3 ms·

ID document verification via NFC can't by itself replace also biometrically verifying the person purporting to be the one that the document belongs to. Without

by lxgr 17d ago

ID document verification via NFC can't by itself replace also biometrically verifying the person purporting to be the one that the document belongs to. Without it, anyone with a stolen document can pass it. (I don't think there's a generally available database of stolen documents, so I suspect these usually remain valid until their regular date of epxiry.)

bayindirh 17d ago
Generally, the information in our country is checked via multiple ways: NFC + Biometric data (checked against the data inside the ID card) (+ photo of the ID in some cases), or any combination of those. Before deepfakes were dime a dozen, I remember my bank starting a video-call with me and required me to show my ID to them via camera. This was after a multi-factor check that I passed. Making any of these factors more trustworthy is a win in my perspective, so having a trusted sensor is always better even if you do multi-factor authentication. Our ID cards have a private-public key pair inside them, and it allows us to sign things amongst other things. Renewing your ID card for any reason revokes the digital signature of the previous one, so scanning it via NFC probably enough to check whether it's revoked. Same with photo (since machine readable part contains serial and check digits and such).