Customer Onboarding / KYC

1Kosmos BlockID LiveID biometric matching defies spoofing and verifies the individual not just the device

To overcome facial spoofing through the use of a photo, video, mask, or a different substitute for the actual face of a legitimate person, we’ve developed “LiveID”, which is essentially a short selfie video, where the users needs to blink and smile to verify liveness. Upon account enrollment, this is matched to the image on a government credential to verify likeness.

LiveID is a real biometric, not just the phone’s interpretation of someone’s face or finger. This means that any time LiveID is used, it is compared to the biometric captured during the enrollment process.

We call this a liveness test and it is performed to verify if the biometric traits of an individual are from a living person rather than from an artificial or lifeless image. This means the user becomes the authenticator. No one else can access the account. And LiveID is over 99% accurate.

1Kosmos digital identity wallet places personal information under user control and eliminates honeypots of user PII

During enrollment, information collected from scanned credentials is encrypted and stored in a distributed ledger to the W3C DID standard, accessible only via a FIDO2 certified private-public key pair secured in the TPM / Secure Enclave of a device and under sole control by the user via their live biometric selfie, through LiveID.

Without the private key, the data cannot be decrypted. There is no central authority overseeing data access other than the user in possession of the private key.

Since there is no user store and no centralized storage of user information, there is no honeypot of personally identifiable information to secure against the threat of data breach. This improves an organization’s GDPR compliance. 

Easy self service enrollment and verification quickly enrolls customers with minimal overhead and errors

Customer enrollment starts by downloading a mobile application from Apple Store or Google Play. Our mobile app can be white labeled or embedded via API / SDK into an existing app. They enroll their biometrics, with a blink and a smile, and scan credentials. This process takes less than a minute to complete and does not require Customer Support services.

When users scan their identity documents (e.g, Drivers License), we’ll scan the front of a driver’s license and the “PDF417” barcode on the back, performing real-time ID card detection and classification.  In the United States a check against AAMVA records can be implemented to ensure validity. For passports we’ll read the “MRZ” data, perform UV, white light and ink-depth checks, and scan the embedded RFID chip to ensure document validity.

The user captures a live selfie to secure their PII data and for secure biometric access. The images captured from the government-issued documents are compared to the live selfie to verify the likeness of the user. This additional security check eliminates synthetic identity fraud. 

Within minutes, we verify the validity of those credentials and the information they contain to W3C VC standards using artificial intelligence (AI) and leading third-party verification services, if necessary.

Our mobile app has built-in zero-trust checks to verify the patch level, device security, jailbroken status, etc, to ensure device integrity, particularly in bring-your-own-device environments.

The result is a NIST 800-63-3 certified Identity assurance level 2 (IAL2) — and a FIDO2 certified biometric access authentication level 2. All of this takes a few minutes, but the benefits are substantial. Organizations eliminate the possibility of synthetic identity fraud and users create a digital identity wallet, accessible only by them, and PII data that is only sharable only with their permission.