Secure identity proofing workflows built on NIST 800-63A IAL3

IAL3 is the highest assurance level available, which requires in-person identity proofing with verified biometrics and evidence validation, to give an relying party the confidence that they are dealing with genuine, real identities - protecting against impersonation or fraud.

TrustSwiftly, their scalable IAL3 solution, supports chat, video, facial recognition with liveness detection and document authentication, step-up reproofing according to risk and NIST guidelines, step reproofing capabilities as well as step up reproofing functionality.

IAL3 Compliant Solution

The NIST 800-63A IAL3 guidelines establish technical requirements for enrolling and identity proofing to authenticate individuals at various assurance levels, with emphasis placed on authentication protocols, management processes, federation and assertions. They replace sections from NIST Special Publication 800-63-2 that previously existed within these regulations.

Traditional in-person NIST IAL3 verification can be costly and slow for remote workforces. Trust Swiftly's hardware-based remote IAL3 solution meets NIST standards while saving companies money while helping reduce security risks and satisfy auditors.

TrustSwiftly IAL3 process is quick and straightforward. We provide custom built kiosks or turnkey kits ready to deploy for any use case imaginable, attended by agents who can see and interact with applicants during each step of IAL3 in real-time, performing document authentication, facial recognition with liveness detection and chat with them in order to confirm their identity.

IAL3 Identity Proofing

Identity Assurance Level 3 (IAL3) represents the highest level of assurance that the person presenting themselves is who they say they are, through on-site attended identity proofing or remote IAL3 identity proofing with stringent oversight. It provides optimal protection against impersonation and fraud that could cause significant financial harm for RPs and their customers.

To meet IAL3 requirements, your solution must use advanced liveness detection, document authentication and biometric comparison technology to confirm that an enrollee is who they claim they are. Furthermore, you must securely bind their verified biometrics with an authenticator in order to prevent SIM swaps or MFA bypass attempts.

TrustSwiftly's cost-effective and scalable IAL3 solution utilises mobile and kiosk devices to facilitate on-site or supervised remote proofing for digital services, providing protection from attacks while simultaneously minimizing customer inconvenience and administrative costs. Furthermore, TrustSwiftly's IAL3 verification service features strict chain of custody protocols and anti-spoofing safeguards as well as extensive auditing.

IAL3 Remote Proofing

Trust Swiftly's IAL3 verification can net you a lucrative $100,000 bounty if you can successfully pass. In order to qualify, however, as a lone threat actor working within the US and demonstrating advanced spoofing techniques.

NIST IAL3 standards mandate on-site proofing agent interaction, meaning someone will examine your identity documents, capture biometric data and compare this to your facial portrait captured through digital imaging technology. Unfortunately this process can be costly and the proofing agent needs to be present during certain hours in order to be efficient.

Leading IAL3 compliant solution provide a superior user experience and protect against sophisticated attacks with advanced document verification methods such as multispectral UV light analysis and facial recognition with liveness detection, as well as step-up reproofing based on risk to protect registered providers (RPs) from impersonation and fraud. They may also include hardware-backed authenticators that meet IAL3 requirements that provide verifier impersonation resistance; these features are vital in protecting RPs from impersonation through social engineering tactics or other threats.

IAL3 Compliance

As more services move onto digital platforms, identity proofing requirements such as those established in NIST 800-63A IAL3 become essential in providing assurances about who accesses them. Attending on-site attended sessions with a CSP representative for identity proofing sessions increases confidence that claimed identities match real world identities; providing protection from fraud or impersonation attempts by fraudulent individuals.


TrustSwiftly's IAL3 compliant solution is both secure and user-friendly. By using a kit with an onboard device, remote employees can complete an IAL3 session with a trusted agent who reviews the onboard device, captures liveness detection facial recognition with facial capture technology, and scans documents.

Once an IAL3 session has concluded, an authenticator is bound to that verified identity to prevent stand-in attacks and limit more complex social engineering techniques like evidence falsification, theft and repudiation. Furthermore, this reduces cyber liability insurance costs as well as operational expenses associated with password resets.

Posted in Default Category 2 hours, 26 minutes ago

Comments (0)

No login