4月18日的OneSpan™ BankAuth应用程序分析

Nok Nok BankAuth allows you to validate your Universal Authentication Framework (UAF) installation using Touch ID. UAF is a state-of-art authentication protocol created by the Fast IDentity Online (FIDO) Alliance. It is based on public key cryptography and can be used with virtually any authentication method such as fingerprint biometrics, face biometrics and voice biometrics. The authentication methods, known as authenticators in UAF, replace passwords with more secure and usable login mechanisms. UAF policies enable the server to specify which authenticator(s) it is willing to accept. The UAF client, which is present on the user’s device, allows the user to register with the authenticator(s) matching the policy. Once registered, the user employs the authenticator instead of passwords to log into the app. UAF can also be used to cryptographically confirm transactions using the authenticator.