Company type | Private |
---|---|
Industry | Biometrics |
Founded | 2012 |
Founder | Toby Rush |
Headquarters | |
Key people | CEO/Founder Toby Rush
Contents
EVP Global Sales & Marketing Chris Barnett |
Parent | Ant Group |
Website | http://eyeverify.com/ |
EyeVerify, Inc. is a biometric security technology company based in Kansas City, Missouri owned by Ant Group. Its chief product, Eyeprint ID, provides verification using eye veins and other micro-features in and around the eye. Images of the human eye are used to authenticate mobile device users. EyeVerify licenses its software for use in mobile banking applications, such as those offered by Tangerine Bank, [1] NCR/Digital Insight [2] and Wells Fargo. [3] [4]
EyeVerify is part of the Kansas City Crossroads neighborhood alongside several other tech companies. [5] EyeVerify's flagship product is Eyeprint ID, a system that authenticates users by recognizing patterns of blood vessels visible in the sclera, the whites of the eyes, [6] as well as other eye-based micro-features. [7]
An independent assessment by iBeta determined that Eyeprint ID meets the requirements for inclusion as a built-in subsystem in an Electronic Prescription of Controlled Substance (EPCS) Application. [7]
Entrepreneur Toby Rush founded the company in 2012, some months after visiting the lab of University of Missouri-Kansas City professor Reza Derakhshani, who developed the eye vein verification technology. Derakhshani holds the patent to Eyeprint ID and now serves as the company's chief science officer. [8] [9]
In September 2016, EyeVerify was acquired by Ant Group for $100 million. [10]
In September 2016, Ant Group, the financial services arm of Alibaba Group, acquired EyeVerify for an estimated $100M. [11]
Prior to that, Wells Fargo, Sprint, Qihoo 360 and Samsung Electronics had invested more than $6 million in EyeVerify. Mid-America Angels and Nebraska Angels were also investors. [12] [13]
The company was an early participant in the Wells Fargo Startup Accelerator for innovators in mobile security. [14]
In April 2016, Tangerine Bank became the first Canadian financial institution to offer Eyeprint ID. [15] The same month, Wells Fargo discussed its summer 2016 implementation of Eyeprint ID with the Wall Street Journal. The large bank mentioned that it had "tested voice and facial recognition technologies but found that each was subject to vagaries in the environment," and that "Eyeprint ID works correctly more often and is more discrete." [16]
In October 2015, RSA Security added Eyeprint ID to its Adaptive Authentication Software Development Kit, after extensive evaluation of the technology, to provide in-app biometric step up authentication for high risk login and transactions. [17]
EyeVerify and Olcsan CAD announced a partnership to offer Eyeprint ID to institutions in Turkey and other European countries. Their first project was to integrate with Vodafone Turkey's mobile wallet, Vodafone Cep Cuzdan. [18] [19]
Mountain America Credit Union conducted a beta launch of Eyeprint ID as part of its dual biometric authentication system, making it the first financial institution officially to launch Eyeprint ID in the United States. [20]
Digital Insight, a division of NCR, announced in February 2015 that it would incorporate Eyeprint ID into its mobile banking platform. [21] As of October 30, 2015, five Digital Insight Financial Institutions use Eyeprint ID in their mobile banking app: Service Credit Union, [22] Arizona Federal Credit Union, [23] Community America Credit Union, [24] First Internet Bank [25] and Evansville Teachers Federal Credit Union. [26] By the end of 2016, dozens of Digital Insight credit unions had launched Eyeprint ID. [27]
EyeVerify also has partnerships with other technology companies that serve the financial services industry, including Comarch, Hypr and BioConnect. [28] [29] [30]
On 29 September 2015, a YouTube video was posted by an associate of eyeThenticate (at the time of posting) [31] demonstrating a spoof of Eyeprint ID using version 2.3.6 of the demo application. [32] The Play Store app description has been updated to clarify that the demo application "includes limited liveness detection only, and spoofing tests conducted on this app will not be relevant to the product sold through EyeVerify partners". The version of Eyeprint ID that is integrated by partners has liveness detection built in to prevent spoofing attempts. [33] [34]
A smart card (SC), chip card, or integrated circuit card, is a card used to control access to a resource. It is typically a plastic credit card-sized card with an embedded integrated circuit (IC) chip. Many smart cards include a pattern of metal contacts to electrically connect to the internal chip. Others are contactless, and some are both. Smart cards can provide personal identification, authentication, data storage, and application processing. Applications include identification, financial, public transit, computer security, schools, and healthcare. Smart cards may provide strong security authentication for single sign-on (SSO) within organizations. Numerous nations have deployed smart cards throughout their populations.
Iris recognition is an automated method of biometric identification that uses mathematical pattern-recognition techniques on video images of one or both of the irises of an individual's eyes, whose complex patterns are unique, stable, and can be seen from some distance. The discriminating powers of all biometric technologies depend on the amount of entropy they are able to encode and use in matching. Iris recognition is exceptional in this regard, enabling the avoidance of "collisions" even in cross-comparisons across massive populations. Its major limitation is that image acquisition from distances greater than a meter or two, or without cooperation, can be very difficult. However, the technology is in development and iris recognition can be accomplished from even up to 10 meters away or in a live camera feed.
