defense.ltx (7589B)
1 \documentclass[ 2 nenglish, 3 authorontitle=true, 4 ]{bfhbeamer} 5 6 7 \usepackage{iftex} 8 \ifPDFTeX 9 \usepackage[utf8]{inputenc} 10 \fi 11 12 % FIGURES 13 \graphicspath{{figures/}} 14 15 \let\code\texttt 16 17 \title{KYCID} 18 \subtitle{An operational oauth2 integration of eKYC} 19 \author[M. Doy]{Yann Mickael DOY} 20 \institute{Technik und Informatik} 21 \titlegraphic*{\includegraphics{wallpaper}} 22 23 %Activate the output of a frame number: 24 \setbeamertemplate{page number in head/foot}[framenumber] 25 26 \begin{document} 27 28 \setbeamertemplate{title page}[BFH-fullgraphic] 29 \maketitle 30 31 \begin{frame}{Summary} 32 \tableofcontents[pausesections] 33 \end{frame} 34 35 \setbeamertemplate{section page}[BFH-ruled] 36 \AtBeginSection{\sectionpage} 37 38 % 5min max 39 \section{Introduction} 40 41 \usebackgroundtemplate{\includegraphics[width=\paperwidth]{kyc-exemple-aviation}} 42 \setbeamercolor{frametitle}{fg=white} 43 \begin{frame} 44 \setbeamercolor{frametitle}{fg=white} 45 \frametitle{Take a plan} 46 \end{frame} 47 48 \usebackgroundtemplate{\includegraphics[width=\paperwidth]{kyc-exemple-casino}} 49 \begin{frame} 50 \frametitle{Play in casino} 51 \end{frame} 52 53 \usebackgroundtemplate{\includegraphics[width=\paperwidth]{kyc-exemple-alcohol}} 54 55 \begin{frame} 56 \frametitle{Buy alcohol} 57 \end{frame} 58 59 \usebackgroundtemplate{} 60 \setbeamercolor{frametitle}{fg=BFH-Gray} 61 62 \begin{frame}{\textit{e}KYC} 63 \vfill\center 64 \huge \visible<2>{\textit{Electronic}} Know you customer 65 \vfill 66 \end{frame} 67 68 \begin{frame}{Application of eKYC} 69 \begin{itemize}[<+->] 70 \item \large Online casino\vfill 71 \item \large Online shop\vfill 72 \item \large Public wifi access point\vfill 73 \item \large Online bank / financial intermediary 74 \end{itemize} 75 \end{frame} 76 77 \begin{frame}{Authentication subject} 78 \begin{columns} 79 \begin{column}{0.5\textwidth} 80 \begin{center} 81 \huge Authority 82 \end{center} 83 \end{column} 84 \begin{column}{0.5\textwidth} 85 \pause 86 \begin{center} 87 \huge Owner 88 \end{center} 89 \end{column} 90 \end{columns} 91 \end{frame} 92 93 \begin{frame}{Authority authentication} 94 \begin{itemize}[<+->] 95 \setlength\itemsep{3em} 96 \item \large Passport 97 \item \large ID Card 98 \item \large Driving license 99 \item \large Telecom operator (indirect) 100 \end{itemize} 101 \end{frame} 102 103 \begin{frame}{Telecom owner authentication} 104 \begin{columns} 105 \begin{column}{0.265\textwidth} 106 \center 107 \includegraphics[width=\textwidth]{phone-ekyc-step-1}\pause 108 \end{column} 109 \begin{column}{0.367\textwidth} 110 \center 111 \includegraphics[width=\textwidth]{phone-ekyc-step-2}\pause 112 \end{column} 113 \begin{column}{0.367\textwidth} 114 \center 115 \includegraphics[width=\textwidth]{phone-ekyc-step-3} 116 \end{column} 117 \end{columns} 118 \end{frame} 119 120 \begin{frame}{ID Document check} 121 \begin{columns} 122 \begin{column}{0.5\textwidth} 123 \center 124 \includegraphics[height=0.85\textheight]{id-doc-ekyc-doc-front}\pause 125 \end{column} 126 \begin{column}{0.6\textwidth} 127 \center 128 \includegraphics[height=0.85\textheight]{id-doc-ekyc-doc-back} 129 \end{column} 130 \end{columns} 131 \end{frame} 132 133 \begin{frame}{Machine Readable Zone} 134 \center 135 \includegraphics[width=0.95\textwidth]{mrz} 136 \end{frame} 137 138 \begin{frame}{ID Document owner authentication} 139 \begin{columns} 140 \begin{column}{0.333\textwidth} 141 \center 142 \includegraphics[height=0.75\textheight]{id-doc-ekyc-face-left}\pause 143 \end{column} 144 \begin{column}{0.334\textwidth} 145 \center 146 \includegraphics[height=0.75\textheight]{id-doc-ekyc-face-front}\pause 147 \end{column} 148 \begin{column}{0.333\textwidth} 149 \center 150 \includegraphics[height=0.75\textheight]{id-doc-ekyc-face-right} 151 \end{column} 152 \end{columns} 153 \end{frame} 154 155 \section{Product} 156 157 \begin{frame}{Idea} 158 \vfill 159 \begin{center} 160 \Huge Open-source eKYC-as-a-Service 161 \end{center} 162 \vfill 163 \end{frame} 164 165 \begin{frame}{Motivations} 166 \begin{itemize}[<+->] 167 \setlength\itemsep{3em} 168 \item \large Specialized