Mobile Biometric Authentication  /  Knomi®2020-05-11T15:45:35-04:00

Knomi®

Mobile biometric authentication framework

Knomi® is a mobile biometric authentication solution comprised of a family of biometric matching and liveness detection algorithms that use face and voice to enable secure and convenient multifactor authentication without passwords.

Knomi

ARRANGE A DEMO
Learn about KNOMI LIVENESS DETECTION

Features

NIST-tested algorithms

NIST-tested algorithms

Aware facial matching algorithms are tested by NIST, with performance reflected in their most recent FRVT report. Voice matching algorithms have also been evaluated in open tests.

Highly configurable UX and security features

Highly configurable UX and security features

Knomi offers both face- and voice-based algorithms, with a variety of workflows, enabling flexible optimization of user experience and security features.

Robust presentation attack detection

Robust presentation attack detection

Knomi employs numerous face- and voice-based spoof detection techniques to prevent presentation attacks. Paper photos, digital stills and videos, and masks are addressed, as are voice recordings and synthetic speech.

Multimodal performance

Multimodal performance

Knomi provides multimodal options that collect face and voice, and use proprietary fusion algorithms to boost matching and attack detection performance without compromising convenience.

Identity proofing and document authentication

Identity proofing and document authentication

Knomi DocAuth performs identity proofing ideal for mobile onboarding, with ID authentication, spoof-resistant biometric comparison of live and ID face images, and facial images fully vetted as suitable for biometric search.

Device- or server-centric architecture

Device- or server-centric architecture

Knomi supports either device-centric approach, with all liveness detection, biometric matching, and template storage performed on the device, as well as a server-centric approach, with centralized liveness, matching, and storage.

IAM integrations

IAM integrations

Knomi Platform provides integrations with market-leading IAM platforms enabling enterprises to deploy multifactor authentication using mobile biometrics instead of passwords.

iOS, Android, Windows, Linux support

iOS, Android, Windows, Linux support

All mobile components are available as a la carte SDKs with reference application code and libraries for both iOS and Android. Server-side software can be deployed in Windows or Linux.

Applications

Mobile banking

Banks can incorporate Knomi into their apps to make mobile onboarding and login more secure and convenient for their customers.

Enterprise security

Companies can use Knomi to make access to their digital assets more secure for their workforce.

Government

Government agencies can use Knomi to make logical and physical access control more secure for employees and contractors.

Knomi® mobile biometric login for secure, convenient enterprise security.

Architecture support: device- and server-centric, and browser-based

Three architectures are supported: Device-Centric, Server-Centric with Mobile SDK, and Server-Centric with Web. Knomi D offers software that performs all functions on the device. Knomi S moves functions to the server, including biometric template creation, matching and storage. Knomi Web enables facial capture and liveness detection via any browser. Knomi DocAuth can be implemented to support server centric with mobile SDKs and server centric with web architecture.

Mobile Biometric Software

Knomi D

Device-Centric Liveness Detection and Biometric Authentication.

Biometric template storage and matching is performed on the device, as are algorithms for autocapture, liveness detection, and spoof detection.

  • Mobile Face Authenticator. SDKs running on the device to perform facial image capture and analysis designed to quickly capture high-quality facial images and detect spoof attempts. Biometric template generation and comparison are also performed. Incorporates elements of Aware’s PreFace and Nexa|Face™ SDKs.

Knomi S

Server-Centric Liveness Detection and Biometric Authentication.

Biometric template storage and matching are performed on the server, with algorithms for autocapture and liveness detection and spoof detection operating on the server.

  • Mobile Face Client. Application running on the device to perform facial image capture and analysis designed to capture high-quality facial images. Built upon the PreFace SDK.
  • Face Authentication Service. Server-based software API for facial template storage and matching. Built upon the Nexa|Face SDK.
  • Face Liveness Server-based API for facial image analysis, including liveness detection and spoof detection.
  • Mobile Voice Capture. Application running on the device to perform audio capture and analysis.
  • Voice Authentication Service. This service applies high-performance voice authentication, offering an alternative to facial recognition when preferred by the user or in conditions when facial recognition is insufficient.
  • Voice Liveness Service. This service provides analysis of biometric voice samples to detect attempted spoofs, such as with recorded or synthesized samples.
  • DocAuth Client. Captures and crops the document image from the background. Can extract data groups from ICAO-compliant chips.
  • DocAuth Service. Reads OCR, MRZ and barcodes from document images, does document authenticity checks, verifies face and selfies, and validates ICAO data groups with certificate chains.