Speaker recognition is the identification of a person from characteristics of voices. It is used to answer the question "Who is speaking?" The term voice recognition can refer to speaker recognition or speech recognition. Speaker verification contrasts with identification, and speaker recognition differs from speaker diarisation.
A security token is a peripheral device used to gain access to an electronically restricted resource. The token is used in addition to, or in place of, a password. Examples of security tokens include wireless key cards used to open locked doors, a banking token used as a digital authenticator for signing in to online banking, or signing transactions such as wire transfers.
An e-commerce payment system facilitates the acceptance of electronic payment for offline transfer, also known as a subcomponent of electronic data interchange (EDI), e-commerce payment systems have become increasingly popular due to the widespread use of the internet-based shopping and banking.
Gemalto was an international digital security company providing software applications, secure personal devices such as smart cards and tokens, e-wallets and managed services. It was formed in June 2006 by the merger of two companies, Axalto and Gemplus International. Gemalto N.V.'s revenue in 2018 was €2.969 billion.
Remote deposit or mobile deposit is the ability of a bank customer to deposit a cheque into a bank account from a remote location, without having to physically deliver the cheque to the bank. This was originally accomplished by scanning a digital image of a cheque into a computer then transmitting that image to the bank, but is now accomplished with a smartphone. The practice became legal in the United States in 2004 when the Check Clearing for the 21st Century Act took effect, though banks are not required to implement the system.
Electronic authentication is the process of establishing confidence in user identities electronically presented to an information system. Digital authentication, or e-authentication, may be used synonymously when referring to the authentication process that confirms or certifies a person's identity and works. When used in conjunction with an electronic signature, it can provide evidence of whether data received has been tampered with after being signed by its original sender. Electronic authentication can reduce the risk of fraud and identity theft by verifying that a person is who they say they are when performing transactions online.
Man-in-the-browser, a form of Internet threat related to man-in-the-middle (MITM), is a proxy Trojan horse that infects a web browser by taking advantage of vulnerabilities in browser security to modify web pages, modify transaction content or insert additional transactions, all in a covert fashion invisible to both the user and host web application. A MitB attack will be successful irrespective of whether security mechanisms such as SSL/PKI and/or two- or three-factor authentication solutions are in place. A MitB attack may be countered by using out-of-band transaction verification, although SMS verification can be defeated by man-in-the-mobile (MitMo) malware infection on the mobile phone. Trojans may be detected and removed by antivirus software;, but a 2011 report concluded that additional measures on top of antivirus software were needed.
Daon is an international biometrics and identity assurance software company founded in 1999 by Irish entrepreneur Dermot Desmond. The name, Daon, was chosen because it stems from the Celtic word for human being, duine daonna. Daon is headquartered just miles outside of Washington, DC in Fairfax, VA. Daon also has major operations in Dublin, located in the International Financial Services Center (IFSC). It has an additional offices in Belgrade, Serbia and Canberra, Australia.
Multi-factor authentication is an electronic authentication method in which a user is granted access to a website or application only after successfully presenting two or more pieces of evidence to an authentication mechanism. MFA protects personal data—which may include personal identification or financial assets—from being accessed by an unauthorized third party that may have been able to discover, for example, a single password.
IDEMIA is a multinational technology company headquartered in Courbevoie, France. It provides identity-related security services, and sells facial recognition and other biometric identification products and software to private companies and governments.
The FIDOAlliance is an open industry association launched in February 2013 whose stated mission is to develop and promote authentication standards that "help reduce the world’s over-reliance on passwords". FIDO addresses the lack of interoperability among devices that use strong authentication and reduces the problems users face creating and remembering multiple usernames and passwords.
Eye vein verification is a method of biometric authentication that applies pattern-recognition techniques to video images of the veins in a user's eyes. The complex and random patterns are unique, and modern hardware and software can detect and differentiate those patterns at some distance from the eyes.
Reza Derakhshani is an inventor and professor of computer science and electrical engineering at the University of Missouri Kansas City (UMKC). He is known for inventing and developing a biometric security system that uses the patterns of blood vessels in the eyes. His research has encompassed biometrics, biometric spoofing, biomedical signal and image processing, and computational intelligence.
OneSpan Inc. is a publicly traded cybersecurity technology company based in Boston, Massachusetts, with offices in Montreal, Brussels and Zurich. The company offers a cloud-based and open-architected anti-fraud platform and is historically known for its multi-factor authentication and electronic signature software.
Digital identity is used in Australia by residents to validate who they are over digital media, such as over the Internet.
Google Pay is a mobile payment service developed by Google to power in-app, online, and in-person contactless purchases on mobile devices, enabling users to make payments with Android phones, tablets, or watches. Users can authenticate via a PIN, passcode, or biometrics such as 3D face scanning or fingerprint recognition.
Voatz is a for-profit, private mobile Internet voting application. The stated mission of Voatz is to "make voting not only more accessible and secure, but also more transparent, auditable and accountable." The company is headquartered in Boston, Massachusetts.
Smart-ID is an electronic authentication tool developed by SK ID Solutions, an Estonian company. Users can log in to various electronic services and sign documents with an electronic signature.