Netidee Blog Bild
Further development of age verification
Trusted Age as self-hosted age verification to protect privacy (19.12.2024)
Förderjahr 2023 / Projekt Call #18 / ProjektID: 6884 / Projekt: Trusted Age

A lot has happened in the field of age verification since the last interim report! Trusted Age's solution has been given new functionalities that make the entire verification process more user-friendly and secure.

Live feedback for ID scan

The verification process has now been fully implemented in a first version in the frontend. Users can now scan their documents for age verification and receive direct live feedback to ensure the quality and legibility of the document. This ensures that all relevant data on the ID card is clearly captured before it is securely transmitted to the backend. This significantly increases the user-friendliness of the application.

 

Liveness check with biometric recognition

After successful document verification, in which the user's age is read out, a liveness check follows, in which the use of the secondary camera and biometric recognition confirms that it is a real person carrying out the verification. A profile picture of the user is also created, which can later be compared with the picture on the ID card.

 

Reading out documents by type

Users now also have the option of selecting the country in which the ID card was issued. This information helps to optimise the requirements depending on the document type and country of issue in order to improve recognition and validation.

 

UX update: flow design

The app's new flow design ensures that users can return to the current status of the verification process at any time if they are interrupted. Whether it's email verification, proof of age or final Liveness verification, users are always guided to the correct point in the process.

 

Outstanding challenges

Despite this progress, there are still challenges that we will tackle in the coming weeks in order to be able to offer a functional and self-hosted age verification for first ID card types:

  1. Flexible integration into existing platforms: The integration of Trusted Age into various platforms is a process that needs to be customised to the requirements of the respective operators. It must be possible to integrate Trusted Age flexibly and securely at the same time.
  2. User-friendliness and data protection in harmony: The use of a decentralised zero-knowledge approach requires the download of an app. The aim of Trusted Age is to verifies the age of users without compromising on user privacy and usability. Methods are currently being investigated that may be able to fulfil the principles of a zero-knowledge proof without the need to download an app.
  3. Meet regulatory requirements: We are currently testing out various tools to read, compare and analyse id documents and liveness checks. On the one hand, they should offer convenience and minimise security risks in the long term, thus comply with the law.

 

Outlook for the next steps

As a next step, the Trusted Age team is working on further addressing the challenges mentioned. For example, a concept for improved token management is currently being developed to enable time-limited tokens. In addition, a solution for domain-specific token usage is being examined to ensure that user verifications are only recognised on authorised platforms.

 

Conclusion

Trusted Age aims to provide a well thought-out, secure and privacy-friendly age verification solution that is fair to platform operators and users alike. It shows that we have already taken big steps, but we still have questions to answer.

Tags:

Altersverifikation Trusted Age
CAPTCHA
Diese Frage dient der Überprüfung, ob Sie ein menschlicher Besucher sind und um automatisierten SPAM zu verhindern.
    Datenschutzinformation
    Der datenschutzrechtliche Verantwortliche (Internet Privatstiftung Austria - Internet Foundation Austria, Österreich) würde gerne mit folgenden Diensten Ihre personenbezogenen Daten verarbeiten. Zur Personalisierung können Technologien wie Cookies, LocalStorage usw. verwendet werden. Dies ist für die Nutzung der Website nicht notwendig, ermöglicht aber eine noch engere Interaktion mit Ihnen. Falls gewünscht, können Sie Ihre Einwilligung jederzeit via unserer Datenschutzerklärung anpassen oder widerrufen.