Document Authenticity
Building confidence in eIDV document authenticity through trusted assurance services.
Document authenticity detection is a necessary part of many eIDV processes. BixeLab supports testing of a wide range of documents across many countries and types.
BixeLab helps users manage the performance trade-off between detecting fraudulent presentations of documents and accepting legitimate users. This is of high importance when using such processes for new customers.
What Is Document Authenticity Detection Testing?
Many eIDV processes involve the user capturing an image of a trusted identity document, typically issued by a government. Passports, driver licences, age assurance cards are all common choices for such purposes. In some circumstances, documents from a foreign nation are accepted – for instance, when permitting bank account opening before a person emigrates to a new nation.
Such image capture contains obvious risk: what if the person uses a falsified document? Most eIDV systems include a component to perform document authenticity detection as a protection against such misuse. These systems use various security features of the document in question, along with other environmental information from the capture device, to assess whether the document is genuine.
As with biometric systems, a natural question arises: how well does this detection process work? This can be tested using various attack vectors, along with genuine document presentations to ensure that the system is configured to make appropriate trade-offs in production use.
Benefits of Testing Document Authenticity Detection
Operational Readiness
Ensure systems function fairly in the actual environments where they are deployed.
Regulatory Assurance
Meet technical standards and framework requirements for resistance to attack in key use scenarios.
Maintain Public Confidence
Deliver public services with independent assurance that identity is being securely managed.
What Can Be Tested for Document Authenticity?
A wide range of document types and issuing nations – BixeLab has an extensive library and can recruit other types on request
Different capture device types, operating systems and software models (e.g., web-based vs native app)
Checking that chip signatures on signed documents like passports are being validated
Hand-generated and AI-generated document images
Protections against injection attacks for falsified documents
Assessments of image quality where images are being collected from scans of photo identification documents
Variability across different documents and devices to form a complete view of risks presented
Capability of human identity resolution personnel in detecting fraudulent documents
Conformance to relevant identity frameworks such as the FIDO document authenticity requirements
Our Capabilities
BixeLab offers trusted expertise in real-world testing and assurance relating to document authenticity detection.
Our services include:
-
In-laboratory and remote recruitment of testers for document authentication processes
-
Many types of attack instrument, with different types of alterations and sophistication of artefact
-
AI-generated and in-service artefacts as available
-
Resistance to both presented and injected document images
-
Throughput and user experience assessment
-
Advisory on deployment strategies and failure mitigation
-
Risk assessment for onboarding systems
-
Training support via BixeAcademy
Why Choose BixeLab?
Q: Can you simulate real-world environments for testing?
Yes. We recruit external volunteers to complete your as-built processes in real-world environments.
Q: Can you test for AI-generated attacks?
Of course. Especially for digital services applications, AI-generated attacks are an increasing risk to identity systems.
Q: What types of clients use this service?
Digital identity users, banks, telcos and system integrators rely on our assurance services for document authenticity.