words - andreae

©PA&A 2018©PA&A 2018

Words

©PA&A 2018©PA&A 2018

✓ Consensus

✓ Skills

✓ Vote

✓ Identity

✓ ImaginationAction

©PA&A 2018

NYC – London – Brussels - Toronto

2018-07-15 Can Do is Coming together - Strictly Confidential 3

’76 – Telecommunications& Computer Sciences

’86 – First Transatlantic Fiber

’98 – EMV ready to Deploy

’03 – EMV & 3DS in Canada

‘08 - Lehman Bankrupt

©PA&A 2018

RV East Coast Charlotte, NYC, London – Atlanta - Virtual


’08 – American the ?

’10 – Lowe’s Treasury & Point of Sales

’11 – Finally while at AMEX

’12 – SME Accenture - Europe and NA

’17 – EMV in USA ✓

©PA&A 2018

2018-07-16 Words 5

©PA&A 2018


Action

✓ law✓ Consensus

✓ Governance

✓ Skills

✓ Vote

✓ Identity

✓ Imagination

✓ Certificates

✓ Claims

©PA&A 2018©PA&A 2018

What

Would You Like to Talk

About

✓ Trust

✓ Collective

✓ Choice

✓ Identify

✓ Imagination

✓ EMV

✓ Renewal 1

✓ Keys &

Certificates

✓ Payments

✓ Claims

✓ Block Chain

✓ Web of Stuff


©PA&A 2018©PA&A 2018


✓ Shareholder✓ Design

✓ Cash Management

✓ Architecture

✓ Coverage✓ Vote

✓ Security✓ Market

✓ Requirements

✓ Capabilities

©PA&A 2018

2018-07-16 Words 8

©PA&A 2018


Words

✓Stake

✓ Skills ✓ Public Keys

✓ Vitals ✓ Vote

✓ Identity ✓ Identifier

✓ Imagination ✓ Attributes

➢Governance

➢Procedures

➢SLA

➢Accounting

➢Administer

©PA&A 2018

2018-07-16 Words 9

©PA&A 2018


Processes

✓ Culture ✓ Consensus

✓ Stake ✓ State

✓ Skills

✓ Certificates

✓ Public Keys

✓ Vitals

✓ Secrets

✓ Vote

✓ Identity

✓ ACTION

✓ Identifier

✓ Imagination

✓ Claims

✓ Attributes

©PA&A 2018

2018-07-16 Words 10

©PA&A 2018


Registration

✓ Culture

✓ Terms & Conditions

✓ Consensus

✓ Stake

✓ Privacy Policy

✓ State

✓ Skills ✓ Certificates✓ Public Keys

✓ Vitals

✓ Secrets

✓ Vote

✓ Identity

✓ Rights

✓ Identifier

✓ Imagination

✓ Attributes

✓ Attributes

Identification

Authentication Proof

©PA&A 2018

2018-07-16 Words 11

©PA&A 2018


Systems

➢Policy

➢Control

➢Network

➢Execution

➢Secure

➢Data

➢Log

✓ Culture ✓ Consensus

✓ Stake ✓ State

✓ Skills ✓ Public Keys

✓ Vitals ✓ Vote

✓ Identity ✓ Identifier

✓ Imagination ✓ Attributes

Prioritization

Methodology

©PA&A 2018

2018-07-16 Words 12

©PA&A 2018


Risk

Cost

Mission &

Convenience

Determination

Objectives

Control

✓ Matching ✓ Public Keys

✓ Vitals ✓ WhereCentral - Distributed

✓ Identify ✓ Identifier

✓ Identification ✓ Attributes

➢ Compliance

➢ Measurement

➢ Audit

➢ Secure

➢ Finance

➢ Resources

➢ Assets

Behavior History

Biometrics

FARFRRPAD

©PA&A 2018

2018-07-16 Words 13

©PA&A 2018


Governance

Identification

Authentication

Authorization

Access

©PA&A 2018

Appointment


YOUME

AT

©PA&A 2018

Communications


I

YOUWE

©PA&A 2018

Date


I

AT WE

©PA&A 2018

Decision


YESNO

AT

©PA&A 2018

Event


YOUWE

AT

©PA&A 2018

Fun


AT

YOUWE

©PA&A 2018

Gain


I

UPYES

©PA&A 2018

Harmony


I

YOUWE

©PA&A 2018

Interaction


WE

YOUAT

©PA&A 2018

Join


YOU

WEAT

©PA&A 2018

Intersection


ME

