10 Nov

3 Min read

Nok Nok’s FedRAMP High Journey: Next Step in Federal Cybersecurity

November 10, 2023 Nok Nok News 0 comments

In the world of cybersecurity, the federal government sets some of the most stringent requirements for its suppliers. It’s a landscape where only the best can thrive, and Nok Nok, a pioneer in Fast IDentity Online (FIDO) authentication solutions, has emerged as an important supplier. The company recently achieved the coveted Federal Risk and Authorization Management Program (FedRAMP) High authorization through its partnership with UberEther’s IAM Advantage. This achievement follows its DoD Impact Level 5 (IL5) achieved in 2022 and marks a significant milestone in delivering top-notch cybersecurity to federal agencies, partners, and citizens.

Here are the key takeaways from this latest achievement:

1. Federal Government’s Uncompromising Cybersecurity Standards

The federal government has long been known for its uncompromising cybersecurity standards. In response to the 2021 White House Cybersecurity Executive Order and the subsequent call from US Government CISO Jen Easterly for advanced Multi-Factor Authentication (MFA) based on FIDO standards, the demand for cutting-edge cybersecurity capabilities has never been higher. The government is leading the way in adopting the best of breed cybersecurity measures, making it crucial for suppliers to meet these advanced cybersecurity requirements.

2. Nok Nok’s Unique Position: FIDO and More

Nok Nok’s unique position as one of the original creators of FIDO standards sets it apart. The partnership with UberEther has enabled Nok Nok to provide federal agencies with phishing-resistant MFA that not only meets DoD Impact Level 5 (IL5) and FedRAMP High certifications but also complies with the Federal Information Processing Standards (FIPS) and National Institute of Standards and Technology (NIST) standards. This combination of expertise and collaboration empowers federal agencies to meet the highest levels of security and regulatory requirements seamlessly.

3. Streamlining Phishing-Resistant Authentication

Nok Nok’s MFA solution offers an effortless and convenient alternative to traditional Personal Identity Verification (PIV) and Common Access Card (CAC) methods. Leveraging the public key cryptography capabilities of modern endpoint devices such as smartphones and PCs as well as security keys, the solution eliminates the need for additional drivers, middleware, or browser plugins. This approach provides a secure and user-friendly way for employees, contractors, and citizens to access information, all while reducing the vulnerabilities and costs associated with password management.

In Conclusion:

Nok Nok and its partnership with UberEther are at the forefront of delivering advanced cybersecurity solutions to the federal government, setting the gold standard for phishing-resistant MFA. With FedRAMP High authorization, FIPS and NIST compliance, and adherence to FIDO standards, Nok Nok and UberEther are ensuring the highest level of security for federal agency employees, contractors, and citizens. As the digital era continues to evolve, Nok Nok is committed to transcending traditional boundaries and meeting the dynamic cybersecurity needs of our modern society.

11 Aug

3 Min read

Nok Nok at the White House

August 11, 2023 Nok Nok News 0 comments

Discussion on how the Federal government can support and benefit from advances in phishing-resistant authentication.

Matt Lourie, Sr. Director of Engineering

Last month, Nok Nok Labs attended the White House Multifactor Authentication (MFA) Modernization Symposium. This event brought together government and industry leaders to discuss how to achieve full adoption of MFA across federal agencies, as called for in the Executive Order on Improving the Nation’s Cybersecurity.

Many government agencies currently rely on Personal Identity Verification (PIV) and Common Access (CAC) cards for employee authentication. However, these smart cards are not always convenient for remote access and everyday use. Connecting to a separate card reader can negatively impact user experience. As Deputy National Security Advisor Anne Neuberger noted, government policies should not create barriers to MFA adoption.

There was broad consensus among participants at the symposium that to fully implement MFA, the government needs to move beyond legacy technologies and embrace advanced standards like passkeys. Passkeys are a modern type of credential that can help government agencies finally achieve comprehensive MFA deployment. With passkeys, users authenticate using a cryptographic key pair stored on their device, rather than typing in a password, providing phishing-resistant security without the usability drawbacks of traditional second factors. Passkeys are already supported across major platforms and browsers and can be bound to a single device or synced across multiple devices, making them a practical path to securing access for employees, contractors, and citizens across all applications and environments.

