECIOSS, Inc. Singular Key, Inc. TRUSTDOCK Inc.

FIDO Japan WG Organizational Structure 2019
APAC Market
Development Manager
Atsuhiro Tsuchiya
(60% for Japan)
Chair Koichi Moriyama (NTT DOCOMO)
Vice Chairs: Shinya Sugawara (Yahoo Japan)
Naohisa Ichihara (LINE)
Yukiko Tomiyama (NTT DOCOMO)
FIDO Japan WG Leadership
Chair/Vice Chairs/Leads
Tech Lead: Hidehito Gomi (Yahoo Japan)
Lecture Lead: Masato Ageta (Fujitsu)
Meet-up Lead: Junichi Ohtomo (Yubico)
Special Leads
Deployment Technology Study SWG
(DTSG)
Lead: Max Hata (NTT DOCOMO)
Wataru Ogami (Yahoo Japan)
Strategy Planning for More
Deployments SWG (SP4MDG)
Lead: Mitsuru Miyazono (NNL)
Shinji Kawasaki (ISR)

FIDO Deployments in Japan
† Companies which deliver FIDO Certified products or solutions utilizing FIDO Certified products, or service providers which deploy such products, solutions, or their own FIDO Certified products.

W3C/KEIO & FJWG Local Collaborations 2019
W3C TPAC 2019 in FukuokaWebAuthn/FIDO2 Promotion at the Interop Tokyo 2019
WebAuthn/FIDO2 Deployment in Japan #1
Input ID
and Click
to Next
October 23, 2018
• The World First WebAuthn/FIDO2 Commercial Deployment as
a Service Provider
• Utilizing WebAuthn/FIDO2 for Yahoo! JAPAN ID login in on
Android 7+ devices (FIDO2 Certified as a platform)
• Achieved more than 30% faster login time than before
• Trying to improve UX e.g. users need to input ID
May 24, 2019
G Suite
Salesforce
Office 365
Password-
less AuthN
Password-less SSO Service
G Suite
Salesforce
Office 365
• Utilizing WebAuthn with Security Keys or Windows Hello
• Successfully demonstrated how FIDO2 based password-less
works better than U2F
• Spending many efforts to make sure selected FIDO Certified
Security Keys work as expected
• Providing a solution with WebAuthn/FIDO2 in addition to UAF
• Offering their Palm Vein based FIDO2 Certified authenticators
• Made some extra efforts to work with OS platform partners to
integrate new type of biometric based authenticator
July 3, 2019
Internet
The world first Palm Vine based FIDO2
authenticator
29
WebAuthn Demos During the TPAC Week
W3C TPAC 2019 Fukuoka, JAPAN © 2019 NTT DOCOMO, INC. All Rights
Reserved.
This presentation Please contact Mr. A Tsuchiya tsuchiya@fidoalliance.org or +81-80-9703-3210, the FIDO Alliance staff
in Japan, Wednesday afternoon-Friday if you cannot find any representatives at the demo tables.Demos for all
Demos at WebAuthn WG

FIDO2 Certified Products from Japan
September 27th, 2018 December 7th, 2018
March 11th, 2019 May 20th, 2019 June 6th, 2019
July 3rd, 2019July 1st, 2019 July 4th, 2019
Almost all FIDO2 Certified products from Japan are server, except Fujitsu’s Palm Vein authenticator. NRI Secure is not a FIDO Alliance member.

Notable Deployments in 2017-2018
Sep 2017 Feb 2018 Oct 2018 Nov 2018 Dec 2018

FIDO2 Deployment in Japan #1
Input ID
and Click
to Next
October 23, 2018
• The World First WebAuthn/FIDO2 Commercial Deployment as a
Service Provider
• Utilizing WebAuthn/FIDO2 for Yahoo! JAPAN ID login in on
Android 7+ devices (FIDO2 Certified as a platform)
• Achieved more than 30% faster login time than before
• Trying to improve UX e.g. users need to input ID

Copyright © 2019 Yahoo Japan Corporation. All Right Reserved.
2018年12月7日
ID Solution Department
Service Management Group
Yahoo Japan Corporation
Yahoo! JAPAN Initiatives to Realize
"Passwordless World"
September 23, 2019

Copyright © 2019 Yahoo Japan Corporation. All Right Reserved. 18
FIDO2 Deployment in Yahoo Japan
2018
September
27
The first case in Japan
Certified FIDO2 Server
2018
October
23
The world first case
as a service provider launched
FIDO2 Commercial Services