ATYOU

©PA&A 2018

Moment


NOYES

AT

©PA&A 2018

Seek


I

YESUP

©PA&A 2018

Team


MEYOU

AT

©PA&A 2018

Visit


YOUI

AT

©PA&A 2018

Work


I

YOU AT

©PA&A 2018©PA&A 2018

Any Questions

Thank you for your patience

[email protected]

www.andreae.com


mailto:[email protected]

©PA&A 2018

What Would You Like to Talk About


✓ Consensus

✓ Skills

✓ Vote

✓ Identity

✓ Imagination

➢Policy

➢Control

➢Network

➢Execution

➢Secure

➢Data

➢Log

Mission &

Objectives

➢ Compliance

➢ Measurement

➢ Audit

➢ Secure

➢ Finance

➢ Resources

➢ Assets

➢ Governance

➢ Procedures

➢ SLA

➢ Accounting

➢ Administer

✓ Shareholder

✓ Cash Management

✓ Coverage

✓ Market

✓ Capabilities

✓ law

✓ Governance

✓ Certificates

✓ Claims

Action

©PA&A 2018©PA&A 2018

Any Questions

Thank you for your patience

[email protected]

www.andreae.com



©PA&A 2018

2018-07-15 Can Do is Coming together - Strictly Confidential

With Physical Security FeaturesTo Support Visual Inspection

33

IATA – International Air Transport Associations ICAO – International Civil Aviation Organization

IATA Enterprise Health MemberPayments HomeAuto

Loyalty Gov’tICAO

©PA&A 2018

Signature


No Longer Secure Circa 1991

34

What You Have

What You Know

Are You Able

Infra Red InkHologram Magnetic Stripe

Online

PIN

Available

Balance

Credit

Limit

cvv1/cvc1

&

cvv2/cvc2

What You Have

A Card

What You Know

A Secret

Authentication

Verification

Authorization

©PA&A 2018


ICC Architecture An Integrated Circuit Inside a Card

35

Integrated

Circuit

CPU, I/O, RAM,

Crypto Co-Processor, Security & Sensors

Memory : Flash or E2PROM and ROM

BIOSBasic Input Output System

Operating

System

Global Platform & Java Card API

Antenna

ApplicationExpress Pay, PayPass, PayWave, ZIP

AEIPS, CPA, DPass, MChip, VSDC … Domestic

PSE, PPSE, ADF(s), AID(s), AIP, ATC, AUC, CID,

Cardholder Name, CVM List, PAN, Expiry Date,

IAC(s), LCOL, PAN, UCOL Track 2 Equivalent Data…

Profile

©PA&A 2018

©2018 362018-07-15 Can Do is Coming together - Strictly Confidential

The Card was a Token

A Laminated Sandwich of PVC

Back

Inlay

Front

Clear

Laminate

Clear Laminate

Magnetic Stripe

©PA&A 2018

Cando Inside

©2018 37Can Do is Coming together - Strictly Confidential2018-07-15

Integrated Circuit

CPU, I/O, RAM,

Crypto Co-Processor, Security & Sensors


BIOS Basic Input Output System

Operating System Global Platform & Java Card API

Antenna

Payment ApplicationAEIPS, CPA, DPass, MChip, VSDC … Domestic,

Express Pay, PayPass, PayWave, ZIP

PSE, PPSE, ADF(s), AID(s), AIP, ATC, AUC, CID,

Cardholder Name, CVM List, PAN, Expiry Date,

IAC(s), LCOL, PAN, UCOL Track 2 Equivalent Data…

Profile

©PA&A 2018

An Integrated CircuitIn a Companion Card


Multiple Integrated

Integrated Circuits

CPU, TEE, I/O, RAM, Crypto Co-Processor, Security & Sensors


Basic Input Output SystemAntennas

Front and

Rear Display

Time, Location

Sound, Sight

Voice, Touch

Intuition

MTS, NFC, BLE, Hotspot+1 404 680 9640

[email protected]

