The Green Sheet Online Edition

June 27, 2016 • Issue 16:06:02

New Products

Biometrics for enhanced, selfie authentication

Product: Eyeprint ID
Company: EyeVerify Inc.

Kansas City, Mo.-based EyeVerify Inc. created Eyeprint ID, a biometric technology for smart devices designed to provide password-free authentication by creating a unique key based on a picture of an eye. The patented solution uses existing cameras on mobile devices to capture patterns that match the blood vessels of the eye and other adjacent features of the human eye.

The Eyeprint ID system is used by Wells Fargo & Co., which was an early investor, and other financial institutions including a Utah credit union and a subsidiary of Toronto's Scotia Bank. According to EyeVerify, the software solution is 99.9 percent accurate and can transform a selfie into a unique key to protect digital identities. In less than one second, and without any additional hardware, end users can use embedded Eyeprint ID on connected devices to log into secure websites.

"Consumers increasingly expect things to be easier without sacrificing security," said Tinna Hung, Director of Marketing at EyeVerify. "Eyeprint ID provides a simple authentication experience while maintaining a high level of security."

Signing in by selfie

The company noted that Eyeprint ID can never be lost or stolen because each unique ID is scrambled, encrypted and embedded into connected devices. The solution has greater granularity than face or voice biometrics and is less expensive and intrusive than iris and fingerprint sensors. The biometric uses a high entropy encryption key, which is equivalent to a 50-character password.

"If even one point [of an entropic key] is erroneously selected, then the calculated key will be incorrect," EyeVerify stated. "For someone to brute force the template and start guessing randomly, they would need to guess a perfect 40 points out of the 500 and not miss a single time."

During the verification process, genuine points are extracted from the verification image but masked by a complex shuffling and hashing process that scrambles unique features, making images impossible to duplicate, transfer or reverse-engineer.

To sign in, end-users open the app and select the eye-scan option that positions the phone's camera on the center of the phone or tablet's screen. Users are then directed to look to the side, exposing the blood vessels on one side of the eye. The process is so fast in early testing that some customers were not even aware that anything had happened, according to company representatives.

Unique digital identifier

According to EyeVerify, millions of users are using Eyeprint ID to securely open mobile devices, log into websites and apps and protect mobile payments. The Eyeprint ID SDK enables developers to integrate the biometric with third-party applications to eliminate the need for passwords on apps and devices.

EyeVerify is a member of the FIDO Alliance and International Biometrics and Identification Association. The company mentioned the following additional benefits of its biometric technology:

• Enhanced security, convenience and privacy: Eyeprints are embedded into mobile devices, protecting them from theft and loss. Each ID is unique to the user, and verification takes less than a second. User data never leaves the device and is further protected by high-entropy encryption.
• Software-only, smartphone authentication: Eyeprints are software solutions that are not dependent on specific hardware devices. The solution can be easily integrated into new or replaced iOS and Android hardware devices when necessary.
• Patented Eyeprint technology: Eyeprint is the only biometric solution that uses eye veins and other distinct features of the human eye to create a unique user ID. The core concept was patented in 2008 and additional patents were granted in 2013 and 2014.
• Stability and longevity: Unlike other features of the human body, Eyeprints remain consistent from year to year. The biometric works with or without glasses, red eyes, and settings with low and high lighting.
• Freedom from passwords: Passwords are becoming obsolete in many applications and environments. Biometric solutions are generally more secure than passwords, which can be subjected to hacking and brute force attacks. Eyeprint ID eliminates the need for passwords and is easily accessible on mobile devices.

Website: www.eyeverify.com Contact: sales@eyeverify.com

The Green Sheet Inc. is now a proud affiliate of Bankcard Life, a premier community that provides industry-leading training and resources for payment professionals. Click here for more information.

Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.