FIDO2 OVERVIEW
01
What is FIDO2
FIDO2 is an open authentication standard developed by the FIDO2 Alliance
in collaboration with the World Wide Web Consortium (W3C).
FIDO2 uses public-key cryptography to provide secure and convenient
authentication technology. For every account that uses a FIDO2 security key,
there is a public and private key that enable services to validate the identity
of users and their security key.
Prior to being able to use a FIDO2-enabled security key, users must register
their key with the NHSmail platform.
When users then authenticate, their identity can then be verified with a
simple action, such as scanning a fingerprint or touching the security key.
The NHSmail platform and the user's authenticator conduct a challenge-
response to verify that the user is in possession of the correct private key.
Each registration uses a unique key pair, and the private key never leaves
the user’s security key.
For further information, read this
article.
