Complementing Passkeys with Strong Identity Assurance for High-Risk Actions and Account Recovery
summary
A cloudless biometric system transforms a selfie into an opaque cryptographic artifact so no biometric templates ever reside on server or device, using zero-knowledge biometric data and multiparty computation to match in the encrypted domain. A per-device device key pair binds the phone to the account; an ephemeral signing key is reconstructed, used once and discarded. Deployments with tier‑1 banks authenticate step‑ups (example shown: a $120 transfer) in ~300 milliseconds, work with any 720‑pixel+ camera, and cut call‑center recovery cases.
AI-written summary · about
chapters (13)
- 0:00Introduction and speaker welcome
- 0:50Biometric authentication overview
- 2:15Biometric authentication explained
- 3:40Local vs centralized biometrics
- 6:30Challenges with ongoing authentication
- 7:34Zero knowledge biometric authentication
- 9:44Benefits of zero knowledge biometrics
- 11:09Identity lifecycle use cases
- 11:51Enrollment with identity verification bridge
- 14:24Step-up authentication for high-value transfers
- 15:26Account recovery with biometrics
- 17:08Complementing passkeys with biometrics
- 17:48Q&A session
related talks
14mThe challenges of account recovery
21mMaking authentication your competitive advantage under GDPR and PSD2
25mGreat Privacy Challenge for Reusable Identity
22mKeynote, Identity & Authentication in ePromiseland
24mRelying Party Security
16mThe end of forgotten passwords - Biometric Authentication
27mSecure Authentication without the Need for Passwords
28mAuthentication Digital Financial Services