Andreae.com/about


©PA&A 2018

My: Slug .&. WalletCarries Data, Assists & Identities


Rich and Secure Circuitry

capable of interfacing to an array

of peripherals

CPU, I/O, RAM, Crypto Co-Processor, Security & Sensors


Basic Input Output SystemAntenna

ApplicationExpress Pay, PayPass, PayWave, PIV, eIPAC, PSD2 …

AEIPS, CPA, DPass, MChip, VSDC … Domestic

©PA&A 20182018-07-15 Can Do is Coming together - Strictly Confidential ©2018 40

Basic Input Output System

©PA&A 2018

2018-07-15

Cando Architecture An Intuitive Circuit Inside a Slug

©2018 41Can Do is Coming together - Strictly Confidential

CPU, TEE, SE, I/O, RAM, Crypto Co-Processor, Security & Sensors

Memory : Flash or E2PROM and ROMAEIPS, CPA, DPass,

MChip, VSDC …

Domestic, Express Pay,

PayPass, PayWave,

ZIP, MiFare, CiPurse,

Calypso

EMV, ICAO, FIDO, PIC

eIDAC … Certified

Biometric on-board

matching and verification

NIST AAF=3, IAF=3

EAL3+

NFC, BLE, WiFi, GSMA 5G, NFC, 7816, AM/FM, Short band

☺What Else ☺

©PA&A 2018

A Slug Full


CPU, TEE, SE, I/O, RAMCrypto Co-Processor, Security & Sensors


☺What Else ☺

Cloud

Hotspot

Microsoft Office

Calendar, contacts & email

Directory server extensions

SharePoint &

One Drive

Your Identities

My Relationships

My Skills

My Certificates

My Attributes

My Data

My Secrets

©PA&A 2018

The Marble


Primary

• Pairs to Secondary

• Pairs to Headset

• Pairs of Slug (VPN)

• Genesis Block

EKG

One to One Matching

Will pair to other

Fitness M

Multi-layers of

“What you Are & Have”

Secondary

• Pairs to Primary

• Pairs of Headset

• Pairs to Slug

• First Consensus event

Pulse

Prepared for Exportin

Centralized Schema

Collects and records

Multi-layers of

“What You Have” w/ “What you Are”

©PA&A 2018

The Intuitive Thing


Durable

• It is designed with a 10 year life.

• Extensions to experiences at engagements

Secure

Break it, smash it

interrupt it

Its gone

©PA&A 2018


EMV the Global Standard for Credit & Debit Payments

46

In 1993 The International Payment Brands Decided The Long Term Solution To Fraud Was The “ICC”

We Agreed To Develop A Common Specification To Assure Global Interoperability

We agreed the requirements and published “The Integrated Circuit Card Specifications for Payment Systems”

EMVCo is owned & staffed by Visa, MasterCard, JCB, American Express, UnionPay and Discover

Lost and Stolen Fraud

Cardholder Verification

Revenue Creation

Value Added Services

Counterfeit Protection

Off/On-line Authentication

Offline Authorization

Cost Reduction

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&cad=rja&docid=XeRsQ-iLhaddiM&tbnid=BXHin9xeyOfyVM:&ved=0CAUQjRw&url=http://logotypes.designer.am/srch/search.php?way=detailed&id=14511&r=t&a=v&pg=7&ei=9BkAUta-KKTuyQGWxYHgBA&bvm=bv.50310824,d.cGE&psig=AFQjCNFgJj_NSd0gXLVQiaBqOnaubYj4sQ&ust=1375824728440215

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&docid=PiVn7o97lhBBoM&tbnid=Vc92dzXxnViKEM:&ved=&url=http://www.logotypes101.com/free_vector_logo/25814/Europay_International&ei=0xgAUpLKL-TWigKk7IDABg&bvm=bv.50310824,d.cGE&psig=AFQjCNGKFiW2dt8HizCpZX1IURxYN6J3cA&ust=1375824468212539

