2023-10-18 DeepfakesIDV DG Meeting Notes

Alastair Treharne

Beruku Identity Limited

Andrew Hughes

Ping

Present

Ashok Singal

Demystify Biometrics

Chris LaBarbera

Verizon

Denny Prvu

RBC Royal Bank of Canada

Iain Corby

SafetyTech Limited

Present

Jay Meier

FaceTec, Inc.

Jim Pasquale

ChasmCrossing Solutions

Jordan Burris

Socure

Julian White

Beruku

Maxine Most

Acuity Market Intelligence

 Present

Mike Magrath

Easy Dynamics

Peter Davis

Airside Mobile, Inc

Pieter Van Iperen

Clear Secure

Brandon Gutierrez

Equifax

Present

Dawid Jacobs

DAL Identity

Present

Hannah Sutor

n/a

Present

Heather Vescent

n/a

Present

Michael Engle

1Kosmos

Present

Stephen Vitka

N/A

Present

Uttam Reddi

n/a

Present

Gunther Sonnenfeld

DAL Identity

Present

IIW recap

All

• Iain, Steve, Andrew, James attended

• Andrew ran a session of doom and gloom about the future state of ID Verification

  • An overview of the threats and a bit about how ID Verification systems work in today’s world

  • We didn’t hype the AI angle - mostly about how AI is accelerating the threat/attack cycle

• Andrew to post the notes from the IIW session - also links to the Proceedings when they are posted
• Heather to review prior IIW proceedings to see if there are relevant session notes

Dawid overview of prevention solution

Dawid + Gunther

** Slide deck is here:
https://kantara.atlassian.net/wiki/download/attachments/261128280/DAL+Identity_Kantara.pdf?version=1

** A recording of this portion of the meeting.

• “An Identity is proof of existing evidence of a single existing real-world human being”

• Focus on the human - today’s systems focus on the data

• 

• Their focus is to be able to prove assurance of their onboarding processes in a court of law

  • Full audit trail of enrolment and who the agents were

  • (Note on forensics collection (Locard principle) - traces of presence from every interaction)

  • A core part of the solution is a secure physical enrolment device that interacts physically with the person & is controlled by the enrolling agent

• Note that this is similar/same as NIST 800-63 IAL3 enrolment

• Dawid to post definition/description of “forensics” as used in context of the solution

• Concept is to create a single “digital twin” in the system based on physical interaction at enrolment - from live human through deceased human (to prevent “tombstone synthetic identity attacks”)

  • Solution has a single way to enrol so that the digital twin cannot be taken over by an impostor

• The enrolment kiosk creates an authenticated digital twin (biometric data, PII, metadata) - There is also a central reference library of digital twins - from which hashed/tokenized digital twins are published into a more-accessible directory for customers to work with - no PII is distributed outside of the central library

• The person’s data is kept on their own device - a “Verified Trust Exchange” app on the device

• “Forensic Cryptography”

Further discussion on content coverage

All