Renowned technologist Dan Kaufman—known in cybersecurity circles as “Darpa Dan”—has joined Badge, a biometric authentication startup. While the specifics of Kaufman’s role have not been disclosed, his endorsement is widely viewed as a major vote of confidence in Badge’s privacy-first mission to eliminate stored secrets from the authentication process.
Badge was co-founded by Dr. Tina P. Srivastava, an MIT-educated engineer and former Raytheon executive, along with Dr. Charles Herder. Srivastava’s experience as a victim of the 2015 U.S. Office of Personnel Management breach—one of the largest federal data leaks in history—inspired the company’s founding vision: to enable secure authentication without storing any sensitive data, passwords, or biometric templates.
At the core of Badge’s platform is a cryptographic technique called fuzzy extraction, often mischaracterized as “fuzzy logic.” This method allows secure keys to be derived from variable biometric input, enabling consistent authentication even when fingerprint or facial recognition data slightly fluctuates. Unlike traditional biometric systems, Badge does not store user data on devices or servers, dramatically reducing exposure to data breaches and eliminating regulatory overhead tied to stored biometric identifiers.
The system is designed to be platform-agnostic: users enroll once and can authenticate across devices and platforms without being locked to specific hardware. This portability is a key differentiator in a space typically constrained by device-specific biometric modules.
Badge has already established a growing ecosystem of high-profile partnerships. It recently teamed up with Thales to enhance identity management on shared devices in sectors like healthcare, retail, and manufacturing, and has also collaborated with CyberArk to support its “identity without secrets” approach. Additional integrations include Microsoft, Cisco, Okta, ForgeRock, and Ping Identity—positioning Badge as a potential game-changer in decentralized, privacy-conscious access control.
According to a 2024 HID Global report, the shift toward mobile-based digital IDs and biometric authentication is accelerating, as enterprises and governments prioritize secure, user-friendly solutions. Badge’s model aligns with this trend, offering a way to comply with regulations like GDPR, CCPA, and BIPA by eliminating the storage of personal data altogether.
While still in early stages of adoption, Badge’s authentication platform is already being tested in high-security, multi-user environments such as shared workstations. By removing the need for passwords, badge readers, or stored credentials, the system simplifies access while improving compliance posture and reducing the attack surface. Some experts believe the approach could help address longstanding weaknesses in conventional identity frameworks, which have struggled to keep pace with credential stuffing, deepfakes, and insider threats.
Despite the momentum, Badge faces challenges common to all security innovators: industry inertia, long enterprise sales cycles, and the need to integrate into highly fragmented IT stacks. Still, with Kaufman’s expertise—shaped by roles at DARPA, Google’s Advanced Technology and Projects group, and DreamWorks—the company appears well-positioned to push the boundaries of what’s possible in secure authentication.
Source: Semafor
—
April 17, 2025 – by Cass Kennedy
