
NIST has developed identity assurance guidelines to assist businesses in verifying individuals online with various levels of assurance. Mitek's Verified Identity Platform allows businesses to quickly verify identities online with different levels of certainty while meeting NIST IAL3 verification requirements.
IAL3 was designed to stop large-scale attacks with false documents and social engineering techniques by requiring on-site or remote supervised verification of official documents, face recognition with liveness detection capabilities, chain of custody processes, etc.
Meets NIST 800-63A requirements
Traditional approaches to IAL3 verification involve having a CSP representative act as proofing agent during an on-site proofing session with applicants, which is time consuming, expensive and inefficient for businesses with remote employees. Our hardware-based solution for IAL3 verification not only meets all NIST IAL3 requirements, but is also not susceptible to man-in-the-middle attacks and ensures results which don't rely on man-in-the-middle attacks.
The NIST 800-63A IAL3 guidelines outline a process for verifying an individual's digital identity to connect it with their real-life ID and to prevent advanced hacking attempts like evidence falsification, theft and repudiation. This is achieved using various techniques such as liveness detection facial recognition; document authentication to ensure government documents are genuine; watchlist screening to detect individuals suspected of terrorist activities or money laundering activities; watchlist screening of individuals believed linked with money laundering schemes or terrorist acts; address validation by cross-referencing official databases with utility bills to ensure submitted addresses match reality records
To overcome this challenge successfully, you must submit a photo and audio recording that demonstrate who you are - something the review team needs in order to verify spoofing attempts are genuine and not falsely recorded.
Automates verification processes
Individuals wishing to enter certain regulated industries require identity proofing that meets specific levels of assurance, often through IAL3 verification processes. These may involve authenticating high-quality images of documents and users and collecting multiple biometric characteristics such as live selfies as part of IAL3 verification; watchlist screening to ensure individuals do not exhibit suspected terrorist or money laundering activity; address validation by cross-referencing with official databases and utility bills in order to ensure submitted addresses match real world records; behavioral analytics to detect fraud patterns and mitigate social engineering attacks; etc.
Trust Swiftly provides an easily implementable, secure and scalable solution that makes meeting NIST requirements simpler by automating most of the IAL3 verification process. Our supervised remote identity verification process utilizes multiple methods for identity validation including document validation, facial recognition with liveness detection, fingerprint scanning and voice authentication - along with dynamic knowledge-based authentication and continuous adaptive verification - while supporting multiple pathways within IAL3. It's resistant to man-in-the-middle attacks as well.
Meets FedRAMP High compliance requirements
At IAL3, a CSP representative must interact with applicants during an onsite identity proofing session and collect at least one biometric attribute - these requirements aim to prevent more sophisticated attacks such as evidence falsification, theft and repudiation from taking place. Furthermore, this level requires chain-of-custody procedures, anti-spoofing protections and detailed auditing processes for effective security management.
Trust Swiftly's remote IAL3 compliant solution integrates document verification, facial recognition and liveness detection to verify claimed identities with their real world counterparts, helping prevent fraud and spoofing, while offering financial and time savings for your business. In addition, this helps meet FedRAMP compliance standards while simultaneously improving user experience by eliminating KYC/AML friction for customers while cutting hardware costs and risk of false positives compared with DIY solutions. IAL3 solution's user-friendly setup means effortless customer experience delivery!
Easy to use
Many regulated industries require identity verification with various levels of assurance (IAL), in order to prevent fraud and spoofing. These requirements go well beyond simple email OTPs or SMS-based methods and encompass in-person verification sessions, watchlist screening processes, anti-spoofing protections and audit processes - among many other measures.
Trust Swiftly's IAL3 verification solution stands apart from traditional hardware-based solutions in that it utilizes automated and human oversight for remote IAL3 identity proofing, with multiple verification methods including document validation, facial recognition with liveness detection and fingerprint scanning to meet auditors' standards.
Start the process simply by accessing Trust Swiftly no code page from their Windows, Android, or Apple device and following its on-screen instructions to verify their face, official documents, or utility bills. When complete, an employee is shown their verification results and can sign off on them to approve final decisions.
