NIST Special Publication 800-63 provides the framework for digital identity assurance. By breaking assurance levels into Identity, Authentication, and Federation (FAL), this publication helps agencies select security levels that best reflect business risk.
Trust Swiftly can make proofing easier by eliminating costly, time-consuming proofreading in person and supporting remote workforces with remote proofing solutions that scale.
IAL3 Compliant Solution
NIST’s IAL3 identity proofing guidelines establish levels of assurance to ensure that digital identities match up with real world identifications. At its highest IAL (Identity Assurance Level), an on-site attended proofing session must take place with at least one biometric characteristic collected, protecting against highly-scalable attacks by countering falsification, theft, repudiation and other social engineering tactics.
Up until recently, the only way to meet the requirements of IAL3 was via in-person verification sessions, posing logistical and security risks to remote-first companies.
TrustSwiftly has developed a scalable and secure solution to meet the IAL3 requirements, known as HYPR Affirm. The platform combines chat, video, facial recognition with liveness detection and document authentication into one streamlined IAL3 process for businesses looking to comply with FedRAMP High IAL3 compliance requirements while protecting customers while eliminating email OTPs or SMS-based authentication methods that are easily targeted in phishing campaigns – significantly increasing cybersecurity overall.
IAL3 On-Demand
Compliance with IAL standards is vitally important to any business that must authenticate digital identities for authentication, and ensures they meet regulatory requirements that affect multiple industries.
Contrary to lower assurance levels that may permit less stringent checks, IAL3 requires extensive evidence and verification processes in order to safeguard both individuals and relying parties against impersonation and fraud. This typically includes in-person or remote identity proofing with rigorous oversight – also biometric verification to confirm the person presenting their digital identity is only ever linked with their claimed digital identity.
TrustSwiftly IAL3 compliant solution utilizes superior document validation technology, including scans and checks of official documents as well as cross-referencing against trusted databases, biometric comparison and live image capture, plus advanced biometric verification to produce highly resistant data bind to users via FIDO passkey or other device credentials that are resistant to phishing attacks or man-in-the-middle attack techniques.
IAL3 Retention
NIST 800-63A IAL3 Identity Authenticity Level 3 guidelines require stronger evidence of identity to detect impersonation, fraud or other threats to security. Top IAL3 solutions utilize liveness detection and face matching technologies that ensure enrollee presence while cross-verifying them across multiple documents containing their face data, and securely binding an array of biometric modalities (fingerprints, dual iris) with their identity credential – this binding provides strong protection against SIM swaps or MFA bypass attempts which could undermine IAL2 security.
Recent technological advancements are making identity-proofing sessions less of an in-person process, with mobile identity-proofing kits and kiosks for remote reliance parties becoming available. Supervised NIST IAL3 verification agents reduce citizen inconveniences by shortening travel and waiting times and making high assurance ID credentials more easily accessible than ever – providing increased cybersecurity against increasingly sophisticated threats while laying the foundation for the next-generation of phishing-resistant multifactor authentication FIDO2 will soon replace.
IAL3 Agents
NIST defines various levels of identity assurance based on transaction sensitivity, with IAL3 reserved for high-risk applications. At this heightened level of identity verification, in-person or remote attended interactions, real-time document validation and biometric comparison are all needed in order to provide strong authentication against impersonation attacks and ensure multifactor phishing resistance authentication.
Contrary to lower assurance levels that permit some degree of false acceptance, IAL3 requires that claimed digital identities be both real and specific to the person presenting themselves. It combines document validation, biometric comparison, and direct oversight to achieve this result.
Selecting an adequate level of assurance is critical to business. Companies need to carefully evaluate their business risks before selecting an assurance level that meets their requirements. TrustSwiftly makes this easy by offering an IAL3 compliant kiosk solution which enables users to verify themselves on demand – this reduces onboarding times significantly and allows customers to continue using mobile devices or applications while an agent verifies credentials.
