Toward Higher Levels of Assurance in Remote Identity Proofing

Abstract

Identity proofing is often a prerequisite for accessing important services (e.g., opening a bank account). The current pandemic has highlighted the need for Remote Identity Proofing (RIDP) that can enable applicants to prove their identity from anywhere, without the need for a special facility. However, the requirements set out by the National Institute of Standards and Technology (NIST) for the highest level of assurance in RIDP systems currently rule out fully automated and remote solutions, as they are not yet foolproof. This article aims to propose a way forward for pervasive RIDP solutions and highlights the requirements for accomplishing the highest level of assurance in verifying identity. We pinpoint relevant issues and threats along with the current state-of-the-art countermeasures and discuss what else needs to be done to enable ubiquitous remote identity-proofing systems.