It is clear that the transition to full MFA adoption will take thoughtful planning and cannot happen overnight. With over a decade of experience in authentication and as a founding member of the FIDO Alliance, Nok Nok Labs is well prepared to assist agencies throughout this process of transitioning to full MFA adoption. We understand the unique needs of the government and have solutions to deliver robust security and usability at scale.

While modernizing authentication is no small task, the White House symposium reiterated that it must be a priority if we are to defend our digital infrastructure in today’s threat environment. Public-private collaboration will be key to overcoming roadblocks on the path ahead. Nok Nok Labs looks forward to continuing to work with our partners across government as we chart the course to a passwordless future and a more secure online experience.

16 Dec

3 Min read

Bipartisan U.S. Commission on Enhancing Cybersecurity & FIDO for Strong Authentication

December 16, 2016 Nok Nok News 0 comments

Recently the U.S. Commission on Enhancing National Cybersecurity released its report detailing some 50 separate recommendations on how the next administration can strengthen cybersecurity across the United States.

At the core of these recommendations were two key items that have been at the heart of what Nok Nok Labs has been doing since its inception. First, the Commission calls on the new Administration to “launch a national public and private initiative to achieve major security and privacy improvements by increasing the use of strong authentication to improve identity management”. In an interview with Charlie Rose after this report was released, the Vice-Chair of the Commission, Samuel Palmisano, ex-CEO of IBM, identifies the fact that the Federal Government can play a massive role in changing how people view their method of authentication. By implementing strong authentication principles across the various government services, within various government agencies, the massive Federal Government has an opportunity to be an engine that will drive change in consumers expectations and behavior.

Additionally, the FIDO Alliance and the FIDO protocol were called out by name as an example of how to overcome identity authentication challenges. FIDO can be used on over a billion devices that are in the hands of users today, right now. Microsoft has incorporated FIDO into their Windows Hello feature and there are millions of people worldwide who are using it to authorize payments, log into accounts, check their private healthcare information and even gain access to buildings and meeting rooms.

______

What sets FIDO apart is usability.

_____

What sets FIDO apart is usability. By giving the users the option to secure their devices using biometrics, FIDO eliminates the need to keep track of several different credentials and makes strong authentication possible at large scale.

Of course, security is a game of details. The FIDO specification is only a protocol and not a deployable technology. It needs to be built. Here at Nok Nok Labs, we have had the pleasure of working with leading organizations to develop and license our technology to secure the entirety of the required architecture — from the trusted execution environment at the silicon layer, to the ecosystem of authenticators capable of plugging into the network, to the operating systems on devices and the servers on the back end.

This expertise can be leveraged by our clients and partners to create a flexible, extensible platform capable of providing a seamless experience to their users and proof against the disruptive innovations coming in the world of biometrics.

While there will be uncertainty with the next Administration, Nok Nok Labs will continue to work to achieve our long-held goals to have FIDO be ubiquitous on devices, in applications, in authenticators, contained within browsers and operating systems and embedded in silicon. No single vendor can move this mountain on their own. We applaud the Commission in its recommendations and look forward to continuing the journey we started several years ago.

Contact Us

Latest Posts

Navigation

Please complete this form to view and download this resource.

Nok Nok’s FedRAMP High Journey: Next Step in Federal Cybersecurity

Nok Nok at the White House

Discussion on how the Federal government can support and benefit from advances in phishing-resistant authentication.

Matt Lourie, Sr. Director of Engineering

Bipartisan U.S. Commission on Enhancing Cybersecurity & FIDO for Strong Authentication

What sets FIDO apart is usability.

Contact Us

Contact and Subscribe

Latest Posts

Navigation

Please complete this form to view and download this resource.

Submit to Download Forms