Keyless - Experts & Thought Leaders

Sift, the pioneer in Digital Trust & Safety announced that it is integrating the technology from Keyless, the passwordless and Multifactor Authentication (MFA) pioneer, into Sift’s core platform to provide businesses with unmatched consumer accounts security. The integration with Keyless, which Sift acquired in November 2021, adds MFA step-up authentication as an option directly within the Sift Connect App Gallery so that consumers can authenticate by simply looking into their device’s camera. The integration can be triggered within the products in Sift’s Digital Trust & Safety Suite. Account takeover (ATO) attacks Account takeover (ATO) attacks have grown rapidly over the past several years due to the expanding Fraud Economy, the global, interconnected network of online abuse that threatens merchants and consumers. The evolution of ATO attacks is demonstrated in an animated visualization on Sift’s new Fraud Intelligence Centre Specifically, ATO attacks across Sift’s network soared over 307% between April 2019 and June 2021, and are becoming increasingly more automated and sophisticated. The evolution of ATO attacks is demonstrated in an animated visualization on Sift’s new Fraud Intelligence Centre, which deconstructs the Proxy Phantom fraud ring identified by Sift in Q3 2021.  Providing account security To combat evolving risks posed by the Fraud Economy, businesses need solutions that provide account security, streamline their operations, and optimize growth. The new integration creates true interoperability between Sift and Keyless by allowing businesses to route higher-risk login attempts through Keyless’ privacy-preserving biometric MFA. As a result, users can easily verify their identities via the front-facing camera on any trusted device. Passwordless alternatives Through the new integration, businesses no longer need to choose between fraud and friction to authenticate users" “Account takeover attacks have reached new heights in turn, many trusts and safety teams are actively seeking out passwordless alternatives,” said Geoff Huang, Senior Vice President of Product at Sift. “Through the new integration, businesses no longer need to choose between fraud and friction to more securely and seamlessly authenticate users.” Prioritizing customer's trust and safety “As a digital wallet and trading platform, trust with our users is imperative,” said Rob McCall, Director, Fraud Prevention at Uphold, a multi-asset digital money platform offering financial services to a global market and Sift customer. “Sift’s approach to account security and its integration with Keyless’ passwordless authentication technology brings a compelling value proposition for any business that prioritizes the trust and safety of its customers.” 

Keyless Technologies, the next-generation biometric authentication company, announces that they have been granted a non-provisional patent by the U.S. Patent and Trademark Office, for how they authenticate and preserve the privacy of a user's digital identity. The technology prevents organizations, third parties, and even Keyless from accessing a person's biometric data as it is not stored on a device or any centralized location - a market first. That means the technology exceeds regulation, such as GDPR and CCPA. In the current era where security and privacy concerns are running high, this fundamental shift from the current approach for biometric authentication will have meaningful value for many industries and individuals concerned with privacy for digital identities. Utilizing innovative cryptography "Our mission at Keyless is to provide people and organizations with a passwordless future, where the user is the key. We want to do it in a way that lets people login to any app or service, from any device, easily and safe in the knowledge that they have the privacy they deserve, and for organizations to maintain security and compliance for their systems and users. This patent demonstrates our commitment to that mission," says Andrea Carmignani, CEO and Co-Founder. The Keyless privacy-by-design technology utilizes innovative cryptography and secure multi-party computing on the edge. When a user enrolls with Keyless, their biometric template is encrypted, broken up into ‘shards’, and stored across multiple servers. Even if a server is compromised, the attackers would never have access to the complete dataset. Personally identifiable information The way Keyless technology processes and stores data means that it exceeds GDPR The user's template is also deleted from the device they used to enroll. When next they are asked to authenticate, the user looks into a forward-facing camera, and their details are matched against the stored ‘shards;’ at no time is the full template ever restored. The way Keyless technology processes and stores data means that it exceeds GDPR (no personally identifiable information is stored) and in conjunction with partners, adheres to PSD2 SCA requirements. This is especially useful for highly regulated industries, such as financial services, or for industries that struggle with revenue leakage due to credential sharing, such as streaming media services. Keyless' technology ensures that it is the person and not a device, being authenticated in a private and secure manner. Subsequent authentication process The simple enrollment and subsequent authentication process is also designed to be as intuitive for the user as possible, to enhance the user experience. "The intersection of user experience, privacy, and security is a very hot space, right now," says Paolo Gasti, CTO. "There are multiple vendors and analysts out there talking about it, but no one has yet solved that conundrum. By investing in the research and developing our technology in a privacy-first way, we believe we've taken a big step in addressing it. And as we look ahead to up-and-coming technologies that will one day 'be the norm,' such as blockchain and services offering Self-Sovereign Identity, where privacy-by-design is a key tenet, Keyless technology will be able to support those too."

Keyless Technologies, the privacy-preserving, identity company announced FIDO2 Certification for its proprietary biometrics technology. This comes just months after Keyless became one of only seven providers globally to receive FIDO Biometrics Certification, validating that Keyless' facial recognition technology meets industry standards for user verification and spoofing detection accuracy. Achieving certification in both Biometrics and FIDO2 confirms that Keyless' biometric authentication software meets the highest global standards for authentication and makes Keyless unique in a market that is demanding ever more security, privacy, and crucially interoperability, all while simplifying and enhancing user experience. Passwordless and multi-factor authentication solutions The platform eliminates the need to store and manage sensitive information via a quick, intuitive user experience The Keyless biometrics platform enables organizations to deploy passwordless and multi-factor authentication solutions. The platform eliminates the need to store and manage sensitive information, enabling organizations to protect their users with one, simple action, via a quick, intuitive user experience. The technology combines multi-modal biometrics with advanced cryptography, leveraging distributed cloud architecture. Due to the way Keyless leverages these technologies, privacy is preserved for the user and regulatory requirements, such as GDPR and PSD2 are not just met, but exceeded. This has a meaningful impact not just on employees, but on organizations relying on strong customer authentication in areas such as mobile banking and payments. Also, there is no need to rely on the device hardware or operating system, which means organizations can innovate and deploy their applications and services faster, regardless of which devices their employees use - for example replacing hardware tokens and instead of using cellphones as security keys. Next-gen biometric authentication Keyless is integrating the FIDO2 certified technology into both its workforce and consumer offerings"In today's digital world, the average person needs to remember more than 100 passwords so it's no wonder that Verizon attributes 84% of security breaches to compromised passwords. Organizations are now working to adopt zero-trust; identity-first security to protect their users and our mission at Keyless is to make accessing digital services seamless, safe, and private from any device.” “ Achieving these two certifications from The FIDO Alliance is a crucial step on that journey and we're proud to be the first to bring the next generation of biometric authentication to the market," said Andrea Carmignani, CEO and Co-Founder at Keyless. Keyless is integrating the FIDO2 certified technology into both its workforce and consumer offerings, enabling organizations to choose whether to use FIDO2 when implementing Keyless for employees or consumers.