IAL3 is designed to prevent highly scalable attacks, detect synthetic identities and social engineering strategies and ensure identity proofing takes place at an on-site, in-person session.

CSP should offer trusted referee services to aid with identity verification cases. Trusted referees have been trained and are vetted before making risk-based decisions about an applicant's identity.

IAL3 Compliant Solution

Attaining IAL3 requires more stringency and processes than IAL2. An onsite attended identity proofing session must be conducted by a CSP representative, along with additional steps like biometric data comparisons and verification, verification against vital statistics repositories, checks against vital statistics repositories, etc. These additional compliance steps help reduce potential threats during enrollment and identity proofing processes.

Example: Sending confirmation codes directly to physical addresses are subject to interception by close relatives and close associates, even when encrypted and transmitted over secure channels. Likewise, fingerprint and facial recognition technologies rely on state-of-the-art hardware (devices with high number of pixels that support powerful applications), with all captures stored locally on each device.

TrustSwiftly supports various authentication options that meet these standards, such as FIDO2 security keys, smartcards and Windows Hello for Business authentication methods that meet these standards.

IAL3 Compliant Kiosks

NIST defines Identity Assurance Levels (IALs) to indicate the degree of certainty with which digital identities claim correspond with real identities in real life. They range from Low, Substantial, to High; High requires in-person or on-site proofing as well as stringent evidence validation/comparison and biometric comparison as part of its criteria.

TrustSwiftly helps organizations meet IAL3 through a fully managed service model that leverages chat, video, facial recognition with liveness detection, document authentication and step-up reproofing based on risk, thus minimizing attack surface and eliminating password resets and fraud losses. Visiting the site helps you get knowledge about NIST IAL3 verification quickly.

For enrollees undergoing the IAL3 process, physical presence verification involves being present onsite with their identity documents and being examined by a trained representative examining both face and document examination. For maximum confidence, biometric attributes that capture and verify an enrollee's identity credential - best practices in IAL3 include face, fingerprints and dual iris capture/verification - should also be captured and bound.

IAL3 Compliant Agents

The NIST 800-63A IAL3 Identity Assurance Levels framework offers mitigations against attacks that target enrollment and IAL3 identity proofing processes, from basic to advanced mitigations that become increasingly specialized with each level of assurance.

IAL2 is designed to limit highly scalable attacks and protect against synthetic identities created through compromised personal information. Utilizing multiple NIST IAL3 verification methods (document validation and biometric comparison), its processes help limit how frequently confirmation codes can be utilized.

Attackers have developed sophisticated means to bypass IAL2 mitigations. AI-powered tools like deepfakes and voice clones create near indistinguishable fakes from genuine documents; social engineering tactics such as spoofing are increasingly effective. To counteract these threats, leading IAL3 solutions offer technology-enhanced methods like multispectral UV light analysis to detect fraudulent documents as well as verify the authenticity of identity evidence directly with its source.

IAL3 Compliant Reporting

The National Institute of Standards and Technology's Digital Identity Guidelines establish a set of Identity Assurance Levels (IALs), which describe how much trust a verifier places in an identity-verifying process. Of these levels, IAL3 represents the highest confidence level; typically reserved for sensitive healthcare or financial environments.

NIST 800-63-3 offers three levels of verification, each one more secure than the last: core attributes are verified against authoritative or credible sources and steps are taken to validate identity evidence; it also requires live imagery of users so as to avoid spoofing and presentation attacks.

CSPs in this tier may use non-biometric pathways to verify identities, in which biometric samples are compared manually rather than automatically. This enables methods such as face authentication which combines facial recognition and automated visual verification in order to capture and compare user faces against stored images in order to authenticate identity. Furthermore, according to the IAL3 framework CSPs must communicate their proofing status back to RPs via reliable channels like PKI timestamps.