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&cad=rja&docid=flkmIE2v9EfgkM&tbnid=7xPxcU7n342OCM:&ved=0CAUQjRw&url=http://www.forbes.com/sites/greatspeculations/2011/04/12/mastercard-fattens-up-at-the-trough-of-international-fees/&ei=aRkAUpn1O6WyygH224DABg&bvm=bv.50310824,d.cGE&psig=AFQjCNF1HYyfMupI7iBcJztz-HqEW-GsYQ&ust=1375824604571239

©PA&A 2018

At Its Core What You Have Is An Integrated

Circuit


The Integrated Circuit is:

• The chip on a card

• The TPM in most personal computers

• The secure enclave in an Iphone

• The secure element inside many devices

• The TEE in most phones

• The HSM on most hosts

The IC employs cryptography

To securely store and execute using:

• Secret Key(s)

Triple DES, AES … Online authentication

• Public / Private Key Pairs(s)

RSA - Quantum Offline authentication

FIDO & NIST 800-63-2 AAL-3

FIDO, W3C, WebAuthN & WebPayments,

Automotive, Home, City … Health

To Assure Your IdentityWhat You Need Is A Secure Element Inside

©PA&A 2018


What You HaveA Secure Element Inside

48

Ticket

Itinerary

Boarding

Pass

Frequent

Flyer

VIP

IATA

Identification

Physical Access

Logical Access

Enterprise

Points

Rewards

Coupons

Discoun

ts

Loyalty

Passport

National ID

Drivers License

Birth Certificate

National Health

Gov’tICAO

Health Insurance

Physician’s Details

Emergency Data:

Blood type

Donor

Health

Fitness

Club

Library

Card

Member

KEY USES

Data Storage, Digital Signature &

Electronic Purse, Certificated, Access

Identification, Authentication, Verifications

Credit

Debit

Stored

Value

Transit Card

Payments

Home

Security

Car Keys

Library Card

Home

Address

Passwords

HomeAuto

PSE – Payment Systems EnvironmentIATA – International Air Transport Associations ICAO – International Civil Aviation Organization


CanDo Designed to do for

you. It learns as you

register. It recovers like

you did. Optimized from

learning. It is your

authenticator.

Credentials

Artifacts

©PA&A 2018


The blob, slug, fob, card - Thing

50






authenticator.

The Thing The object at core to your security. Is in any shape you can afford to build. It

adheres to standards We test to be certified to anything! Others can design whatever they

want as long as they adhere to the standards for the situations they contemplate interacting

with. Collectively working with the goal of global interoperability in all means of desired

communications and engagement.1997 I met Unicate

We almost had a solution

http://www.andreae.com/mywallet/index.htm

http://www.andreae.com/Unicate/index.htm


©PA&A 2018


51

Mobile PaymentsNFC (ISO 14443) – In the Mobile phone

3 Types of

Secure

Elements

« SIM Centric » modelRemovable

Authorises the access to the Telecom Operator Network

Standardised technologies

The MNO is the Secure Element issuer and owner

“Embedded SE” modelUnmovable

Few compatible phones

Proprietary technology

The MNO, is the issuer and owner of the SE

“MicroSD card” modelRemovable

Proprietary technology

The Bank is the issuer and owner of the microSD card

SE

Cardlet

Midlet

NFC

module

SE-Secure Element: secure platform, hosting the application

Cardlet: payment application embedded in the SE

Midlet: GUI-Graphical User Interface for the payment application; installed on the phone

Host Card Emulation (HCE)The Secure Element is in the Cloud

The Application can emulate a Card

Disintermediates the MNO and OEM

©PA&A 2018

Three Factors Define The Chip & The EMV Profile

Offline at Merchant (RSA)

Requires RSA Capable Chip

Online on Issuer Host (TDES“What you have”

Authentication

“What you know”

Verification

Signature

PIN as CVM – Match In Chip

Required if offline authorization is supported

On Host PIN

No CVM

52

Can Do is Coming together - Strictly Confidential2018-07-15

“You have the funds”

