[Huawei Developers] Jack Wu Shenzhen:
User identity authentication has changed with the times

From passwords, dynamic tokens, USB keys, and SMS verification codes,

To biometric data, such as fingerprints and facial recognition.

Optimal authentication must account for a myriad of factors

Including basic security capabilities, convenience, respect for user privacy, and legal compliance

HUAWEI FIDO provides a comprehensive authentication solution

Taking everything into account

What Is HUAWEI FIDO?

HUAWEI Fast Identity Online (FIDO) provides biometric authentication (BioAuthn) and online identity verification (FIDO2) capabilities, empowering developers to provide users with optimally secure, reliable, and convenient password-free identity verification.

Biometric Authentication (BioAuthn)

BioAuthn supports both 3D facial and fingerprint-based authentication, and uses the system integrity check result as a prerequisite. When a user initiates biometric authentication using BioAuthn on an insecure device, BioAuthn will identify that the device is insecure, and abort biometric authentication. BioAuthn also provides a key-based mechanism for verifying the authentication result, ensuring that it is highly-reliable.

Online Identity Verification (FIDO2)

FIDO2 provides developers with Android Java APIs that are fully compliant with the FIDO2 specifications. A mobile phone can be used as a FIDO2 client or a FIDO2 authenticator (otherwise called security key). When a user signs in to your app through another app or browser, they can use the fingerprint recognition hardware as a platform authenticator to complete fingerprint-based sign-in, without entering a password. This innovative solution avoids risks associated with passwords, and other security risks, such as credential stuffing attacks. When signing in to your app, or completing a payment on a PC, the user's mobile phone can serve as a roaming authenticator, which accelerates the identity authentication process.

Service Scenarios

	Secure sign-in verification

Users can sign in to the app via fingerprint or facial recognition, without needing to enter a password.

	Identity theft prevention

Users can complete in-app payments via fingerprint or facial recognition, without needing to enter a payment password, or incorporate multiple layers of security, and complete payments by entering a password and having their fingerprint of face identified.

	FIDO security key authentication

Users can also complete identity authentication using the available FIDO security keys, over specific authentication protocols such as USB, NFC, and Bluetooth Low Energy (BLE).

	Using a Huawei phone as a FIDO2 security key

Huawei phones can serve as FIDO security keys, freeing users from needing to carry an extra FIDO security key for an additional device.

How can I Integrate HUAWEI FIDO?

For guidance during the integration process, please refer to the HUAWEI Developers website, where you will find the integration guide and other resources for reference, or you can contact us through hmscore@huawei.com for further technical assistance.

* HMS Core 4.0 courses produced by HUAWEI Developers are now available on Huawei official channels, including Video Center on HUAWEI Developers and HUAWEI Developer Forum.