Standardized Testing for Biometrics: Cutting Through the Hype and Finding Integrity in Digital Identity [FaceTec White Paper]

PART FIVE: ZoOm®, PAD Certified to Level 1 and Level 2

PAD Certification is Difficult, But Proven to Be Achievable

[Editor’s Note: “Standardized Testing for Biometrics: Cutting Through the Hype and Finding Integrity in Digital Identity” was originally published in November 2018. In February 2019 FaceTec announced it became the first company to attain Level-2 certification in the rigorous iBeta Presentation Attack Detection.]

ZoOm 3D Face Login from FaceTec was the first biometric authenticator in history to achieve 100-percent anti-spoofing results in the iBeta Level 1 Presentation Attack Detection (PAD) Certification test.

Powered by Artificial Intelligence, ZoOm creates a 3D image of a user’s face using a standard 2D camera. Because it is biometric software, ZoOm is device-agnostic and can be used on any smart mobile device with a selfie camera, or webcam-enabled system using a modern browser. Demo apps are currently available for download on iOS, Android and webcam-based systems.

The milestone PAD certification result was achieved by subjecting ZoOm 3D Face Login to more than 1500 spoofing sessions over a period of six days, between July 13–25, 2018. Not one attempt succeeded in fooling FaceTec’s technology. iBeta tested ZoOm against complicit user fraud and phishing-style attacks as required by the ISO standard 30107-3, in which the cooperative test subjects aided in the presentation attacks.

Once the spoofing onslaught concluded, the enrolled user then successfully authenticated on the tested device three times. This confirmed that ZoOm’s security scheme had not been altered to reject all attempts and could still differentiate between the correct user and a spoof, even after hundreds of rigorous attempts.

The version of ZoOm tested by iBeta was modified to remove lockout features but the underlying technology was exactly the same as the demos available for download. Anyone with an Android or iOS smartphone, or webcam can now employ third-party Certified Level 1 biometric security.

In attaining a perfect score, FaceTec proved that commercially available and affordable face authentication software can stand up to the highest levels of third-party testing scrutiny.While some may argue the benchmark is too high to be viable, biometrics vendors must be pushed to develop measurably robust technology that can rebuff the bad actors in today’s increasingly dangerous cyber-landscape. No one should have to settle for biometrics solutions that haven’t passed tests proving that they are capable against a wide range of presentation attacks.

A Solid Foundation For Innovation

Now the Real Work Can Begin

Standardized biometric PAD testing will prove to be a linchpin for the industry, creating a solid foundation for building strong biometric authentication technology. Relying parties, from banks to hospitals to governments to everyday users, will be better informed when choosing biometrics that are objectively certified as secure enough for their intended use case. With a level playing field on which to assess the numerous solutions on the market, the biometrics vendors will be pushed to reach new heights of security, while providing fast and frictionless user interfaces. And while the standards may be rigorous and the competition fierce, no matter who captures the market share, the real winners will be the customers and their users. Though we opened with the familiar cliche, “There is a New Sheriff in Town,” is it more accurate to say, “There is finally a Sheriff in Town.”

About FaceTec

FaceTec provides class-leading biometric authentication solutions for mobile and web applications requiring certified, high-performance liveness detection. Leveraging decades of computer vision, artificial intelligence and advanced biometrics experience, FaceTec developed ZoOm, the iBeta PAD Level-1 and Level-2 Certified 3D face authentication platform for iOS, Android, mobile and desktop browsers/webcams. The only unphishable and unshareable biometric modality, ZoOm is ideal for onboarding and virtually any identity and access management requirement.

Founded in 2013 with offices in San Diego, CA; London, UK; and Summerlin, NV, FaceTec provides biometric security on five continents for organizations in financial services, mobile payments, border security, connected transportation, digital identity and onboarding, and more. For more information and business inquiries, please visit www.ZoOmLogin.com.

---

“Standardized Testing for Biometrics: Cutting Through the Hype and Finding Integrity in Digital Identity” is a FaceTec white paper. This version has been optimized for the web for educational purposes and published here with permission from the author.

Learn more about our educational initiatives by contacting Peter O’Neill or Susan Stover, and asking about our Leadership Program.