[LRUG] Identity services

[Mark Blackman]

Yes, good point. The impersonation problem is much harder to address, but verifying an individual exists at all is straightforward now. We used GB Group and CallCredit in a former role. Note that both of these services are match based, so you have supply details and then verification service will report a score indicating where those details did match (partly or completely) and you can then make a judgement about what score constitutes verification. You don’t get to browse the database, even for partial matches, for obvious reasons.


> On 11 May 2016, at 22:01, Tom Blomfield <tomblomfield at gmail.com> wrote:
> 
> It's often called "Identification & Verification" or ID&V.
> 
> Useful to split out two concepts;
> 
> 1. Is the information provided linked to a real person? You can use databases for this, and it costs between £0.25 - £1 for a range of checks, depending on scale and the provider you choose. There are lots - they're basically a commodity. GBGroup, Experian etc etc.
> 
> 2. Is the person on the other end of the screen/device the person they claim to be (anti-impersonation). This is more interesting, and there are no silver bullets. Generally you'd take a risk-based approach with tiered checks depending on the behaviour of the user. You might send a small amount of money to the bank account provided, post a confirmation code to the physical address or send SMS confirmation codes to mobile phones. You could take pictures of the user's face and compare it to an ID document. There are many more things you can do, depending on how costly your risks are.
> 
> On Wed, May 11, 2016 at 9:51 PM, Mark Blackman <mark at blackmans.org <mailto:mark at blackmans.org>> wrote:
> 
> > On 11 May 2016, at 21:43, Andrew Premdas <apremdas at gmail.com <mailto:apremdas at gmail.com>> wrote:
> >
> > Hey there,
> >
> > We need some way of knowing that people who register to use our service are who they say they are. This needs to go a bit further than email address confirmation. Has anyone done any of this stuff, or perhaps used some service that does this for you. Looking for a Stripe for ID :)
> 
> If you’re prepared to pay for each check, you can use services like GB group ID3Global, http://www.gbgplc.com/uk/products/gbg-id3global/ <http://www.gbgplc.com/uk/products/gbg-id3global/>. I used to use this when it was called URU and it can confirm addresses and date of births based on other address and DoB sources. Obviously, if the person in question has gone to some effort to lay down a false trail, it won’t help but it defeats casual efforts.
> 
> Regards,
> Mark
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org <mailto:Chat at lists.lrug.org>
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org <http://lists.lrug.org/pipermail/chat-lrug.org>
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org <http://lists.lrug.org/options.cgi/chat-lrug.org>
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org <http://lists.lrug.org/listinfo.cgi/chat-lrug.org>
> 
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20160512/5b32463b/attachment-0002.html>