Identity Verification Methods Identity Verification

E NROLLMENT I DENTITY P ROOFING 19 T hi s pub lic at ion is av a ila bl e f ree o f c h a rge f rom : ht tp s : d oi .or g 10. 6 028 N IS T.S P .8 -6 3a Strength Methods Performed by the CSP Superior • The evidence has been confirmed as genuine by trained personnel and appropriate technologies including the integrity of any physical and cryptographic security features. • All personal details and evidence details from the evidence have been confirmed as valid by comparison with information held or published by the issuing source or authoritative sources. Training requirements for personnel validating evidence SHALL be based on the policies, guidelines, or requirements of the CSP or RP.

5.3 Identity Verification

The goal of identity verification is to confirm and establish a linkage between the claimed identity and the real-life existence of the subject presenting the evidence.

5.3.1 Identity Verification Methods

Table 5-3 details the verification methods necessary to achieve a given identity verification strength. The CSP SHALL adhere to the requirements in Section 5.3.2 if KBV is used to verify an identity. Table 5-3 Verifying Identity Evidence Strength Identity Verification Methods Unacceptable Evidence verification was not performed or verification of the evidence failed. Unable to confirm that the applicant is the owner of the claimed identity. Weak The applicant has been confirmed as having access to the evidence provided to support the claimed identity. Fair • The applicant’s ownership of the claimed identity has been confirmed by: o KBV. See Section 5.3.2 . for more details, OR o a physical comparison of the applicant to the strongest piece of identity evidence provided to support the claimed identity. Physical comparison performed remotely SHALL adhere to all requirements as specified in SP 800-63B , Section 5.2.3, OR o biometric comparison of the applicant to the identity evidence. Biometric comparison performed remotely SHALL adhere to all requirements as specified in SP 800-63B , Section 5.2.3. Strong • The applicant’s ownership of the claimed identity has been confirmed by: o physical comparison, using appropriate technologies, to a photograph, to the strongest piece of identity evidence provided to support the claimed identity. Physical comparison performed E NROLLMENT I DENTITY P ROOFING 20 T hi s pub lic at ion is av a ila bl e f ree o f c h a rge f rom : ht tp s : d oi .or g 10. 6 028 N IS T.S P .8 -6 3a Strength Identity Verification Methods remotely SHALL adhere to all requirements as specified in SP 800-63B , Section 5.2.3, OR o biometric comparison, using appropriate technologies, of the applicant to the strongest piece of identity evidence provided to support the claimed identity. Biometric comparison performed remotely SHALL adhere to all requirements as specified in SP 800-63B , Section 5.2.3. Superior The applicant’s ownership of the claimed identity has been confirmed by biometric comparison of the applicant to the strongest piece of identity evidence provided to support the claimed identity, using appropriate technologies. Biometric comparison performed remotely SHALL adhere to all requirements as specified in SP 800-63B , Section 5.2.3.

5.3.2 Knowledge-Based Verification Requirements