Entrust has announced the launch of its new Biometric Authentication solution, designed to enhance security measures in the face of rising AI-driven threats.
With cybercriminals increasingly targeting vulnerable moments such as account recovery, device transitions, and substantial financial transactions, there is an evident need for organisations to evolve their authentication strategies. The Entrust solution shifts focus from mere access verification to confirming the identity of the individual associated with each transaction.
Biometric authentication and fraud reduction
The fresh approach to authentication promises organisations a reliable method to reduce fraud while ensuring a seamless user experience. Mike Baxter, Chief Technology & Product Officer at Entrust, commented, "Too many organisations are treating authentication as a login problem, but attackers have already moved beyond access."
The urgency for such measures is underscored by the substantial financial impact of AI-enabled fraud, which sees global businesses losing an average of 7.7% of annual revenue, largely due to account takeovers. With deepfake technology involved in one out of every five biometric fraud attempts, there is a pressing demand for improved security protocols.
Adaptive risk-based authentication
Entrust’s solution combats these challenges by integrating biometric identity verification
Entrust’s solution combats these challenges by integrating biometric identity verification with adaptive risk-based authentication. This dual-layer approach is vital in countering threats like presentation, injection, and deepfake attacks, particularly during critical moments including onboarding, account recovery, device changes, and large transactions.
In contrast to segmented solutions that treat authentication, onboarding, and fraud prevention separately, the Entrust Biometric Authentication system offers a comprehensive method, extending verified identity across all access points and interactions. This consistent integration aids organisations in making informed authentication decisions anchored in trusted biometric checks.
Core features and benefits
The solution is equipped to:
- Apply an appropriate level of identity assurance based on risk to mitigate account takeover threats.
- Reduce unnecessary account lockouts typically caused by password and passcode issues.
- Strengthen defenses against presentation, injection, and deepfake attacks.
- Minimise manual intervention needs via secure self-service options.
- Maintain consistent and auditable identity verification throughout the user’s lifecycle.
- Enhance user interactions with rapid and straightforward biometric processes.
Three authentication methods
The Entrust Biometric Authentication solution offers three methods tailored to various risk scenarios:
- Biometric Passkey – Provides secure authentication during high-risk activities by linking the process to a verified human identity.
- Face Authentication – Streamlines everyday verification and step-up processes, replacing one-time passcodes with easy-to-use biometric checks.
- Motion Authentication – Ensures robust protection against deepfake, replay, and injection attacks, utilising ISO 30107-3 PAD Level 1 & 2 compliant liveness detection, as verified by independent testing from iBeta Quality Assurance.
Entrust, a global pioneer in identity-centric security, today introduced a new approach to preventing account takeover in the age of AI. As attackers increasingly target high-risk moments like account recovery, device changes, and large transactions, organisations need to modernise authentication from verifying access to verifying the real human behind the transaction.
The Entrust Biometric Authentication solution brings identity-centric assurance to these critical interactions, helping organisations reduce fraud while delivering fast, easy end-user experiences. “Too many organisations are treating authentication as a login problem, but attackers have already moved beyond access,” said Mike Baxter, Chief Technology & Product Officer at Entrust.
Adaptive risk-based authentication
“Preventing account takeover in the age of AI requires confirming the person behind every interaction. Entrust helps organisations apply the right level of assurance at the right moments while delivering secure, low-friction experiences.”
The need is urgent, with AI-driven attacks contributing to dramatic increases in fraud and cybercrime. Global businesses lost an average of 7.7% of annual revenue to fraud with account takeover responsible for nearly one-third of those losses. At the same time, one in five biometric fraud attempts now involve AI-generated deepfakes.
The Entrust Biometric Authentication solution meets this challenge with identity assurance that combines biometric identity verification with adaptive risk-based authentication. This provides a crucial check against presentation, injection, and deepfake attacks by requiring identity assurance at key moments like onboarding, account recovery, device changes, and large transactions.
A unified approach to identity assurance
Unlike fragmented point solutions that address onboarding, authentication, and fraud prevention separately, the Entrust Biometric Authentication solution takes the verified identity that is established at enrollment and extends it across every access point and interaction. By anchoring a biometric check to that trusted identity, organisations can make consistent, high confidence authentication decisions.
The solution helps organisations:
- Apply the right level of identity assurance based on risk to fight account takeover attacks.
- Reduce unnecessary account lockouts from password and one-time passcode failures.
- Enhance protection against presentation, injection, and deepfake attacks
- Minimise manual reviews and support calls through secure self-service authentication
- Deliver consistent, auditable identity assurance across the user lifecycle
- Improve the user experience with fast, intuitive biometric experiences.
- The Entrust Biometric Authentication solution uses three authentication methods, each designed for different levels of risk:
- Biometric Passkey – provides biometric authentication at high-risk moments by binding authentication to a verified human identity.
- Face Authentication – makes everyday verification and step-up authentication faster and more secure by replacing one-time passcodes (OTPs) with an easy biometric check.
- Motion Authentication – helps defend against deepfake, replay, and injection attacks in high-assurance use cases with ISO 30107-3 PAD Level 1 & 2 conformant liveness detection, independently tested by iBeta Quality Assurance.
