The Green Sheet Online Edition
June 6, 2016 • 16:06:02
Biometrics for enhanced, selfie authentication
Kansas City, Mo.-based EyeVerify Inc. created Eyeprint ID, a biometric technology for smart devices designed to provide password-free authentication by creating a unique key based on a picture of an eye. The patented solution uses existing cameras on mobile devices to capture patterns that match the blood vessels of the eye and other adjacent features of the human eye.
The Eyeprint ID system is used by Wells Fargo & Co., which was an early investor, and other financial institutions including a Utah credit union and a subsidiary of Toronto's Scotia Bank. According to EyeVerify, the software solution is 99.9 percent accurate and can transform a selfie into a unique key to protect digital identities. In less than one second, and without any additional hardware, end users can use embedded Eyeprint ID on connected devices to log into secure websites.
"Consumers increasingly expect things to be easier without sacrificing security," said Tinna Hung, Director of Marketing at EyeVerify. "Eyeprint ID provides a simple authentication experience while maintaining a high level of security."
Signing in by selfie
The company noted that Eyeprint ID can never be lost or stolen because each unique ID is scrambled, encrypted and embedded into connected devices. The solution has greater granularity than face or voice biometrics and is less expensive and intrusive than iris and fingerprint sensors. The biometric uses a high entropy encryption key, which is equivalent to a 50-character password.
"If even one point [of an entropic key] is erroneously selected, then the calculated key will be incorrect," EyeVerify stated. "For someone to brute force the template and start guessing randomly, they would need to guess a perfect 40 points out of the 500 and not miss a single time."
During the verification process, genuine points are extracted from the verification image but masked by a complex shuffling and hashing process that scrambles unique features, making images impossible to duplicate, transfer or reverse-engineer.
To sign in, end-users open the app and select the eye-scan option that positions the phone's camera on the center of the phone or tablet's screen. Users are then directed to look to the side, exposing the blood vessels on one side of the eye. The process is so fast in early testing that some customers were not even aware that anything had happened, according to company representatives.
Unique digital identifier
According to EyeVerify, millions of users are using Eyeprint ID to securely open mobile devices, log into websites and apps and protect mobile payments. The Eyeprint ID SDK enables developers to integrate the biometric with third-party applications to eliminate the need for passwords on apps and devices.
EyeVerify is a member of the FIDO Alliance and International Biometrics and Identification Association. The company mentioned the following additional benefits of its biometric technology:
- Enhanced security, convenience and privacy: Eyeprints are embedded into mobile devices, protecting them from theft and loss. Each ID is unique to the user, and verification takes less than a second. User data never leaves the device and is further protected by high-entropy encryption.
- Software-only, smartphone authentication: Eyeprints are software solutions that are not dependent on specific hardware devices. The solution can be easily integrated into new or replaced iOS and Android hardware devices when necessary.
- Patented Eyeprint technology: Eyeprint is the only biometric solution that uses eye veins and other distinct features of the human eye to create a unique user ID. The core concept was patented in 2008 and additional patents were granted in 2013 and 2014.
- Stability and longevity: Unlike other features of the human body, Eyeprints remain consistent from year to year. The biometric works with or without glasses, red eyes, and settings with low and high lighting.
- Freedom from passwords: Passwords are becoming obsolete in many applications and environments. Biometric solutions are generally more secure than passwords, which can be subjected to hacking and brute force attacks. Eyeprint ID eliminates the need for passwords and is easily accessible on mobile devices.
Website: www.eyeverify.com Contact: sales@eyeverify.com
Whether you want to upgrade your POS offerings, find a payment gateway partner, bone up on fintech regs or PCI requirements, find an upcoming trade show, read about faster payments, or discover the latest innovations in merchant acquiring, The Green Sheet is the resource for you. Since 1983, we've helped empower and connect payments professionals, starting with the merchant level salespeople who bring tailored payment acceptance and digital commerce tools, along with a host of other business services to merchants across the globe. The Green Sheet Inc. is also a proud affiliate of Bankcard Life, a premier community that provides industry-leading training and resources for payment professionals.
Notice to readers: These are archived articles. Contact information, links and other details may be out of date. We regret any inconvenience.
