IEEE Consumer Electronics Magazine - January/February 2024 - 65

developing a single digital market across member
states. eIDAS allows alternatives to in-person
requirements for identity proofing for issuing
qualified certificates and permits remote identity
proofing. However, a precondition is that the
employed method should provide an equivalent
level of assurance that is reliable and confirmed
by a conformity assessment body and is acceptable
at the national level.
From in-Person to Remote
In today's increasingly digitized and pandemic-adjusted
world, the demand for RiDP is
understandably growing. In addition to being
more convenient, it also promises to be less
time and resource-intensive. An automated process
that can be done from anywhere would
eliminate the need for appointment booking or
travel by the consumer, while also reducing
costs for service providers associated with
human operators, dedicated buildings, or onsite
infrastructure. As shown in Table 1, however,
the current processes and methods of identity
proofing remain resource-heavy, inefficient, and
in many cases impractical or even impossible
(e.g., where travel has been prohibited under
lockdown restrictions). Given these considerations,
some alternative RiDP methods that use
video streaming have been recommended.
Video With Operator: This system generally
relies on 1) a computer or smartphone with an
embedded camera and microphone for collecting
and recording identity evidence and 2) a
trained operator who takes part in a live identification
process by engaging the applicant in a
monitored dialog, which is then assessed by a
verification system.
Remote Automatic: In this system, live interaction
between the operator and applicant is not necessary,
as all relevant data are collected and
verified by software. Again, the process uses a digital
camera (and microphone, if required) on the
applicant's side. On the back end, various technologies,
such asmachine-readable zone (MRZ) recognition,
biometrics verification, and liveness detection
are used to carry out real-time verification.
Electronic Identification: This model involves
identification and authentication by a third party.
The process is defined under ENISA's " eIDAS
Compliant eID Solutions. " 1 The popular protocols
January/February 2024
used for eID include OpenID connect, i.e., an
authentication layer on top of OAuth 2.0, which
enables verification of different applications that
leverage the authentication performed by the
authorization server to obtain the applicant's
basic information. Another potential option for
eID could be FIDO2.
Certification Based: This system is based on an
internal or third-party trust service and the corresponding
evidence provided by this service, generally
in the form of certificates for electronic
signatures or seals. The applicant's data are
retrieved from the certificate, and the interaction
of the verification system with trusted services is
limited to certificate revocation checks.
In common practice, RiDP systems use a combination
of two (or more) existingmethods to achieve
a higher assurance level than that assigned to an
individual system. Using a combined system provides
redundancy in addition to cross-verification.
Application and Benefits of RiDP
RiDP can benefit a wide range of industry sectors
that require secure identity verification for
remote transactions and interactions. For
instance, RiDP can assist financial institutions,
education, e-commerce, and healthcare service
providers in onboarding new users (i.e., customers,
patients, and/or students) remotely or help
with the verification and proof of existing users'
access to relevant services. Additionally, it may
be used as a means of validating electronic identity
(eID) issued by various government entities.6
In summary, RiDP can be used to reduce the
risk of fraudulent activities and unauthorized
access, and also function as a validation mechanism
for users when setting up MFA, thus providing
additional protection for both users and the
organizations providing these services.
CHALLENGES OF RIDP
Existing Guidelines for Remote ID Proofing
Table 1 indicates that the highest level of
assurance (i.e., IAL3) in identity proofing currently
requires the applicant's presence at a service-provider
facility or location,or a serviceprovider
kiosk.2 These presence requirements
are generally referred to as supervised remote
(or supervised remote in-person) in the
65
IEEE Consumer Electronics Magazine - January/February 2024

Table of Contents for the Digital Edition of IEEE Consumer Electronics Magazine - January/February 2024
