|
Identity Proofing Designed for the Web
“When you are able to deliver strong authentication for millions of users over the Web, the next challenge is determining the actual identity of each user when they register. Anakam.IDP® was designed to offer our customers an ability to expand their existing trusted user-base while controlling the costs of identity proofing and validation.” Bob Castle, VP of Client Delivery, Anakam
Overview
FAQs
|
Anakam developed our identity proofing solution as an extension to our flagship two-factor authentication solution where face-to-face identity proofing is not practicable for your stakeholders. Anakam.IDP® Identity Proofing was developed so that enterprises adopting mass-scale two-factor authentication would now be able to cost-effectively identity proof the initial identity assertion of the end-user. Anakam.IDP specifically covers that gap in many enterprises that adopt strong authentication, but do not have a means to ascertain the validity of the initial claim of identity when conducting a Web transaction.
Unique Identification
Anakam.IDP® Identity Proofing leverages questions and answers to prove that the asserted identity of an individual is authentic. In order to do identity proofing, we make use of data that the end-user did not register. Instead, the identity proofing questions and answers are developed from a variety of sources to maximize the ability to uniquely identify an individual and prevent fraud.
Fully-Integrated Web Service
Anakam.IDP is fully-integrated with the Anakam.TFA® application server such that identity proofing can be conducted coincident with registration for two-factor credentials. No private information from the identity proofing transaction is stored within your enterprise. As a Web service, Anakam.IDP is flexible and dynamic and can be called at numerous points throughout the identity lifecycle or business workflow as required by your enterprise.
A: Even if you have your own identity proofing process in place, you should know that the Anakam.TFA® registration process was designed to be flexible to work with your existing enterprise identity proofing processes as well as those provided by Anakam. Typically, an enterprise has strong identity proofing processes (face-to-face) in place for employees and other internal stakeholders, but seeks to implement a remote alternative for their mass-scale, external stakeholders when other alternatives are not viable.
Q: How does Anakam.IDP® protect the privacy of individuals?A: The Anakam.IDP® Platform pulls data from aggregate providers that use only “top line” public data about individuals like past residences, motor vehicle registration information, demographical information, and credit data. The Web service call you make to our software (which is hosted inside your enterprise), does not store the biographical information provided by the end user, nor does it ever have access to the correct answers. The internal systems only see the aggregate score and business rules on how to “handle” someone based upon their score.
Q: Does the Anakam.IDP® Identity Proofing work with the Anakam.TFA® Two-Factor Authentication Platform?A: Yes. The Anakam.IDP® platform is fully integrated with the Anakam.TFA® environment giving customers a seamless platform to establish and validate users with strong, two-factor authentication techniques. This integrated platform reduces the need for multiple products and allows for a transparent online interface for end user customers doing business with you. Further, Anakam.IDP® is a Web service hosted within your enterprise that can be invoked at any point in the identity management process based upon your business rules including registration, benefits issuance, or even reset.
Q: Do I have to ask my users for their Social Security numbers?A: No, the Anakam.IDP® system can use the combination of a name and current address together to determine the individual's profile and present the life questions to the individual for verification. This encourages a high adoption rate which reduces costs associated with establishing the initial relationship.
Q: How many questions are presented to the end user for validation?A: The Anakam.IDP® Identity Proofing Platform can be customized to have the lowest impact on your customer base and encourage online usage without compromising security. The challenge level can be set to meet the internal security policies set by your organization. The platform can be adjusted to present a stronger challenge to the user and increase the likelihood the user is who they say they are while protecting critical information. Best practices have been established based upon risk, business needs, available data sets, and the demographic base of the target audience – Anakam’s professional services team can help provide support in deciding the best strategy to meet your business needs.
Q: How are questions selected?A: Identity Proofing data is selected based on top-of-mind questions that are intuitive for the valid user while being presented in a way that is difficult for fraudsters to research and defeat within that session. Having more questions available does not necessarily mean the identity proofing is better – more questions about the same data element actually diminishes the value of the application. Alternatively, more data upon which to ask questions increases the variety and flexibility of the enterprise.
Q: How long does it take to complete Identity Proofing?A: Identity Proofing with Anakam.IDP® usually takes as little as 40 seconds for a user to complete and usually will only have to be done once to establish the identity of that user. We then leverage Anakam.TFA® on an ongoing basis to provide a secure mechanism to bind the identity that was proofed during the original transaction to future enterprise transactions.
Q: What is the difference between Anakam.IDP® Identity Proofing and Anakam.IDV® Identity Verification?A: The Anakam.IDP® Identity Proofing develops a series of Life Questions and presents them to the end user in order to assert that the individual is who he or she claims to be; this is part of building a trusted identity. Anakam.IDV® Identity Verification is a passive system in which the credentials presented are checked against a database of public information to determine the validity of the credentials presented and requires no interaction from the user unless they are invalidated. Anakam.IDP®returns a pass/fail score based upon a set of business rules you establish, whereas Anakam.IDV® returns a score that indicates the level of identity fraud risk associated with the asserted identity. Anakam.IDP® is typically invoked once in the customer lifecycle - during customer registration, but Anakam.IDV® can be invoked any time the enterprise wants to measure risk associated with the asserted identity and does not require resubmission of biographical details IF the enterprise maintains the information.
Q: What is the best application of Identity Proofing?A: One of the best applications of Anakam.IDP® Identity Proofing is for online users who cannot be verified through face-to-face interaction, such as new employees going through the hiring process. This is a cost-effective approach to processing large user bases where establishing the initial relationship with a specific individual is critical - since you will be giving them access to their private data or other sensitive information such as: health records, tax records, beneficiary information, financial account data, or information sharing systems.