Knomi Web

Browser-Based Liveness Detection and Biometric Authentication.

Autocapture of the face is performed in a browser with liveness detection, spoof detection, template storage, and biometric matching are performed on the server. Knomi Web can operate on any iOS, Android, or Windows, device with a browser and with an integrated camera or peripheral webcam, such as laptops and desktops.

  • Browser Face Client. The browser running on the device works together with back end services to capture facial images for analysis designed to capture high-quality facial images quickly and to detect spoof attempts. Built upon the PreFace SDK.
  • Face Authentication Service. Server-based software API for facial template storage and matching. Built upon the Nexa|Face SDK.
  • Face Liveness Service. Server-based API for facial image analysis, including liveness detection and spoof detection.
  • Browser Voice Capture. The browser running on the device captures audio to be sent for liveness checking and authentication.
  • Voice Authentication Service. This service applies high-performance voice authentication, offering an alternative to facial recognition when preferred by the user or in conditions when facial recognition is insufficient.
  • Voice Liveness Service. This service provides analysis of biometric voice samples to detect attempted spoofs, such as with recorded or synthesized samples.
  • DocAuth Client: The browser running on the device works together with back end services to capture and crop the document image from the background.
  • DocAuth Service: Reads OCR, MRZ and barcodes from document images, does document authenticity checks, and verifies face and selfies.

Knomi DocAuth

Document authentication and facial matching for identity proofing upon mobile onboarding

Knomi DocAuth

Knomi includes a solution for document authentication and facial matching, which is ideal for biometric identity proofing as part of a mobile onboarding process using a government-issued credential such as a driver’s license or passport. Knomi DocAuth can be implemented in either a server-centric or browser-based architecture.

  • Assisted capture of credential (front and back)
  • OCR-powered capture of printed and bar-encoded data
  • Detection of document security features (white light)
  • Automated capture of printed facial image and live facial image
  • NIST-tested facial recognition algorithms
  • Robust, multi-algorithm face spoof detection for authentication and identity proofing (paper, digital, video, 2D/3D masks)
  • Comparison of printed to bar-encoded data
  • NFC reading of e-passport chip data
  • Server-centric or browser-based architecture

Knomi DocAuth performs assisted capture of the front and back of the credential, and then automatically extracts the facial image, printed information, and bar-encoded data. It then collects a live facial image, applying several attack detection algorithms to prevent spoofs. A facial match is calculated and analysis of the collected data performed to verify the authenticity of the credential and the identity of its possessor.

Knomi’s advanced face-based presentation attack detection algorithms detect not only authentication spoofs, but also false non-match spoofs that impact the ability to use the biometrics for other biometric identity proofing functions such as watch list checks and duplicate prevention.

Mobile Document Authentication

Knomi Platform

Integration with market leading identity and access management platforms

Knomi Platform is the component of the Knomi mobile biometric authentication framework that can be integrated with identity servers to quickly enable them with passwordless multifactor authentication (MFA) using biometrics on a mobile device.

For organizations using an identity and access management (IAM) platform to implement secure access control, SSO, and federation for employees or customers, adding Knomi enables users to login to assets normally accessible by PC or browser with a username and password by instead biometrically authenticating on their mobile device in passwordless fashion. Knomi Platform has been integrated with several leading identity and access management products. Any enterprise can integrate Knomi to enhance their identity platform with passwordless multifactor authentication using out-of-band mobile biometrics, making login to their online assets more secure and convenient for their employees.

Out of Band Multifactor authentication using mobile biometrics

Passwordless multifactor authentication using mobile biometrics

Arrange a Demo

Watch the animation to learn how Knomi enables omnichannel authentication for banking and other applications.

Recent Blogs and Resources