Identity Proofing and Verification Flashcards

NIST SP 800-63A's IAL3 (Identity Assurance Level 3) requires which verification method not mandated at IAL2?

Answer: In-person proofing with a trained operator or Trusted Referee

IAL3 requires in-person proofing (or an equivalent supervised remote session) conducted by a trained operator, providing the highest level of confidence in the identity being established.

What is 'synthetic identity fraud' in the context of identity proofing?

Answer: Creating a fictitious identity by combining real and fabricated personally identifiable information

Synthetic identity fraud involves constructing a fake identity by blending real information (e.g., a legitimate Social Security Number) with fabricated details, making it harder to detect than traditional identity theft.

During remote identity proofing at IAL2, which of the following is typically required?

Answer: Automated validation of identity document images and a selfie comparison

Remote IAL2 proofing typically requires the applicant to capture images of a government-issued identity document and a selfie, which are then validated and compared using automated systems.

What does 'document authenticity verification' aim to confirm during identity proofing?

Answer: That the identity document is genuine and has not been tampered with or forged

Document authenticity verification checks security features, holograms, machine-readable zones, and other indicators to confirm a presented document is genuine and unaltered.

Which type of attack specifically targets identity proofing systems by submitting fraudulent or stolen identity documents?

Answer: Identity document fraud

Identity document fraud involves presenting counterfeit, altered, or stolen documents during the proofing process in an attempt to fraudulently establish a new identity.

In NIST SP 800-63A, which term describes the process of determining that the identity evidence provided refers to a single, unique individual?

Answer: Identity resolution

Identity resolution is the process of using the collected evidence to determine that the identity refers to a unique individual, distinguishing the applicant from all others in a population.

What is the key distinction between IAL1 and IAL2 per NIST SP 800-63A?

Answer: IAL1 allows self-asserted identity with no proofing while IAL2 requires validated identity evidence

At IAL1, there is no requirement to link the applicant's claimed identity to the real world; at IAL2, the identity must be supported by validated and verified evidence.