ID Tech Digest – January 22, 2025

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Keyless Raises $2M, Targets Market Expansion

London-based Keyless has raised $2 million in a funding round led by Rialto Ventures and Experian Ventures, bringing its total funding to $10 million in the last 18 months. The company, which specializes in face biometrics and decentralized data storage, reported over 700 percent year-over-year growth in 2024, with a client base spanning banking, financial services, crypto, and gaming sectors across multiple regions. Keyless recently made a strong debut in the NIST Face Recognition Vendor Test (FRVT) 1:1 Verification program. The new funding will support further technological advancements, product development, and expansion, with a focus on North America.

Vision-Box Wins €744K Contract for Mobile Biometric Stations from Portuguese Foreign Ministry

The Portuguese Ministry of Foreign Affairs has awarded a €744,375 contract to Vision-Box for mobile biometric data collection stations, supporting Portugal’s digital identity modernization efforts. The open tender, managed under EU Directive 2014/24/EU, prioritized price as the sole criterion and aligns with the European Union’s broader Entry-Exit System (EES) implementation in 2025. Vision-Box, based in Cascais, Portugal, was the sole bidder and is known for its airport biometric systems, including projects in Sint Maarten and Indonesia. The contract involves delivering media storage and reader devices for biometric data collection in the Lisbon Metropolitan Area. The procurement was partially EU-funded and adheres to transparency standards, with a 30-day review period for filing objections.

French Privacy Regulator CNIL Distinguishes Technical Permissions from GDPR Consent

The French Data Protection Authority (CNIL) has issued guidance distinguishing technical permissions from user consent under the General Data Protection Regulation (GDPR). Technical permissions, which control access to resources, differ from consent, which governs how accessed data can be processed. CNIL emphasized that permissions function as access mechanisms and do not inherently regulate data usage, such as in navigation apps where location access is essential for functionality but separate from broader consent requirements. The guidance advises organizations to align technical permissions with GDPR compliance, ensuring clear explanations for access requests even when consent is not mandatory. This clarification comes amid heightened scrutiny of data collection practices, including location and biometric data used in digital identity systems.

BBVA Foundation Honors Pioneers in Biometrics and AI

The BBVA Foundation has awarded its Frontiers of Knowledge Award in Information and Communication Technologies to Anil K. Jain and Michael I. Jordan for their transformative contributions to biometrics, machine learning, and artificial intelligence. Jain, of Michigan State University, has fingerprint and facial recognition technologies, demonstrating fingerprint stability over time in pioneering research. His work underpins biometric systems widely used in law enforcement and consumer electronics. Michael I. Jordan, of UC Berkeley, developed foundational techniques in variational inference and distributed computing, enabling advancements in deep learning and AI platforms like Ray, which supports modern AI applications and e-commerce systems.

Hyundai Mobis’ In-Cabin Monitoring System Ready for Mass Production

Hyundai Mobis has unveiled its In-Cabin Monitoring System (ICM), which uses cameras and software to monitor passengers’ posture, behavior, and biometric signals in real-time. The system can detect drowsy driving, distracted phone use, smoking, unbuckled seat belts, hands-off steering, and unattended children, offering alerts through visual or audio notifications. Unlike earlier systems focused solely on drivers, the ICM integrates monitoring for both front and rear cabin areas. It has achieved ASPICE certification, meeting European vehicle software standards, and exceeds New Car Assessment Program (NCAP) safety requirements. The system is mass-production ready, setting it apart from competitor concepts, and Hyundai Mobis plans to enhance its capabilities with biosignal analysis and fleet service applications.

French Rail Operator Trials Digital ID for Passengers

French railway operator SNCF has launched a digital ID trial allowing passengers to verify their identity using QR codes generated by the France Identité mobile application. Initially available on InOui TGV trains, the program matches QR code data, including full names and dates of birth, with ticket information, eliminating the need to scan physical tickets unless required by station barriers. The system uses encrypted transmission protocols to ensure data privacy and security. Passengers must still purchase valid tickets, and traditional forms of ID, such as physical ID cards and passports, remain acceptable. The France Identité app is currently limited to French nationals with electronic ID cards issued after 2021 or qualifying driving licenses, excluding passports and residency cards.

