The injection attack detection capability in Innovatrics’ Enterprise Identity Verification platform has been certified at the High level under CEN/TS 18099, the European technical specification for detecting biometric data injection attacks. Testing by CLR Labs found no successful attacks in the evaluated configuration.
High is the top level the specification defines. It is also the level that ETSI TS 119 461, the ETSI specification for identity proofing in trust services, specifies for injection attack detection in applicable remote identity proofing processes targeting its Extended level of identity proofing. Innovatrics said that makes the result directly relevant to qualified trust service providers, banks and other regulated digital identity services.
Injection attacks bypass the camera rather than presenting a fake to it. An attacker feeds prerecorded, altered or AI-generated video straight into the verification flow, often through a virtual camera that the device treats as real hardware. Innovatrics noted that a deepfake that liveness detection would catch on a screen can pass unseen when it arrives this way.
At the High level, CLR Labs tested the system against multiple sophisticated injection attack techniques, including attempts to manipulate the biometric capture process. The lab also measured how often genuine users were wrongly flagged: 1.3 percent of genuine capture attempts were classified as attacks, a figure known as the bona fide presentation classification error rate (BPCER).
“An attacker at this level needs only one way around the camera, and the tools for trying, from virtual cameras to tampered apps, are easy to get hold of. That is why no single check decides the outcome,” said Filip Stiglic, enterprise architect and injection attack prevention lead at Innovatrics. “Signals from the device, the image and the session are weighed together on the server, where the attacker cannot reach them.”
The certification covers face biometrics. Innovatrics said the same injection attack detection approach is designed to work across capture modalities and can also protect the capture of identity documents and other biometric modalities such as palm and fingerprints.
The company has previously sought outside testing of its defenses against these attacks. It commissioned ethical hacking firm Citadelo to examine its Identity Verification Toolkit, and after 16 days of black-box testing without access to source code or internal architecture, the firm’s injection and bypass attempts were unsuccessful.
“Identity verification depends on the integrity of what reaches the system. If an attacker can replace the camera feed, even an accurate biometric match can be misled,” said Jan Lunter, founder and CEO of Innovatrics. He said the company will keep testing as attacks change.
Sources: Innovatrics, Citadelo
–
By the ID Tech Editorial Team