Solid Foundation of Yahoo! JAPAN ID
40M 44M
49M
Monthly Login User ID
2017
June
2018
June
2019
June
10%up
source: Yahoo Japan FY2019 Q1 Financial Results
Yahoo! JAPAN
ｚ
Media EC
Yahoo! JAPAN ID
Outside of
Yahoo! JAPAN
Partners
200+
Yahoo! ID
Connect
(OpenID Connect)
100+ services

Yahoo! JAPAN
Features of Passwordless Login
Passwordless
(OTP Authentication with SMS)
New Users
(Create new IDs)
Passwordless
Registration
Case1
• Single Factor
• Only OTP/SMS
Usability Issues
 Waiting time for
receiving SMS
 OTP input required
Resolved
by FIDO2
Existing Users
(Use password)
Case2
Password
Invalidation

Yahoo! JAPAN Login Flow：FIDO2
Input ID
and Click
to Next
Simpler and Stronger Authentication!!

Aiming to Expand Passwordless Login
Marketing
Passwordless Users
Total of Login
Yahoo JAPAN ID Users*
49M
*As is June, 2019
Enabling more devices
FIDO Authentication
accelerates
Passwordless Login
in Yahoo! JAPAN ID

Notable Deployments in H1 2019
March, 2019February, 2019
TEPCO Power Grid, Incorporated
(TEPCO Power Grid)
May, 2019
An Enterprise solutionAn ID Federation Service An ID Federation Service

FIDO2/WebAuthn Deployment in Japan #2
May 24, 2019
G Suite
Salesforce
Office 365
Password-
less AuthN
Password-less SSO Service
G Suite
Salesforce
Office 365
• Utilizing WebAuthn with Security Keys or Windows Hello
• Successfully demonstrated how FIDO2 based password-less
works better than U2F
• Spending many efforts to make sure selected FIDO Certified
Security Keys work as expected

FIDO2/WebAuthn Deployment in Japan #3
• Providing a solution with WebAuthn/FIDO2 in addition to UAF
• Offering their Palm Vein based FIDO2 Certified authenticators
• Made some extra efforts to work with OS platform partners to
integrate new type of biometric based authenticator
July 3, 2019
Internet
The world first Palm Vine based FIDO2
authenticator

FIDO Adoption in Japan – H1 2019 Highlights
Fujitsu provided a solution that
brings efficiency for utility
management at TEPCO Power
Grid utilizing FIDO (March 4)
NTT Communications started to offer biometrics login utilizing
Smartphone and FIDO for their SSO / ID management service
(February 13)
Softgiken FIDO2 Certified
(March 11)
Quado FIDO2 and Universal
Server Certified (May 30)
ISR started cloud based SSO
service enabling password-less
login utilizing FIDO2 (May 24)
ISR FIDO2 Certified (June 6)
NEC FIDO2 Certified
(July 1)
Fujitsu “PalmSecure” the world
first Palm Vein based authenticator
FIDO2 Certified (July 3)
NRI Secure FIDO2 and
Universal Server
Certified (July 4)

A Recent Notable Deployment
July 22, 2019
For login and wiring to other accounts
without an one-time password token

LINE Pay Now Uses FIDO Authentication
11am Today - September 23, 2019
Just announced to deploy FIDO for
the LINE Pay native app as first step…
https://jp.techcrunch.com/2019/09/18/merpay-conference-2019_sep-4/

• FIDO UAF deployments continue – mainly for mobile now in financial and
enterprise domains.
• FIDO UAF is treated as a proven turnkey solution that may support both Android
and iPhone/iPad
• FIDO2 deployments get accelerated!
• Mainly by Internet service providers and SSO service providers at this moment
• Now available in both WebAuthn basis and native app basis implementations
• WebAuthn on Android, WebAuthn on Windows Hello and/or Security Keys, and more
• We are seeing the momentum of FIDO2 adoption in varieties of business domains
such as medical market
• In addition to adoption by FIDO member companies’ efforts, many non-FIDO
members’ deployments have been appearing recently.
Trend of FIDO Adoption in Japan

Vision Towards the Next: FIDO Japan WG
⇒ Not only for people in Japan nationwide,
offering FIDO-enabled services of simpler,
stronger authentication for visitors to Japan
by utilizing the global standards – FIDO
(Such visitors won’t need to leave passwords in Japan…)
As one of the regional WGs, FIDO Japan WG will continue to contribute from
Japan to the global through actual deployments of the FIDO standards
By utilizing FIDO platform support, will accelerate FIDO adoption
2014
2015
2016
2017
2018
2019
2020
Japanese Hospitality
“Omotenashi”
Authentications
30

Deployment Snapshots from Japan

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Deployment Snapshots from Japan

Similaire à Deployment Snapshots from Japan (20)

Plus de FIDO Alliance

Plus de FIDO Alliance (20)

Dernier

Dernier (18)

Deployment Snapshots from Japan