Browse Definitions :
Definition

Universal 2nd Factor (U2F)

Universal 2nd Factor (U2F) is a type of physical authentication device that uses encryption and private keys to protect and unlock supported accounts. Typically seen as a USB, Near-Field Communication (NFC), or Bluetooth device, two-factor authentication is simplified and strengthened with the use of smart chip technology.

Two-factor authentication (2FA) is used as a basic way to protect sensitive information and relies on an internal and external factor. The internal factor is a basic password or PIN, something that is entered on the platform. The second, and external, factor can be receiving an SMS message or phone call with a temporary code or relying on connected authenticator applications. However, depending on cellular devices for authentication creates a large amount of risk and no two account verifications are alike. Therefore, Universal 2nd Factor is a universal standard created by Google and Yubico for streamlining two-factor authentication with any service or account.

U2F devices are connected to a computer via a USB port or smartphone and can be turned on with certain applications or websites. After the initial password to an account is entered, the device communicates to the host computer via the HID protocol, or the standard that simplifies the transmission of external devices to the computer. Once the line of communication is initiated, a challenge-response authentication mechanism (CRAM) sends the private key on the device to the public key on the computer to unlock it. If the U2F key is not present, access will not be granted. In addition, the information stored on the key is encrypted, diminishing the risk of keylogger, phishing, man-in-the-middle (MitM), malware and session hijacking attacks.

The U2F standard is supported by the  FIDO Alliance, with includes compatibility with major companies. Chrome, Firefox and Opera have already supported U2F within their browsers along with major applications such as Facebook, Github and Dropbox. Large banking corporations like PayPal, MasterCard, American Express, VISA and Bank of America have also begun offering U2F security solutions.

Advantages of Universal 2nd Factor

  • Stronger security: U2F devices use encryption to ensure the website is real and send information directly to the website, cutting down the risk of attacks such as phishing and man-in-the-middle.
  • Simplicity: U2F is already incorporated into popular platforms and browsers, making installation easy.
  • Consumer choice: Since U2F is a standard of authentication, it can be found in a range of device types and communication methods, allowing the user to choose the best fit.
  • Low-cost solution: Keys and drivers with U2F technology are relatively inexpensive and Yubico provides a free, open source server software for back-end integration.
  • Private identity: Users are able to control their online identity and customize it to their needs or privacy level.
This was last updated in September 2018

Continue Reading About Universal 2nd Factor (U2F)

Networking
  • network management system

    A network management system, or NMS, is an application or set of applications that lets network engineers manage a network's ...

  • host (in computing)

    A host is a computer or other device that communicates with other hosts on a network.

  • Network as a Service (NaaS)

    Network as a service, or NaaS, is a business model for delivering enterprise WAN services virtually on a subscription basis.

Security
  • Dridex malware

    Dridex is a form of malware that targets victims' banking information, with the main goal of stealing online account credentials ...

  • crypto wallet (cryptocurrency wallet)

    A crypto wallet (cryptocurrency wallet) is software or hardware that enables users to store and use cryptocurrency.

  • zero-day (computer)

    A zero-day is a security flaw in software, hardware or firmware that is unknown to the party or parties responsible for patching ...

CIO
  • outsourcing

    Outsourcing is a business practice in which a company hires a third party to perform tasks, handle operations or provide services...

  • chief operating officer (COO)

    A chief operating officer (COO) is the corporate executive who oversees ongoing business operations within the company.

  • project management

    Project management is the discipline of using established principles, procedures and policies to guide a project from conception ...

HRSoftware
  • team collaboration

    Team collaboration is a communication and project management approach that emphasizes teamwork, innovative thinking and equal ...

  • employee self-service (ESS)

    Employee self-service (ESS) is a widely used human resources technology that enables employees to perform many job-related ...

  • learning experience platform (LXP)

    A learning experience platform (LXP) is an AI-driven peer learning experience platform delivered using software as a service (...

Customer Experience
  • market segmentation

    Market segmentation is a marketing strategy that uses well-defined criteria to divide a brand's total addressable market share ...

  • sales pipeline

    A sales pipeline is a visual representation of sales prospects and where they are in the purchasing process.

  • market basket analysis

    Market basket analysis is a data mining technique used by retailers to increase sales by better understanding customer purchasing...

Close