IDEMIA Launches Smartphone-Based Enrollment System for Biometric Payment Cards

IDEMIA Secure Transactions (IST) has unveiled a smartphone-based enrollment solution for its F.CODE biometric payment cards, using a battery-less USB-C dongle compatible with iOS and Android devices. The system allows cardholders to enroll or erase biometric data via their bank’s mobile app, simplifying the process compared to traditional methods requiring branch visits or dedicated hardware. The F.CODE biometric card supports contactless payments authenticated via fingerprint, removing the need for PIN entry regardless of transaction amount. Biometric data is securely stored within the card’s secure element, mitigating risks of external data breaches.

DHS Report Details Accuracy Rates in Federal Facial Recognition Programs

The Department of Homeland Security (DHS) has released a detailed report on its use and oversight of Face Recognition and Face Capture (FR/FC) technologies across U.S. borders and transportation hubs. DHS Directive 026-11, established in 2023, mandates testing for bias, prohibits enforcement actions based solely on FR/FC, and ensures opt-out rights for U.S. citizens in non-law enforcement contexts. Operational data reveals high accuracy, with 99 percent traveler identification accuracy at U.S. ports of entry and TSA systems achieving 88 to 97 percent detection accuracy. Key applications include CBP Biometric Exit, Global Entry, Simplified Arrival, TSA Credential Authentication, and TSA PreCheck’s Touchless Identity Solution. DHS continues to monitor and evaluate system performance, addressing demographic challenges and advancing AI risk management policies.

Nigeria Plans First Biometric Census for 2025, Allocates ₦18.2 Billion Budget

Nigeria is set to conduct its first biometric census in 2025, addressing a 19-year gap in reliable population data. The National Population Commission (NPC) has proposed a budget of ₦18.2 billion, with an additional ₦1.1 billion allocated specifically for the National Population and Housing Census. The biometric approach will integrate with Nigeria’s digital identity systems, including the World Bank-supported ID4D project and the National Identity Management Commission (NIMC), which aims to issue 180 million National Identification Numbers (NINs) by 2026. The census will employ biometric verification, including fingerprints and potentially iris recognition, to ensure accurate human population counts and prevent duplicate entries.

Entrust Launches AI-Powered Facial Authentication for IDaaS Platform

Entrust has added AI-powered facial biometric authentication to its Identity-as-a-Service (IDaaS) platform, enhancing the accuracy and speed of its identity verification capabilities. The technology integrates liveness detection and anti-spoofing measures to counter AI-generated deepfakes and identity fraud. Fully integrated with Entrust’s existing security solutions, this capability aligns with the company’s broader focus on digital security, following its rebranding and the launch of tools like PKI Hub. The update comes as biometric authentication gains consumer confidence, particularly in the financial services sector, where institutions adopt such solutions to combat cybercrime.

T-Mobile Deploys 200,000 YubiKeys for Passwordless Authentication Across Workforce

T-Mobile US has completed the deployment of over 200,000 FIDO2 YubiKeys across its workforce, transitioning to passwordless, device-bound authentication. This initiative, finalized in late 2023, replaces traditional multi-factor authentication methods with phishing-resistant hardware security keys tied to specific devices. Supporting protocols like FIDO2/WebAuthn, U2F, and Smart Card (PIV), the YubiKeys provide secure, seamless authentication across various applications, operating systems, and mobile devices. The deployment aligns with the FIDO Alliance’s enterprise standards for secure authentication, addressing rising cybersecurity threats amid increasing business losses from cyberattacks. T-Mobile achieved full implementation in less than three months.

–

January 22, 2025 – by Tony Bitzionis and Alex Perala