Online Authentication Kit complies with multiple device-cloud online identity authentication protocols and provides mobile device capabilities related to passwordless authentication and digital identity protocols. After deploying a server that complies with the protocols, your app can use the corresponding capabilities of mobile devices to implement passwordless authentication and digital identity services.
[h2]Passwordless Authentication
Account and password-based authentication is inconvenient and insecure due to complex and hard-to-remember passwords, as well as vulnerability to phishing attacks. Online Authentication Kit complies with the Fast Identity Online (FIDO), FIDO2, International Internet Finance Authentication Alliance (IIFAA), and SOTER passwordless authentication protocols. It allows apps to implement passwordless authentication and sign-in using facial or fingerprint recognition, replacing traditional passwords with biometric features. This enhances both convenience and security in service scenarios such as passwordless sign-in and payment.
FIDO: FIDO is an international mainstream passwordless authentication standard. Many ecosystem app vendors, including those in banking, securities, and finance, widely use the FIDO passwordless authentication protocol.
IIFAA: Formerly known as IFAA, IIFAA is a collaborative ecosystem alliance dedicated to trusted identity authentication. It was officially established in 2015 by the China Academy of Information and Communications Technology (CAICT), Ant Group, Alibaba, Huawei, ZTE, and Samsung. The alliance aims to advance the development and industry adoption of secure authentication technologies, while leading the formulation of technical specifications. Among these, the IIFAA local passwordless authentication technical specifications are used to support service scenarios such as passwordless sign-in and payment.
In this document, we use "IFAA" to refer to the passwordless authentication module of the HarmonyOS system, and "IIFAA" to refer to the International Internet Finance Authentication Alliance and related technical specifications.
SOTER: SOTER is a biometric authentication platform and standard that enables services to use sensors (such as face sensors and fingerprint sensors) on devices to perform secure and efficient passwordless sign-in and payment. Currently, SOTER has been widely used in service scenarios such as WeChat mini programs and official accounts as well as fingerprint payment.
Passkey: A passkey is an authentication credential based on the FIDO2 standard protocol (see website link disclaimer) for simple and secure sign-in. With a passkey, users can sign in to apps using their fingerprint, their face, or their phone's unlock PIN. Compared with traditional passwords, passkeys offer greater convenience and enhanced security.
[h2]Digital Identity
To address issues such as complex user operations and privacy leakage risks associated with traditional identity verification methods (such as uploading ID photos), Online Authentication Kit provides digital identity capabilities and supports the DID protocol. This allows services to securely store digital identity credentials on a device. Users can then securely and conveniently use these credentials through biometric authentication authorization. This effectively enhances the privacy and security of user identity information while optimizing user experience.
DID is a blockchain-based distributed digital identity protocol that features decentralization and partial disclosure, enabling cross-platform interoperability and mutual recognition of digital identities. Online Authentication Kit provides mobile digital identity capabilities that comply with the DID protocol. By integrating with the DID service deployed on the cloud, it supports comprehensive cross-platform digital identity scenarios.
[h2]Supported Devices
| Capability | Supported Device |
|---|---|
| FIDO passwordless authentication, IFAA passwordless authentication, and SOTER passwordless authentication | Phones (5.0.0(12)), Tablets (5.0.0(12)), and PCs/2-in-1 devices (5.0.1(13)) |
| Passkey | Phones (6.0.0(20)), tablets (6.0.0(20)), and PCs/2-in-1 devices (6.0.0(20)) |
| Digital identity | Phones (26.0.0) and tablets (26.0.0) |
[h2]Restrictions on Capability Usage
The FIDO, IFAA, SOTER, passkey, and digital identity capabilities provided by Online Authentication Kit have the following restrictions:
You need to deploy a server that complies with the corresponding protocol for your app.
To use the fingerprint- or 3D face–based passwordless authentication capability, ensure that mobile devices support corresponding biometric features. For details about how to check whether a mobile device supports biometric features, please refer to User Authentication Kit (the device must support the ATL4 authentication trust level).
Mobile devices must be connected to the Internet to use the capability.