Authorization

Online

Issuer Host Authorized

Offline

Uses Issuer Defined Card Risk Management Parameters

Requires Offline Authentication

©PA&A 2018

S>lly!1236 6$nR6&zZ Pas*wor&1236!S*97ally 65$q8@aM A&min

Sally!9876 *8G%h67#aW An&reae9866!Sally 7$nR6&zZ Pan&reae

Sally!1237 6$nR6&zZ Passwor&1237!Sally 75$q8@aM Admin

Sally!9&%6 *8G%h67#aW Andreae9876!Vally 7$nR6&zZ Pan&r$ae


The Key to Secure IdentificationMulti-Factor Authentication

53

User Name, Phone Number

As The Identifier

Layered Security

To Assure Identity

➢Something You Have ✓ The Token Card/Phone

➢Something You Know ✓ The Secret PIN/Password

➢Something You Are ✓A Biometric Physical Behaviors

& Attributes

EMV, PIV, ICAO

eID, FIDO …

©PA&A 2018


The blob, slug, fob, card - Thing

54






authenticator.

The rest of your interaction is about communicating with reliable parties and strangers

In an insecure realm of villainy

It is a wide west in the land of digital make believe.

Authentication is the key to digital security

Verification merged the various factors to match risk

1996

I met Unicate

We almost had

The solution

Smart Card

Solutions Require a

Reader.

andreae.com/mywallet/index.htm

http://www.andreae.com/mywallet/index.htm




©PA&A 2018

2018-07-16 Words 55

©PA&A 2018


The Marble

Heart Rate

Pulse

Oxygen

GPSLife Monitor

SE

South Poll

Matching

EKG

CPU, Mem,

Com, Apps

Power

Two authenticators are required

to register in Recovery. The

Marble is the Soot. Don’t lose it

before we get the next device

turned on.

• Marbles

• Authenticator(s)

• We register Recovery

Identity

One Coin is issued

• Pair to user interface

• Pair Two Marbles

• Pair Marbles to Slug

• Pair w/ Watch

• Pair w/ Car

©PA&A 2018

2018-07-16 Words 56

©PA&A 2018


Business Model

Seed from the top and the bottom (entitlement)

• 0ne Million

• One Billion

Focus on luxury implementations

Define and make sure sufficient players operate as

validation nodes.

Catalog the Standards

Provide the best practice implementation

Administer Certification

©PA&A 2018

2018-07-16 Words 57

©PA&A 2018


Bottom & Top

Basic system

1. Dual interface card PVC

2. 14443 Antenna Inlay

3. RSA Dual Interface ICC

4. Embossed and encoded

The Brick

• Virtual Screen

• 5 ID-1 deep

• Card Recharger slot

• HDR WQHB+ Front display

• E-Ink Back Display

• .5 Tera Byte

• PIN Pad - EPP Certified

• EMV, Payment apps, ICAO, PIV, MAP, Excel, PowerPoint,

Word, eMail, browser … APPs

• 5G-GSM, WiFi, BlueTooth, POTS, GPS Sensors

©PA&A 2018

2018-07-16 Words 59

©PA&A 2018


Base Stations Afford Connections

The Content of the back is

E-Ink allowing an image

to persist without power. These could be alerts posted

when a push message came in

✓ The Front is a Ultra High definition

Screen, with touch, behind the glass

fingerprint, sensors, cameras, mic

array, hotspot, GPS, WiFi, NFC

✓ Intuitive device based data, matching,

authenticator, verification and

everything else

✓ With secure cloud for extensions &

virtualization

This Photo by Unknown Author

is licensed under CC BY-SA

This Photo by Unknown Author is licensed under CC BY-SA

http://commons.wikimedia.org/wiki/File:MY_Eclipse_Superyacht_berthed_at_the_Detached_Mole,_Gibraltar.jpg

https://creativecommons.org/licenses/by-sa/3.0/

http://fr.wikipedia.org/wiki/Fichier:Boldt_Castle_power_house_2.JPG

https://creativecommons.org/licenses/by-sa/3.0/

©PA&A 2018

The Card was a TokenA Laminated Sandwich of PVC

2018-07-15

Can Do is Coming together - Strictly Confidential 60

Back

Metal Foil

Front

Clear Laminate

Clear Laminate

Magnetic Stripe

©PA&A 2018

With Physical Security FeaturesTo Support Visual Inspection

IATA – International Air Transport Associations

61

Can Do is Coming together - Strictly Confidential2018-07-15

ICAO – International Civil Aviation Organization

IATA Enterprise Health MemberPayments HomeAuto

Loyalty Gov’tICAO

words - andreae

Documents