A biometric characteristic is not recognized as an authenticator by itself.

Picture1-2

"Biometric comparison is probabilistic, whereas the NIST other authentication factors are deterministic"

Section 3.2.3 requires a physical authenticator to be authenticated along with a biometric comparison. The physical authenticator then serves as “something you have,” while the biometric match serves as “something you are.” When a biometric comparison is used as an activation factor for a multi-factor authenticator, the authenticator itself serves as the physical authenticator. As noted in that section, local verification of biometric factors (i.e., the use of a multi-factor authenticator with a biometric comparison as an activation factor) is preferred over central biometric factor comparison.

The deterministic Entersekt layering approach

Entersekt doesn't rely on the probabilistic match of biometrics alone. Instead, it uses the biometric to unlock a deterministic cryptographic key on the device, combining the security of "something you have" with the convenience of "something you are" to satisfy the rigorous demands of NIST/FIDO/PSD2 standards.

The secure layers

We continuously verify the user silently using Device ID ("something you have") and layer that with Biometrics ("something you are") for high-risk events.

Picture4

Benefit:

The convenience of biometrics leveraged to determine inherence, with 100% accurate, silent cryptographic proof.

The confidence check

By leveraging cryptographic proof and layering it with step-up methods when the risk indicates the need, we achieve a superior, compliant level of Strong Customer Authentication.

safe

Benefit:

Seamless access 98% of the time, and a quick, secure step-up challenge only when absolutely necessary.

Security and experience

With bank-grade security that also delivers optimal customer experiences, you can keep clients safe and happy while adhering to regulations.

Picture4

Benefit:

Happy clients lead to customer loyalty that can directly improve your bottom line.

The foundation of our innovation

Entersekt's relentless determination to redefine trust in banking is built on three legs, ensuring the highest security with optimal experiences that supports compliance and regulations, this is how we do it:

Biometrics that unlock the cryptographic key:

The Entersekt approach flips the script on traditional biometric authentication. The biometric scan ("something you are") is not the final security measure; instead, it serves as the local, convenient key to access a highly secure, deterministic private key ("something you have") stored in the device's secure element. This layered design means that an attacker who compromises the biometric layer still cannot access the cryptographic key needed to complete the transaction.

Deterministic proof, not probabilistic match:

Unlike systems that authenticate based only on a probabilistic match score (e.g., "This fingerprint is 99% likely to be the user"), Entersekt leverages the unlocked cryptographic key to generate a unique digital signature. This signature is then transmitted to the server, where it is validated against the publicly held key. The validation is deterministic: it either passes (100% certainty) or it fails. This eliminates the risk and ambiguity associated with biometric false positives and strengthens the integrity of the user's identity.

Industry and client expectations, exceeded:

This cryptographic architecture is specifically designed to meet the rigorous demands of global security standards, including NIST, FIDO, and the two-factor requirements of PSD2's Strong Customer Authentication (SCA). By combining the convenience of the biometrics with the proof of a digital signature, Entersekt delivers an optimal experience that automatically satisfies two factors of authentication (possession and inherence), ensuring maximum security without frustrating users.

 

Ready to redefine trust?

Book your personalized demo