close
close

FIDO Alliance Launches Comprehensive Selfie Biometric IDV Certification Program

The FIDO Alliance is launching a biometric testing program to provide Face Verification certification so vendors can demonstrate accuracy and lack of bias in their remote biometric identity verification technologies.

Independent evaluation is important across the identity lifecycle, but “if you have weak onboarding methodologies, it creates a major backdoor for attackers,” says FIDO Alliance Executive Director and CEO Andrew Shikiar. Biometric update in an interview. “So we have always had a vision to strengthen the identity verification process.”

Certification is based on a minimum of 10,000 test verifications, with requirements based on established ISO standards, FIDO says. Identity verification software is assessed for accuracy across skin tones, ages and genders. Spoof resistance is measured with Imposter Attack Presentation Accept Rate (IAPAR), and usability and security are measured with False Reject and Accept Rates (FRR and FAR). The match rate for selfie biometrics and government-issued identity documents is also being tested.

Combined, these tests of matching accuracy, presentation attack detection (PAD), and across different demographics mark a new kind of comprehensive assessment of identity verification effectiveness. It is, says Shikiar, “the complete package; built by industry for industry.”

The FIDO Alliance notes in the announcement the importance of addressing biases in biometric systems and their robustness in the face of emerging security threats.

Survey results just released by the Alliance show that half of US and UK consumers say a discovery of bias in an organization’s biometric system would reduce their trust in that organization. More than a third say deepfakes have made them more concerned about performing online identity verification.

The new certification was previewed at Authenticate 2023, and it comes just as concerns about deepfakes are reaching a fever pitch. Social engineering and phishing remain the most scalable attack types, Shikiar says. AI is only making the problem worse, while also fueling deepfakes, “and they are starting to scale up too.”

Groundbreaking FIDO certification for identity verification

iProov’s Dynamic Liveness, which provides presentation attack detection with the company’s Flashmark technology for remote user onboarding and authentication, is the first product to pass the test and earn FIDO certification.

“Biometrics is a powerful tool that organizations can use to enable safe, inclusive and user-friendly online interactions,” said Andrew Bud, founder and CEO of iProov. “Each of these three fundamental components must receive equal attention as organizations evaluate their options. With the FIDO Face Verification Certification program, organizations now have a trusted compass to help them navigate these decisions. We applaud the FIDO Alliance for highlighting the importance of biometric identity verification to strengthen the entire user identity lifecycle. Independent certification creates a much-needed quality benchmark for this evolving technology and further demonstrates our ability to provide reliable identity assurance in an era of AI threats and identity fraud.”

Ingenium Biometrics and TÜV Informationstechnik (TÜV Nord Group) are accredited to conduct certification testing, and more independent laboratories are expected to join them in the coming year. There are several other labs that have already gone through FIDO’s accreditation process for security and biometric testing programs, and Shikiar says the Alliance is “currently working on several” as it broadens supplier choice.

The Face Verification certification expands FIDO’s portfolio of testing programs, which already include biometric component certification and document authenticity (DocAuth) certification. More than a thousand products have already been certified through one of these FIDO programs, Shikiar says. “Just as we see FIDO certification becoming an important part of user authentication RFPs, that is 100 percent our goal for identity verification as well.”

The program will evolve with “continued industry-wide input into our certification program” to respond to changes in standards and the threat landscape, Shikiar says. “Part of the value of a certification program is its longevity,” he notes, and recertification requirements will eventually be introduced into FIDO’s Face Verification Certification program.

“Ultimately,” says Shikiar, “we want to help create a more secure internet and protect our connected economy, and we think the certification is appropriate for that.”

Article topics

biometric tests | certification | facial verification | FIDO Alliance | identity verification | Ingenium Biometrics | iProov | remote verification | selfie biometrics | TÜV Information Technology

Latest biometrics news

The US Subcommittee on Innovation, Data and Trade flags proposed legislation – and takes names. Open in comments…

Nearly all organizations (97 percent) are currently facing identity verification challenges, according to a survey by Ping Identity….

Financial inclusion is a crucial objective for countries seeking to increase economic development and resilience, especially in regions where large…

Internal efforts within the government of Sierra Leone to gain a better handle on the country’s digital government efforts have…

York Regional Police and Peel Regional Police have announced they are joining forces to contract and implement a facial recognition system…

Digi Yatra Foundation CEO Suresh Khadakbhavi is on the PR trail as India’s biometric app to facilitate faster boarding prepares…

Back To Top