IAL3 requires an in-person, on-site identity proofing process with stringent oversight to limit more sophisticated attacks and guard against falsification, theft and repudiation of evidence.
Install your own kiosks or our turnkey kits and add the IAL3 option for an enhanced level of security - including real-time document validation and biometric comparison.
IAL3 Identity Proofing
Identity proofing is the process by which Community Service Providers (CSPs) verify with an applicant's claim to identity to an agreed upon level of confidence. It consists of three steps: identity resolution, evidence validation and attribute verification. Identity resolution verifies whether their claim matches one individual in their population served by CSP; whilst evidence validation ensures the evidence provided is legitimate; finally identity verification verifies whether it actually belongs to who claimed ownership thus minimizing fraud by preventing spoofing and increasing transparency for both CSP and applicant.
Trust Swiftly's hardware-based, remote IAL3 identity proofing solution delivers a more rigorous identity proofing process than its in-person equivalent. Flying employees around and booking hotel rooms for 15-minute verification sessions is expensive and time consuming; additionally it doesn't scale with company growth either - now is the time for something better! Trust Swiftly provides a hardware-based, remote solution designed to secure even your most privileged accounts with greater vigilance.
IAL3 Compliant Solution
NIST provides the IAL3 Level of Identity Assurance, to ensure that claimed digital identities truly connect to those presenting them - significantly decreasing risks associated with impersonation and fraud.
Traditional IAL3 verification involves in-person sessions that eat into budgets and present logistical nightmares for remote teams. Flying people cross country for 15 minute proofing sessions can be costly; paying hotel expenses and covering lost productivity costs isn't sustainable in the long run.
Trust Swiftly can offer an alternative hardware-based remote solution for NIST IAL3 verification that allows RPs to use kiosks with an agent on the other end to capture peoples' faces and evidence documents with much less expense or time to deploy than full self-service kiosk solutions. In addition, Bredemarket can connect you with biometric product marketing experts for further discussion of their solution.
IAL3 Authenticator Binding
With IAL3 verification, you are provided with the highest level of identity assurance - multi-factor checks, real-time document validation and biometric comparison are among the many measures utilized to help combat impersonation and fraud by verifying whether or not those presenting credentials actually possess them. This rigorous approach helps reduce impersonation attempts as it ensures the person presenting them are authenticated.
Authenticators can be securely linked to an identity, so even if another individual acquires your device and begins using it without your knowledge they won't gain entry - thus helping prevent stand-in fraud while improving user security.
The IAL2 Non-Biometric Pathway offers alternative means of verifying claimant identity without using automated biometric comparison, giving CSPs more freedom in providing authentication pathways that align with IAL2 requirements and outcomes. CSPs that employ this pathway must record which paths they employ within subscriber records before making them accessible to RPs through an assertion or API.
IAL3 Reporting
At the IAL3 level, identity verification requires an on-site attended identity proofing session (including remote authentication) as well as collection of at least one biometric characteristic. This enhanced level of assurance helps protect against more sophisticated attacks such as evidence falsification, theft, repudiation and social engineering techniques.
Traditional approaches to IAL3 involve an onsite agent reviewing your identification documents and comparing you with your photo, however this approach can be costly and inflexible when applied across a distributed workforce, creating security risks and compliance bottlenecks.
Trust Swiftly is the first hardware-based remote IAL3 solution that addresses these challenges. Following a successful session, an employee returns the kit and receives a report which verifies your compliance with NIST 800-63A IAL3. Not only is Trust Swiftly compliant but it protects privileged accounts against advanced threats as part of meeting FedRAMP High standards - speak to one of our security experts to learn how!