A presentation from Orange on the use of FIDO Authentication within Mobile Connect - a collaborative effort from GSMA and leading mobile operators worldwide. Mobile Connect is available to 82 million users and FIDO biometric athentication is being built into the architecture for increased security.

1. FIDO and
Mobile
Connect
Javier Polo Moragon
FIDO Summit
Paris 2017

2. 2 Orange
Simple
Eliminates the
need of retain
multiple user and
passwords
Private
No personal
data shared
without user
consent
The new standard in
digital identity
• Enables users to:
• Authenticate online
• Authorise digital transactions
• Verify their identity
• …via their mobile device, anywhere
Secure
Provides SIM
based multi -
factor
authentication

3. 3 Orange
Mobile Connect offers a range of services for digital transactions
Helping users manage their identity across their digital footprint
Authentication Attributes IdentityAuthorisation
Simple and globally
ubiquitous log-in
Insights about the user,
device or transaction
Assertion of user
identity
User authorisation of SP
requests
Orange enablers: SMS OTP, SIM Applet, etc Orange Check&Go – National ID Program

4. 4 Orange
With Mobile Connect
Select
Select items; click
thru to checkout to checkout
Authenticate -> authorise
payment -> agree to share
name/address with merchant
via a single action
Select items; click
thru to checkout Form filling
Registration
complete
Select
payment type
Authorise
transaction
Username/
password
Without Mobile Connect
Example use case: reducing user friction by minimising steps to fulfil
online commerce transaction

5. 5 Orange
82 million Mobile
Connect users
worldwide
Global standard
supported by the GSMA
and leading mobile
operators globally with a
broader set of ecosystem
players
52 operators
launched in 29
markets
17m monthly
active users

6. 6 Orange
Deployed in 5
Orange affiliates
Coming soon…Available Orange
countries
Spain France Morocco
Jordan* Egypt*
Madagasc
ar
Tunisia Ivory
Coast
DR of the
Congo
Senegal
Cameroon MaliBotswana
Poland
Guinea
Conakry
Spain
France
Morocco
+ 500k customers in Orange Spain portal
+ 226k active user over 3 months
82% My Orange users satisfied
+ 2K SMS-OTP active user weekly
+143% unique users in 3 months
+ 2k registered users for corporate services
85% prefers Mobile connect over SMS OTP
My Orange APP / Portal

7. 7 Orange
Mobile
Connect &
KYC for
eGov
Improve the reach and
increase transaction
success by reducing
the friction (e.g. dropped
logins)
Provides to citizens a
secure and convenient
way to prove who they
are
Reduce the risk of
data breaches as well as
cut governments’ costs
Trial ongoing with French Government

8. 8 Orange

9. 9 Orange
Mobile Connect
leverages FIDO to
expand its set of
Authenticators
Network based
authenticators deployed
by Orange
Device based
authenticators
Both in combination help users transact more
safely and conveniently online
SMS OTP
SIM Applet

10. 10 Orange
Orange is testing FIDO
authentication with
Mobile Conect based on
Nok Nok Labs solution

11. 11 Orange Restricted
FIDO UAF protocol
Mobile phone
With MC App +FIDO SDK
MNO
Smartphone/Tablet/desktop
Service access request Service
Provider
Authentication
request
Identity GW
First mile
Second
mile
SIM applet protocol (CPAS8)
AuthN
server
SIM
apple
t
Mobile Connect High Level Architecture with FIDO
FIDO AuthN Server or Service
FIDO Integrated
as alternative
Authenticator

12. 12 Orange Restricted
• Work in progress with the GSMA and our partners
to define the best strategy to offer biometric
authentication to our customers:
• Generic Smartphone App
Authenticator managed by GSMA vs
dedicated App MNOs
• SDK availability for SPs
• MNO authenticators cohabitation
with device authenticators
• User experience
FIDO and Mobile Connect: next steps

13. 13 Orange
Orange Partner
https://partner.orange.com/orange-mobile-
connect/
GSMA Developer Portal
https://developer.mobileconnect.io
Mobile Connect API and documentation:

14. Thanks