Identity News Digest – July 11, 2024

Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Socure Joins Login.gov’s IDV Upgrade Effort

Socure is partnering with Xcelerate Solutions to enhance the identity verification system for Login.gov, the central platform for accessing federal services in the U.S. The General Services Administration (GSA) had earlier selected Xcelerate Solutions and seven other companies through the NextGen Login.gov Identity Proofing Blanket Purchase Agreement (BPA) program, which could be worth up to $194.5 million over 10 years. Socure will support key functional areas including document capture, authentication, biometric comparison, and identity resolution. The Login.gov platform, launched in 2017, aims to streamline and secure access to various government services, currently supporting over 70 million users. The integration of biometric technology follows a 2021 GSA Inspector General report highlighting compliance issues with NIST standards. Recently appointed program director Hanna Kim is overseeing the development of an optimized pricing structure and a pilot program for selfie-based biometric identity verification.

Plurilock Extends Cybersecurity Agreement with Semiconductor Firm

Plurilock has extended its professional services engagement with an undisclosed partner in the semiconductor industry, described as a publicly traded company listed on both the S&P 500 and Nasdaq 100 indexes. Plurilock specializes in continuous authentication technologies using behavioral biometrics, analyzing patterns like typing rhythms and mouse movements to verify user identities and enhance security against unauthorized access and cyber threats. The company’s Critical Services team is providing cybersecurity and IT services in areas such as Zero Trust, Offensive Security, and Security Operations, adding $294,000 in revenue to the existing contract.

Passkeys Simplify Enrolment for Google’s ‘Advanced Protection Program’

Google has simplified the enrollment process for its Advanced Protection Program, which protects individuals at higher risk of targeted online attacks, such as political campaign workers and journalists. Previously requiring two physical security keys, the program now allows setup with a single passkey using the built-in biometric authentication of Pixel phones or iPhones. Launched in October 2017, the program also requires additional recovery methods to regain access if locked out. Passkeys, developed by the FIDO Alliance, use cryptographic keys for secure, passwordless login, employing a public key stored on the server and a private key on the user’s device, verified through biometric authentication.

Employer-focused BIPA Complaint Trend Comes for FedEx

FedEx is facing a class action lawsuit under Illinois’ Biometric Information Privacy Act (BIPA) for allegedly failing to disclose its biometric data collection and policies regarding employee fingerprint scans used for time and attendance tracking. Enacted in 2008, BIPA requires explicit consent and disclosure from companies collecting biometric data such as fingerprints and facial recognition information. The rise in the use of biometric technologies has led to increased BIPA litigation, with a notable shift towards employer-focused complaints, outpacing consumer-driven cases. A proposed amendment to BIPA, likely to become law, would count violations on a per-person basis instead. Recently, Crate & Barrel settled a BIPA lawsuit with employees for $2.4 million.

Trust Stamp Joins NayaOne Tech Marketplace

Trust Stamp has joined the NayaOne Tech Marketplace, providing AI-powered identity solutions to help banks and financial institutions combat fraud, retain customers, and expand their user base. Trust Stamp’s tokenization technology converts raw biometric data, such as fingerprints or facial scans, into secure, anonymized IT2 tokens, ensuring personal data protection. Varun Resh, Marketplace Manager at NayaOne, emphasized the growing threats of sophisticated fraud schemes and the need for advanced fraud detection and prevention strategies. Trust Stamp’s offerings include biometric authentication with liveness and presentation attack detection, AI-driven document validation, synthetic identity detection, and irreversible tokenization, all aimed at enhancing security and streamlining compliance processes.

North Carolina Aims for mDLs by Summer ’25

By the summer of 2025, North Carolina residents will have the option to use digital driver’s licenses (mDLs) stored in a secure app on smartphones. These digital IDs will contain the same information as traditional physical licenses but will offer enhanced privacy by allowing users to share only necessary details, such as age verification. The digital IDs will automatically update with any changes to the user’s information, such as name or address. Enrollment in the program will be voluntary, and the mDLs can be used in situations in which physical licenses are typically required, including traffic stops and identification checks. North Carolina joins a growing number of states embracing digital driver’s licenses, following recent initiatives in New York and Illinois. This shift is part of a broader trend towards digital wallets, exemplified by Maryland’s introduction of its Mobile ID in Samsung Wallet for secure airport identity verification.

—

July 11, 2024 — by Tony Bitzionis and Alex Perala