xFace

Our biometric facial authentication is designed to provide maximum security, meet the most stringent regulatory requirements, and minimize the limitations of online offerings by assuring that high-value transactions are protected. Built on proprietary Daon algorithms, driven by AI/ML technology, and secured against presentation and injection attacks, xFace provides optimum protection from identity fraud while keeping customers satisfied by allowing them to complete online tasks safely, and with the ease of use inherent in face biometrics.

Proven accuracy
The AI-powered biometrics matching engine in xFace is NIST-tested for accuracy via the Face Recognition Vendor Test (FRVT) for 1:1 and 1:N identification.

Advanced anti-spoofing technology
Embedded liveness detection is tested
to ISO 30107-3 levels 1 and 2 compliance by iBeta and third-party validated protection against image injection, 3D artifacts, and other attacks.

Enhanced service offerings
Authenticating the individual, versus their device or another proxy, allows for a significant increase in the acceptable risk level of online transactions, creating a better customer experience.

True cross-channel support
Authenticate across mobile, web, and in-person channels with one solution, including push-to-app for contact center.

Full rules engine control
Full visibility into and control of matching probabilities, giving you the power to manage pass/fail rules and balance security with user experience.

Simplified recovery
Accurately authenticate from any device, allowing for secure self-service recovery and new device registration, eliminating operational overhead.

Transaction Data Signing (TDS)
Generate digital signatures that are unique to each transaction based on a data confirmation action on a customer’s mobile device, signed by a private key for maximum transaction security.

Invisible multi-factor
Provide zero friction PSD2 SCA and NIST AAL2-compliant multi-factor authentication via a private key signature passed using FIDO messaging standards.

Uniquely flexible and highly scalable
You choose your configuration: deployed on-premise or in the cloud; matching on-server or on-device; then scale to hundreds of authentications per second.

When a customer attempts to access their account or complete a high-value transaction, from any device, they are asked to scan their face. The interface automatically captures an image, prompting the user to assist in achieving the best quality.

Instantly, the image is processed for presentation and injection attack detection and matched to the biometric template on the secure, encrypted server. If it matches, based on the standards set in the rules engine, the customer is allowed to proceed.

See it for Yourself

Why should I choose server-based biometrics over device-based biometrics?
There are actually a number of reasons that server-based biometrics are preferable to device-based.

The first is control. When you leverage device-based biometrics, you are relying on a third party—the device manufacturer—to capture, store, and match the biometric template, and the user chooses which third party that is. With server-based biometrics, your organization controls everything but the camera.

Next is the security level. Device-based biometrics are authenticating the device, not the individual. Any person who has authorized access to a device also has authorized access to all of its passkeys. Because server-based biometrics are matched to a specific biometric template, every time, no matter what device is being used, the level of assurance is significantly higher.

Which brings us to enhanced service offerings. Because the level of assurance is so much higher for server-side biometrics, the limitations placed on online transactions can be minimized, giving your customers more freedom to do business with you on their terms.

Can I trust that my customer’s biometric data will be safe on a server?
Absolutely. All of our biometric data is encrypted, so even if it was accessed, which has never happened, a key would be required to decipher it. Even if that were to happen, unlike passwords and PINs, biometrics can’t be reverse-engineered in a way that it could be used to gain system access.

Do I need to add a second authentication factor when using xFace?
We always recommend multi-factor authentication for the highest level of security. xFace can leverage private device keys as an invisible authentication factor, as well as a number of other factors available through our xAuth application. It can also be combined with xVoice voice biometrics, which our clients have found to be a winning combination for providing maximum accessibility.