1. 11th September 2008 Stockholm Sweden Simon Josefsson Head of R&D simon@yubico.com http://www.yubico.com/

2. Company started in May 2007

3. 9 people in Stockholm and California

4. Invention: USB-based one-time-password generator

5. Product History: Version 0, Version 1,...

6. RFID card with buttons, card reader and proprietary device drivers

7. USB key with pin entry

8. USB key with one button

9. Ultra-Thin Touch button

10. yubico Market positioning yubico Security Overall simplicity and cost-efficiency Software certificates Digital keyboards USB- /smartcards Username / passwords SMS autentication Authenication tokens

11. How does the Yubikey work?

12. 128-bit AES key

13. Unique ID Time variant pass code tndrvbtecccunbhkddvclbckjbidjbbftcebjkkhcfle tndrvbtecccunvtkkuvblbbbkbcerefuvuckbdhhucid tndrvbtecccunclhhvkthctdnclgktdktvnttfcgikic tndrvbtecccuhjvgrhdvbjlglicchdgvjniglujuvdjl Simulates an USB keyboard

14. Two-factor authentication

16. Wallet size

17. No display or batteries

18. No mechanical parts

19. Web 2.0 Authentication Low Cost Low manufacturing cost Low shipping cost Unlimited lifetime Free SDK High Security State of the art Success factors for the mass market Overall Simplicity All computers One click login No software Portable Easy integration

20. How can I integrate the YubiKey?

21. All open source....NET C# C++ Java PHP Perl Python Ruby

22. What is......?

23. Decentralized web-based authentication system

24. What does that mean?

25. You can reduce the number of username and passwords you need to remember

27. You don't need to maintain a username and password database for your web site aka: out-source the authentication service to someone else!

34. And this is new?

35. Higgins Cardspace SAML X.509 / eID

36. Demo!

37. Questions? Answers? Copyright © 2007, 2008 Simon Josefsson Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. Credits: Some screenshots from Simon Willison

38. How to use your own webpage as an OpenID URL authenticated using YubiKey Add http://openid.yubico.com/user/?id=ljitnbjbcujvh to the HTML HEAD section of your webpage. Replace ljitnjbcujvh with the identity string of your YubiKey, i.e., the first 12 characters printed by the key when you touch the button