NIST has developed Identity Assurance Levels (IALs) to illustrate the level of certainty between digital identities claimed online and their real world counterparts. For IAL3, which represents the highest rigor, superior strength identity proofing, document authentication, and biometric comparison are needed to help reduce impersonation and fraud.
TrustSwiftly provides organizations with a FIDO Certified passwordless authentication and comprehensive identity verification solution, helping them meet IAL3 standards and FedRAMP high compliance. By eliminating vulnerable passwords, TrustSwiftly helps reduce cyber liability insurance costs as well as operational expenses.
IAL3 compliant solution
The new NIST 800-63A IAL3 guidelines move away from a singular level of assurance in favor of multiple levels, known as Identity, Authentication and Federated Assertion Levels (IAL), AAL and FAL respectively. Each level measures the confidence with which CSPs can provide information to their recipients while each requires greater rigor and security in verification processes; FAL2 requires use of antiphishing measures like FIDO Passkeys as well as supporting remote identity proofing services.
IAL3 involves an on-site meeting between a representative of a CSP and biometric collection to protect against impersonation attacks and protect against fake or compromised identities. This level of fidelity limits highly scalable attacks while protecting against fake or compromised identities.
TrustSwiftly can assist organizations in meeting NIST IAL3 requirements through chat, video, facial recognition with liveness detection and document authentication. Verifications can be completed either in-person or remotely and tailored by risk level to reduce cyber liability insurance premiums and operational expenses by eliminating password resets - saving businesses the expense and hassle associated with maintaining expensive hardware logistics teams.
IAL3 identity proofing
Identity Proofing by IAL3 is an advanced verification process designed to bind an online identity with physical reality. It involves in-person or remote ID&V with high human oversight; document validation against authoritative sources and biometric comparison with claimed digital identities are among many measures taken during this process that help prevent SIM swaps or MFA bypass attempts.
However, CSPs often find it costly and resource-intensive to employ this form of authentication; its in-person requirement makes it less accessible for users; consequently, it is typically reserved for high-stakes use cases such as accessing sensitive facilities or financial transactions.
IAL3 solutions provide strong protection from sophisticated social engineering attacks using AI-powered tools such as deepfakes and voice clones, while simultaneously decreasing cyber liability insurance premiums and operational costs by decreasing password reset requests. They may also offer in-person or remote IAL3 verification and link biometrics securely with digital identities to reduce impersonation and fraud.
IAL3 verification
NIST publishes standards to serve as benchmarks in an array of business, scientific and technological disciplines ranging from plumbing pressure-loss measurements to chemical element viscosities. Identity proofing is one such discipline; with their
NIST IAL3 verification process providing maximum confidence for claimed digital identities.
For compliance with IAL3 requirements, individuals must interact directly with a verification agent in a physical location - similar to how security guards review identification before admitting people into some offices. Unfortunately, this model is unsustainable for remote-first workforces as the costs associated with flying employees across the country and paying hotels for proofing sessions is no longer cost effective.
TrustSwiftly provides an IAL3-compliant, FedRAMP high solution, with multiple modes such as chat, video, facial recognition with liveness detection and document authentication. Our user-friendly approach decreases impersonation and fraud while decreasing cyber liability insurance costs, operational expenses and attack surface area.
IAL3 authentication
IAL3 authentication is the highest level of identity proofing and verification available, requiring physical presence or special hardware (if appearing remotely) and following a stringent process including document inspections and biometric comparison. This level ensures that claimed digital identities exist in real life and are linked to individuals presenting themselves for verification as well as liveness detection that helps detect any spoofing attacks or presentation attacks that could potentially take place during verification processes.
TrustSwiftly provides an comprehensive IAL3 compliant solution, featuring remote yet supervised IAL3 identity proofing sessions, multiple verification methods such as chat, video, facial recognition and liveness detection to reduce fraud and improve customer experience while decreasing cyber liability insurance premiums and operational costs by eliminating password reset requests. Furthermore, this platform supports mobile devices of various kinds while meeting all NIST compliance standards.
IAL3 solutions are built to securely capture and bind biometrics to verified identities in order to protect against identity fraud such as SIM swaps. In addition, they offer robust phishing resistance - one of the cornerstones of NIST guidelines.
