Article -> Article Details

Modern identity platforms based on NIST standards leverage adaptive, continuous verification that eliminates trust shortcuts, mitigates fraud risk and strengthens security posture. They enable organizations to align with xALs and implement Zero Trust for full compliance by eliminating shortcuts.

Evidence provided through an Identity Verification Application is evidence of its real world existence and verifies that an applicant is associated with it. It may include physical interaction or remote supervision.

NIST IAL3 Verification

The nist ial3 verification level represents the highest identity proofing assurance level and requires on-site face-to-face interactions with live agents at secure locations. IAL3 processes use document validation, cross-verification of multiple photo IDs, facial image comparison with liveness detection technology and cryptographic authentication for greater phishing resistance and man-in-the-middle protection.

The NIST 800-63-4 IAL3 update introduces a revised framework and modernized requirements for identity systems, with higher-assurance levels now requiring phishing-resistant methods such as FIDO passkeys for higher assurance levels. Furthermore, its updated granularity feature enables organizations to match assurance levels more precisely to business or security needs.

HYPR's Managed IAL3 Service assists organizations in meeting nist 800-63-4 ial3 compliance by offering remote but supervised fedramp high identity proofing, such as video chatting, document authentication and facial recognition with liveness detection capabilities. Furthermore, step-up reproofing according to risk provides continuous identity assurance rather than simply one point-in-time check.

NIST IAL3 Compliance

NIST SP 800-63-4 represented an unprecedented shift away from checklist-based requirements towards risk-based Digital Identity Risk Management (DIRM), with consideration given to mission delivery, public trust and individual user's privacy/equity considerations. The guide strongly promotes phishing-resistant authentication mechanisms like FIDO Passkeys and verifiable credentials; requires cryptographic binding in federated transactions; integrate subscriber controlled wallets/verifiable attributes into the federation model; as well as phishing resistant authenticators like FIDO Passkeys/credentials etc.

NIST has established Identity Assurance Levels (IALs), which measure confidence that claimed identities correspond with real identities in the real world. Relying parties use these levels to understand the level of rigor applied by CSPs and make informed risk decisions before granting access. IAL1 represents no link to real identities while IAL2 needs some link. IAL3 represents maximum assurance by requiring physical proofing as proof.

NIST IAL3 Fedramp

NIST develops management, technical, and physical standards and guidelines to enable cost-effective cybersecurity in government systems. ITL publishes security guidance through their Special Publications 800-series publication series; including NIST SP 800-63-4 which details an identity and authentication framework.

This new standard establishes higher expectations for protecting digital identity, combatting fraud and building trust online interactions. It establishes identity assurance levels (IALs) with tiered assurance levels to measure how closely claimed digital identities correspond with real identities in reality, as well as requirements for federated authentication and assertions.

Modern identity platforms meet NIST IAL3 compliance mandates through continuous and adaptive verification. They enable multi-factor authentication (MFA) journeys that satisfy IAL2 requirements while also supporting AAL3 hardware-backed authenticators such as FIDO Passkeys for AAL3. In addition, modern identity platforms provide robust cryptographically signed assertions through open protocols to support Federated identity at levels FAL1 through FAL3, meeting NIST compliance mandates while offering excellent user experiences.

High Identity Proofing

Organizations engaged in high-trust digital transactions like employee and customer onboarding, KYC/AML compliance checks, e-commerce or high-value agreements require continuous identity verification for employee and customer onboarding, KYC/AML checks, document authentication and step-up reproofing to meet this demand. Ial3 identity verification software can meet this demand through chat, video, facial recognition with liveness detection and document authentication to meet business and security goals simultaneously while helping reduce cyber liability insurance costs while decreasing operational cost savings by minimizing password resets while simultaneously minimizing attack surface areas.

SP 800-63-3 provides a foundational framework for digital identity, providing assurance levels for federated authentication known as Federation Assertion Levels (FALs). 

FALs enable more precise risk decisions by quantifying confidence that claimed identities correspond with real world identities, providing more precise risk decisions and guidance on incorporating cryptographic bindings into transactions and formalizing user wallets, verifiable credentials and mobile driver's licenses into transactions using FALs with threat modeling methodologies in mind - further protecting against synthetic identities that arises due to synthetic identity attacks or synthetic identities being created through synthetic identities created using synthetic identity methods.Click here or visit our website to find out everything about ial3 identity.