The IDVerse team was real, live, and present at the recent Identity Week America conference in Washington, DC, this past September 11-12.
As is the case for most shows of this nature, while some insight into current trending topics is gained from attending panels and roundtables, many key learnings take place on the show floor in conversations with prospects, clients, and partners that are in attendance. Below are some highlights from the week.
Deepfake documents cause Tylenol sales to spike
The IDVerse booth display opted away from flashy screens (please, not another screen) and spin-the-wheel setups to win a pair of socks.
We focused on two words on our wall: Deepfake Defender.
A bit of context for this choice of language: Since 2015, IDVerse has seen firsthand a steep increase in generative AI presentation and injection attacks. There has been a steady improvement of the quality and sophistication of synthetic imaging over this period, not only for the purpose of “liveness” impersonation, but significantly for synthetic identity documents.
To clarify, a synthetic ID is a computer-generated rendering of an ID document that is uploaded by a fraudster as a substitute for a physical ID document.
What does a “steep increase” mean? Based on transactions that we have processed over 2023 and 2024, the percentage of generative AI fraudulent attempts has increased from 18% to 34% of all fraud attempts.
Document authentication a major topic
Back to the conference. There was an overwhelming number of attendees who stopped to ask about how we are dealing with deepfake injections and presentations. This included representatives from federal—notably, the Transportation Security Administration (TSA) and Department of Homeland Security (DHS)—as well as state agencies and well-known fellow IDV service providers. These individuals shared with alarm the number of fraudulent documents that pervade their ecosystems through weakness in early IDV detection of synthetically generated ID documents.
One of the challenges in this context, outside of many lacking the tech tool to combat synthetic IDs, is that the standards to test the required document authentication strength are still a work in process. The FIDO Alliance is the most notable organization to launch a DocAuth certification program. However, even with the best of intentions, there is a gap in their standards to validate document “liveness.”
This means that synthetic IDs can continue to pass through an IDV service, with no prescriptive measures on how to detect such a risk.
In our opinion, this shortcoming in the industry will be picked up quickly—within two years—as a priority for standards bodies, such as the National Institute of Standards and Technology (NIST). We hope the result will be a significant raising of the bar to enable relying parties, end users, and other participants (with legitimate motives) of the ecosystem to better counter the deepfake threat.
Digital identity is a step away from tomorrow
While this was discussed less on the show floor, digital IDs (such as mobile drivers licenses, or mDLs) was a very hot topic on panels.
IDVerse participated in one such conversation, led by the American Association of Motor Vehicles (AAMVA) and featuring co-panelists from the TSA, Maryland Department of Transportation (MDOT), Georgia Department of Driver Services (GDDS), and GlobalPlatform.
Some cores topics included:
- The number of US states implementing mDLs is rapidly increasing. According to AAMVA, there are 10 states with an interoperable implementation in effect and 13 states with an interoperable implementation in progress.
- The TSA is proposing a rule to allow mDLs to be used at TSA checkpoints after the REAL ID deadline of May 7, 2025. This would temporarily waive the requirement that mDLs be compliant with REAL ID requirements to be accepted by federal agencies as well as promote better usage of the mDL as an IDV source “document.”
- Current released standards (such as ISO 18013-5) for the use of mDLs relate to in-person presentation. This has dampened both relying party and end user uptake. This use case will soar when remote standards (specifically, the WIP of ISO 18013-7, OpenID4VC, and W3C) and interoperability functionality are finalized and launched into the market.
From the perspective of IDVerse, as a vendor in the identity verification (IDV) space, our key value in the digital ID ecosystem will include optionality for relying parties to receive a physical ID or mDL, with seamless access to services and benefits for their end users, and no compromise in UX. Plus strict protections around privacy and security.
Identity in flux
Identity Week 2024 highlighted the transformative shifts occurring in IDV. Generative AI, manifested through the surge of deepfakes and synthetic IDs, is compelling the entire industry to reassess fundamental concepts of identity. At the same time, the momentum behind mobile driver’s licenses signals a potential departure from traditional physical identification.
These parallel trends are reshaping the landscape for all players in the identity space. Companies are now tasked with developing solutions that address current synthetic document threats while also preparing for a future where digital credentials may become the norm.
With technology advancing by the day, the challenge lies in creating systems that are not only secure against sophisticated fraud but also user-friendly, respectful of privacy, and highly secure. The coming years will likely see continued innovation as the industry strives to strike this delicate balance.
Ultimately, the goal across the board remains consistent: to establish a framework where identity verification is seamless, secure, and trusted. The future of identity is being written right now.
About the post:
Images and videos are generative AI-created. Prompt: An intricate, hyperrealistic miniature version of The US Capitol. Soft, warm lighting creates a cozy atmosphere. Highly detailed, with a balance of realism and whimsy. Isometric view to show multiple sides. A smiling young girl stands towering over the model. Photorealistic style with a touch of tilt-shift effect. Tools: Midjourney, Luma.
About the author:
Terry Brenner is the Head of Legal, Risk, and Compliance for IDVerse Americas. He oversees the company’s foray into this market, heeding to the sensitivities around data protection, inclusivity, biometrics, and privacy. With over two decades of legal experience, Brenner has served in a variety of roles across a diverse range of sectors.