service 169 \item \large eKYC is a market 170 \item \large No open-source solution 171 \item \large Use of standard \textit{OAuth2} 172 \end{itemize} 173 \end{frame} 174 175 \begin{frame}{OAuth2} 176 \begin{columns} 177 \begin{column}{0.5\textwidth} 178 \begin{itemize} 179 \setlength\itemsep{2em} 180 \item<1-> \large Authorization distributed 181 \item<3-> \large Normative 182 \item<4-> \large Widely deployed 183 \item<5-> \large Mature (security knowledge) 184 \item<6-> \large Framework \textit{OAuth2} 185 \end{itemize} 186 \end{column} 187 \begin{column}{0.5\textwidth} 188 \center 189 \visible<2->{\includegraphics[height=0.85\textheight]{oauth2-example}} 190 \end{column} 191 \end{columns} 192 \end{frame} 193 194 \begin{frame}{OAuth2 Authorization Code Flow} 195 \center 196 \includegraphics[width=0.95\textwidth]{oauth2-flow} 197 \end{frame} 198 199 \begin{frame}{OAuth2 Security} 200 \begin{columns} 201 \begin{column}{0.5\textwidth} 202 \begin{itemize} 203 \setlength\itemsep{2em} 204 \item<1-> \large Password security 205 \item<2-> \large Brute force protection (limitation) 206 \item<3-> \large Email verification 207 \item<4-> \large Cross-site request forgery 208 \item<5-> \large Open redirection 209 \end{itemize} 210 \end{column} 211 \begin{column}{0.5\textwidth} 212 \begin{itemize} 213 \setlength\itemsep{2em} 214 \item<6-> \large Input validation 215 \item<7-> \large Spam/bot prevention 216 \item<8-> \large Transaction bypass 217 \item<9-> \large Client authentication 218 \end{itemize} 219 \end{column} 220 \end{columns} 221 \end{frame} 222 223 \begin{frame}{Architecture} 224 \center 225 \includegraphics[width=0.85\textwidth]{system} 226 \end{frame} 227 228 \begin{frame}{Workflow security} 229 \begin{columns} 230 \begin{column}{0.5\textwidth} 231 \large{\textbf{Problems}} 232 \begin{itemize} 233 \setlength\itemsep{2em} 234 \item<1-> \large HTML Form 235 \item<2-> \large Cross-site request forgery 236 \item<3-> \large Contextual as input 237 \item<4-> \large Open redirection 238 \end{itemize} 239 \end{column} 240 \begin{column}{0.5\textwidth} 241 \large{\textbf{Solution}} 242 \begin{itemize} 243 \setlength\itemsep{2em} 244 \item<5-> \large Encrypt (AEAD) 245 \item<6-> \large Context input 246 \item<7-> \large Action as AD 247 \item<8-> \large Session as AD 248 \end{itemize} 249 \end{column} 250 \end{columns} 251 \end{frame} 252 253 \begin{frame}{Clean architecture (design)} 254 \center 255 \includegraphics[height=0.9\textheight]{software-layer} 256 \end{frame} 257 258 \begin{frame}{Testing driven developpment (TDD)} 259 \center 260 \includegraphics[height=.85\textheight]{tdd-cycle} 261 \end{frame} 262 263 \begin{frame}{Testing diamond strategy} 264 \center 265 \includegraphics[height=0.85\textheight]{DiamondTesting} 266 \end{frame} 267 268 \begin{frame}{Writing test} 269 \begin{itemize} 270 \setlength\itemsep{3em} 271 \item<1-> \large Define \textit{system under test} (SUT) 272 \item<2-> \large Write an example (scenario) 273 \item<3-> \large \textit{Given}, \textit{when} and \textit{then} narative pattern 274 \item<4-> \large Don't mock what you don't own 275 \end{itemize} 276 \end{frame} 277 278 \section{Demo} 279 280 \section{Conclusion} 281 282 \begin{frame}{Project management I} 283 \center 284 \huge Don't underestimate the workload 285 \end{frame} 286 287 \begin{frame}{Project management II} 288 \center 289 \huge Task difficult to estimate = task poorly defined 290 \end{frame} 291 292 \begin{frame}{Project management III} 293 \center 294 \huge Skipped work will cost later 295 \end{frame} 296 297 \begin{frame}{Clean architecture and Acceptance test} 298 \center 299 \huge Use case is more important than domain 300 \end{frame} 301 302 \begin{frame}{Perspective} 303 \begin{itemize} 304 \setlength\itemsep{2em} 305 \item<1-> \large Validation by video stream 306 \item<2-> \large Validation process 307 \item<3-> \large IA for validation 308 \item<4-> \large UI \& UX 309 \item<5-> \large Audit 310 \end{itemize} 311 \end{frame} 312 313 \begin{frame} 314 \center 315 \Huge Thanks you! 316 \end{frame} 317 318 319 \begin{frame} 320 \center 321 \Huge Questions? 322 \end{frame} 323 \end{document} 324