What is Digital Identity Verification?

Multi-layered identity verification leverages a multi-tiered approach to deliver accurate, effective verification at each step of the buyer’s journey. For instance, progressive onboarding begins with a passive, low-touch verification check followed by a deeper check at onboarding. Understanding the different types of identity verification and their uses ensures a robust defense against identity fraud.

Identity verification can include:

• Socure Verify: A system that uses advanced machine learning to authenticate individuals and accurately detect identity fraud in real time.
• Document Verification: Document verification involves validating the authenticity of documents connected to a person’s identity which may include utility bills, business forms, or other related documents. This form of verification is typically combined with an ID verification to confirm an individual’s identity.
• Identity Document Verification (ID Verification): In this case, ID verification refers to a specific ID document or credential that can be checked as the primary stage of ID verification and is followed up by biometric verification and liveness detection.
• Email verification: Ensures the accuracy, legitimacy, and risk factors associated with the email address provided during registration or account setup processes.
• Phone verification: Phone verification looks at the phone number to look for risky factors or previously associated fraud, prior to using that number to confirm the ownership of a phone number and its connection to an individual.
• Fraud checks: Fraud checks, like Sigma Identity Fraud, employ advanced algorithms and data analysis to detect suspicious activities and patterns indicative of identity fraud or fraudulent transactions.
• eCBSV: Electronic Consent-Based Social Security Number Verification (eCBSV) is a service that verifies Social Security numbers (SSNs) to prevent identity theft and fraud.
• Device and behavioral analytics: These analytics use data from user devices and behavior patterns to assess the legitimacy of user activities.
• Knowledge-Based Authentication (KBA): KBA systems include passwords, PINS, and personal identity questions, all of which can easily be hacked or guessed with social engineering. Going beyond KBA with better alternatives like Socure is safer for organizations and their customers.

There are several regulations and standards related to identity verification practices,each with specific requirements and purposes to ensure the security, integrity, and reliability of the identity verification process. Here’s an overview of several key regulations and standards:

1. NIST PAD Level 2: National Institute of Standards and Technology (NIST) Presentation Attack Detection (PAD) Level 2 certification focuses on liveness detection to thwart spoofing attacks. It is designed to differentiate between genuine users and fraudulent attempts using various tactics, such as 3D printers, masks, or dolls. Compliance with this standard ensures that identity verification methods can effectively distinguish between real users and impersonators, bolstering security.
2. NIST IAL 2: NIST Identity Assurance Level 2 (IAL 2) is a standard for identity proofing that sets criteria for verifying an individual’s identity. It involves multifactor authentication and rigorous identity validation processes. Complying with NIST IAL 2 ensures a higher level of confidence in the accuracy of the verified identity, making it essential for secure digital transactions.
3. WCAG 2.1 Level AA: The Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standard focuses on making digital content more accessible to individuals with disabilities, including those using mobile devices. Adherence to these standards is crucial to ensure that the verification process is user-friendly and accessible to all, enhancing the inclusivity and flexibility of digital identity verification.
4. Soc2 Type 2: System and Organization Controls 2 (SOC 2) is a framework designed for service organizations to demonstrate their commitment to the security, availability, processing integrity, confidentiality, and privacy of customer data. Soc2 Type 2 certification ensures that organizations handling identity data maintain high levels of security and data protection throughout their operations.
5. ISO Standards: International Organization for Standardization (ISO) standards encompass a wide range of criteria for various industries. In the context of identity verification, ISO standards relate to information security, data protection, and risk management.

Socure’s Predictive DocV Platform meets all industry security standards, including System and Organization Controls (SOC) 2 Type 2 mapped to HITRUST, and International Organization for Standardization (ISO) 27001, 27017, 27018, 27701, which enhances the ability to protect PII in accordance with applicable policies.

Other security standards that Socure meets include Anti-Money Laundering Directive 5 (AML 5) – designed to prevent money laundering and terrorist financing – and Customer Identification Program (CIP) – the component of AML regulations that require financial institutions to verify the identity of their customers before providing certain financial services.

Learn more about what Socure’s DocV solution can do for your organization’s security!