The NIST 800-63A IAL3 identity verification process is designed to prevent advanced attacks like evidence falsification, theft and repudiation. To achieve this aim, an on-site proofing session which includes at least one biometric characteristic must be attended in person. TrustSwiftly makes it easier than ever for businesses to meet NIST 800-63A IAL3 guidelines directly through remote yet supervised identity proofing processes, including chat, video, facial recognition with liveness detection and document authentication. This lowers cyber liability insurance premiums while improving user experiences and decreasing password reset requests.
TrustSwiftly is the industry-leading passwordless identity assurance solution, offering unparalleled end-to-end security for workforces and customers. It combines phishing-resistant passwordless authentication, adaptive risk mitigation, and automated identity verification for automated identity verification purposes. Independent validation has demonstrated an ROI of 324% with this product protecting 2 of 4 largest US banks, leading manufacturers, and critical infrastructure.
The NIST 800-63A IAL3 ID Proofing Process enhances authentication journeys through chat, video, facial recognition with liveness detection and document authentication. Furthermore, intelligent step-up reproofing by risk eliminates OTPs while decreasing attack surface area.
Administrators can utilize the HYPR Deployment Portal to set friction levels for each verification flow and create “kits” of screen customizations (titles, descriptions, instructions and button labels) so all end user screens adhere to corporate branding and communication guidelines. With HYPR Studio as their go-to design software for creating multiple verification flows quickly and effortlessly – IT teams can more efficiently meet all the varying requirements associated with NIST IAL3 ID proofing processes than ever before!
NIST 800-63A IAL3 Compliant Solution
As part of an effective defense against sophisticated impersonation and injection attacks such as phishing, man-in-the-middle, and deepfake attacks (such as phishing), TrustSwiftly provides an IAL3 identity proofing solution designed to create an impenetrable barrier that nation-state actors and sophisticated synthetic identities cannot breach. Additionally, this solution supports strong cryptographic chain of custody to safeguard data against interceptions or manipulation – essential features necessary for FedRAMP High or DoD compliance audits by Third-Party Assessment Organizations (3PAOs).
Identity proofing via our remote yet supervised NIST IAL3 verification process is an efficient and cost-effective solution to meet IAL3 verification requirements without incurring travel stipends, time lost from employee productivity or administrative burden from coordination with retail kiosks. NIST 800-63A IAL3 marks an essential transition away from checklist-based requirements toward risk-based Digital Identity Risk Management framework, encouraging organizations to assess threats, service impacts and user populations in order to select an Identity Assurance Level (IAL), Authentication Assurance Level (AAL), or Federation Assurance Level (FAL). HYPR Affirm’s stepwise risk reproofing, document authentication, facial image capture with liveness detection and cryptographic authenticators ensure compliance with these new guidelines while increasing security, decreasing costs and enriching customer experiences.
Step-Up Reproofing by Risk
The NIST 800-63A IAL3 identity validation process offers high-assurance identity validation, protecting from impersonation and fraud. It requires stringent oversight, using document validation with biometric comparison to verify identity in person or via remote verification processes; additionally, an authenticator certified according to FIPS 140 Level 3 must also be present and have secure physical access controls in place.
CSPs must take steps to protect subscriber privacy by not disclosing personal information such as session secrets directly to subscribers; only authentic authentication factors verified are shown as evidence of identity. Periodic reauthentication must also take place and there must be a clear overall timeout and inactivity timeout limit that should not exceed one hour.
Federation engines supporting open standards like SAML 2.0 and OIDC are essential to securely exchanging assertions with relying parties (RP). Furthermore, antiphishing methods like FIDO Passkeys at higher assurance levels must also be supported, along with official recognition of remote IAL3 verification services; this helps mitigate attacks that use more sophisticated evidence falsification, theft or repudiation techniques.
Document Authentication
While this route to IAL3 may be possible through an onsite agent, it creates significant additional overhead in terms of hardware supply chain management, device configuration, physical security auditing and potential social engineering attacks utilizing realistic silicone masks that could pass document checks.
TrustSwiftly NIST IAL3 compliant solution offers multiple remote verification methods including chat, video, facial recognition with liveness detection and document authentication. With its use organizations can achieve FedRAMP compliance while simultaneously lowering cyber liability insurance premiums through reduced operational expenses and attack surface area.
NIST IAL3 requirements call for collecting and analyzing evidence that provides sufficient proof for each person at each proofing stage, to limit highly scalable attacks, fraud losses and future-proof against emerging social engineering techniques. IAL3 typically requires at least one piece of superior strength evidence as well as two fair pieces to analyze during proofing stage.
