Identity News Digest – May 30, 2024

Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Jay Meier Talks IDV Standards, AI, Deepfakes and More: ID Talk

Jay Meier, SVP of North American Operations for FaceTec, shared his insights on face-based digital identity verification on the latest ID Talk Podcast. He emphasized that current vulnerabilities in identity management stem from inadequate user verification and authentication rather than issues with cryptography. Meier critiqued standards bodies for their slow adoption of biometrics due to their probabilistic nature, despite the significant advancements they offer, and highlighted the importance of organizations like Kantara in advocating for improved standards and guidelines in remote identity verification. He also discussed the differences between cryptographic systems, which provide binary outcomes, and biometric systems, which are probabilistic, leading to historical skepticism about their reliability.

FAA Reauthorization Bill Mandates Mobile ID Support

The Federal Aviation Reauthorization Act of 2024 has mandated the acceptance of digital or mobile driver’s licenses (mDLs) at US airports, marking a significant step towards mainstream adoption of mobile IDs. The Act’s passage ensures that the FAA will take necessary actions to accept mDLs whenever government-issued identification is required. The provision comes at a time when the American Association of Motor Vehicle Administrators has launched its mDL Digital Trust Service (DTS), which aims to establish a secure public key infrastructure for digital IDs across the US. The DTS provides a trusted list of public keys to issuing authorities and verifying parties, ensuring the legitimacy and security of mDLs. The Act’s mandate, along with AAMVA’s DTS, supports the broader adoption of smartphone-based IDs, coinciding with a growing number of states already pursuing mDL programs.

INTERPOL Leadership Contender Calls for More Biometric Data, Private Sector Cooperation

Stephen Kavanagh, a leading candidate for the next head of INTERPOL, advocates for an increased role of biometrics and private sector involvement in international policing. Currently serving as INTERPOL’s Executive Director of Police Services, Kavanagh emphasized the need for police to have greater access to biometric data to combat serious crimes and the fusion of crime and terrorism aided by digital tools. He said that biometrics should be used for the most serious criminal activities and not for minor offenses, while also stressing the importance of involving the private sector ethically, especially concerning investigative technologies. His remarks align with INTERPOL’s recent open call for tenders seeking mobile biometric collection devices and solutions, indicating a strategic focus on enhancing biometric capabilities.

FIDO Launches Certification Program for Face-based Remote IDV

The FIDO Alliance has launched the world’s first global certification program for face-based remote identity verification solutions, with iProov being the first vendor to receive certification. The “Face Verification Certification” program involves at least 10,000 tests to assess system performance across demographics such as skin tone, age, and gender. It also measures resistance to spoofing and deepfake attacks using the Imposter Attack Presentation Accept Rate (IAPAR) and evaluates usability and security through False Reject and Accept Rates (FRR and FAR). Based on ISO standards, the program was developed by industry experts and government representatives, and is supported by independent labs Ingenium Biometrics and TÜV Informationstechnik. The new certification builds on FIDO’s existing Biometric Component Certification and Document Authenticity (DocAuth) Certification programs, aiming to enhance trust and innovation in biometric identity verification.

Google Bolsters ‘Find My Device’ Security with Biometrics

Google’s Find My Device app is enhancing user security with a new biometric security option, allowing users to sign in quickly using their fingerprints. The feature adds an extra verification layer to the “don’t ask again” option for Google account sign-ins, bolstering personal security for saved credentials on devices. Google also teased a “Remote Lock” feature during its I/O 2024 event, enabling users to remotely lock their devices with their phone number and a security challenge. Although the framework for Remote Lock has appeared in a recent Play Services update, its full functionality is expected to roll out later this year. These features are part of Google’s broader strategy to expand and strengthen the security of its Find My Device network, which has been rolling out to more users in regions including Japan, the U.K., and the U.S.

Humanity Protocol Founder Pushes Palm Biometrics for Digital ID

Humanity Protocol is developing a secure Web3 identity system using zk-proofs and palm scans, with founder Terence Kwok highlighting the benefits of palm recognition over other biometric methods. In an interview with Crypto Briefing, Kwok explained that palm recognition offers enhanced security and user experience due to its ability to capture intricate vein patterns and unique attributes that remain consistent over time. The technology, combined with advanced algorithms, can accurately handle variations due to age, injury, or dirt. The system uses decentralized storage and zero-knowledge proofs to maintain user privacy and control, distributing biometric data across multiple nodes that users can delete at any time, preventing unauthorized access and data breaches. Kwok also noted that the technology could streamline KYC processes, enabling financial institutions to verify identities without storing sensitive information.

—

May 30, 2024 — by Tony Bitzionis and Alex Perala