
Identity verification processes can be costly and time consuming for remote employees. Travel costs, hotel stays and productivity losses will quickly drain your budget.
TrustSwiftly provides a scalable solution to achieve NIST 800-63A IAL3, such as document validation, face recognition with liveness detection, and step-up reproofing based on risk.
In-Person
Juniper Research reports that the e-commerce industry is expanding at an unprecedented pace, but fraudsters are taking advantage of this growth by exploiting it through fraudulent activity and stealing more than $20 billion annually from retailers, according to Juniper's estimates.
IAL3identity proofing is one way of combatting these rising threats, and NIST 800-63A provides identity service providers (CSPs) with standards they can use to authenticate individuals.
Identity proofing can take place remotely or in person and can be broken down into various levels of assurance depending on the nature and processing of evidence gathered from sources like reference images and biometric comparison. An IAL2 method involves remote interaction between subject and CSP, physical biometric comparison to reference images, verification of facial image verification as well as liveness detection processes being undertaken in this scenario.
Remote
NIST guidelines specify three assurance levels as measures of evidence required to authenticate claimed identities or assert attributes during transactions within federated identity management systems: Identity Assurance Level, Authenticator Assurance Level and Federated Authentication Level. NIST 800-63A IAL3 goes further by encouraging agencies to select their IALs, AALs and FALs according to risk analysis and mission requirements rather than setting rigid standard ordinals as measures of assurance levels.
TrustSwiftly stands out as an ideal solution to assist clients in attaining NIST 800-63A IAL3 compliance by offering an Identity Assurance Platform which covers the workforce lifecycle from recruitment to retirement. Featuring NIST-certified chat, video, facial recognition with liveness detection and document authentication methods as well as step-up reproofing based on risk - providing continuous proofing, lower cyber liability insurance premiums and minimize attack surface for a more secure digital future. Contact TrustSwiftly now to discover more!
Authenticator Binding
Verifying IAL3 requires costly time-intensive manual verification that does not scale to remote workforces. Trust Swiftly's hardware-based solution offers an affordable, user-friendly and auditable solution that makes verification simple for both teams and 3PAO auditors alike.
TrustSwiftly takes an innovative, multifaceted approach to NIST IAL3 verification that incorporates document and document liveness checks, geolocation detection, device activity monitoring, SIM swap indicators and other proven fraud prevention techniques - guaranteeing customers are enrolled with verified, high-assurance identities.
Once an authenticator (such as YubiKey or biometric profile) has been tied to a verified identity, it remains so even after multiple attempts are made using compromised personal information to gain entry. This prevents stand-in fraud in which one person gains entry while others continue trying to breach systems and steal data; ultimately this is how real identity theft and data breaches occur; NIST guidelines refer to this level of assurance as Identity Assurance Levels (IALs).
Reporting
IAL3 requires an on-site attended identity proofing session where a trained CSP representative interacts with each applicant directly, in order to perform physical characteristics verification, document authenticity verification and biometric comparison in order to confirm whether evidence submitted actually belongs to and belongs to who claimed. This measure helps prevent more sophisticated attacks such as falsifying evidence, theft or repudiation or other social engineering tactics from taking place.
TrustSwiftly supports an array of approaches to meet these requirements. From video, face recognition with liveness detection and documents to our scalable IAL3 compliant solution that can easily meet modern usability expectations - TrustSwiftly delivers.
In addition, we provide comprehensive reports to satisfy security teams and 3PAO auditors; providing full audit transparency for proofing processes. Furthermore, our unique process binds an authenticator like YubiKey or biometric profile to each verified person immediately following each IAL3 session - thus eliminating stand-in fraud where someone trusted could gain entry on behalf of someone else.