Page Comparison

IIW recap

All

• Iain, Steve, Andrew, James attended

• Andrew ran a session of doom and gloom about the future state of ID Verification

  • An overview of the threats and a bit about how ID Verification systems work in today’s world

  • We didn’t hype the AI angle - mostly about how AI is accelerating the threat/attack cycle

•  Andrew to post the notes from the IIW session - also links to the Proceedings when they are posted
•  Heather to review prior IIW proceedings to see if there are relevant session notes

Dawid overview of prevention solution

Dawid + Gunther

** Slide deck is here:
https://kantara.atlassian.net/wiki/download/attachments/261128280/DAL+Identity_Kantara.pdf?version=1

** A recording of this portion of the meeting.

• “An Identity is proof of existing evidence of a single existing real-world human being”

• Focus on the human - today’s systems focus on the data

• 

• Their focus is to be able to prove assurance of their onboarding processes in a court of law

  • Full audit trail of enrolment and who the agents were

  • (Note on forensics collection (Locard principle) - traces of presence from every interaction)

  • A core part of the solution is a secure physical enrolment device that interacts physically with the person & is controlled by the enrolling agent

• Note that this is similar/same as NIST 800-63 IAL3 enrolment

•  Dawid to post definition/description of “forensics” as used in context of the solution

• Concept is to create a single “digital twin” in the system based on physical interaction at enrolment - from live human through deceased human (to prevent “tombstone synthetic identity attacks”)

  • Solution has a single way to enrol so that the digital twin cannot be taken over by an impostor

• The enrolment kiosk creates an authenticated digital twin (biometric data, PII, metadata) - There is also a central reference library of digital twins - from which hashed/tokenized digital twins are published into a more-accessible directory for customers to work with - no PII is distributed outside of the central library

• The person’s data is kept on their own device - a “Verified Trust Exchange” app on the device

• “Forensic Cryptography”

Further discussion on content coverage

All