Keyless has revealed that its platform meets the European CEN/TS 18099 standard, which sets technical requirements for detecting and preventing biometric injection attacks. The standard, published in 2024 with national adoptions beginning in 2025, defines stringent criteria for Extended Level of Identity Proofing (LoIP) in high-assurance digital identity systems.
CEN/TS 18099 has been developed to address the growing threat of biometric injection attacks, where manipulated data streams are fed into authentication systems to bypass liveness detection. According to iProov’s 2025 Threat Intelligence Report, native virtual camera attacks surged by 2,665 percent in 2024, underscoring the urgency of adopting stronger safeguards.
Policy and Market Context
The rollout of the standard comes as the European Union prepares to implement its European Digital Identity (EUDI) Wallet initiative, which will require all EU citizens to have access to government-approved digital wallets for online identity verification by the end of 2026. The specification is already influencing regional policy frameworks, with Ukraine adopting EU-compatible digital ID wallet standards in 2025.
While some vendors have already pursued certification under CEN/TS 18099, Keyless says its mobile Anti-Inject solution is designed to meet the High-level criteria for injection attack resistance required for Extended LoIP. The Anti-Inject technology is part of the company’s Zero-Knowledge Biometrics framework, which verifies a user’s identity without storing biometric data on-device or in the cloud.
Technology and Compliance
Keyless positions its solution for governments, enterprises, and service providers preparing for eIDAS 2.0 compliance, where Extended LoIP will be a prerequisite for certain high-trust use cases. By integrating injection attack resistance directly into its mobile SDK, the company aims to protect against sophisticated bypass methods while supporting interoperability with identity systems that follow the ETSI EN 319 461 standard.
The CEN/TS 18099 standard was developed with input from European security and standards bodies, including Cabinet Louis Reynaud (CLR), an ANSSI-accredited biometric evaluation center involved in drafting the specification. CLR has conducted evaluations of multiple biometric vendors against the new criteria, with results forming part of the technical foundation for the EUDI Wallet ecosystem.
As governments and industry stakeholders prepare for the EUDI Wallet deadline, injection attack resilience is emerging as a key competitive differentiator in the biometric authentication market. For vendors like Keyless, alignment with CEN/TS 18099 offers a pathway to market readiness in Europe’s evolving digital identity landscape.
–
By the ID Tech Editorial Team
