Identity Management

CardSmart Technologies, Inc. (CST) and its engineers have been involved in identity management in one form or another for more than three decades, and have grown to appreciate that the market for the products used in identity management solutions is significant and constantly evolving. CST has solutions for remote identity proofing, privacy assurance, Cloud-based badging, and mobile/virtual identification.



CompositeID Model    

Remote identity proofing is the process through which an individual who is party to an online transaction can be uniquely verified. An individual’s entitlement to perform a particular transaction or access specific information hinges on the assurance that the individual in question is indeed who he or she claims to be. This presents a challenge to the secure delivery of services, as well as to online commerce, the enormity of which is compounded when a system attempts to authenticate for the first time a previously unknown individual.

CompositeID is a patent-pending identity proofing process that aggregates, evaluates, and uniquely scores results from multiple identity verification methods to exponentially strengthen confidence in the identity of an individual who was previously unknown to the subscriber, thereby providing the subscriber with a higher level of assurance that the individual is who he or she claims to be.   CompositeID is superior to traditional KBV (Knowledge-Based Verification) proofing. By considering multiple verification methods in aggregate, the CompositeID Score yields a better quality result with greater identity confidence’ The process is compliant with all accepted standards for identity proofing.

Learn more here.


Privacy Auditor Service   

CST is developing an automated privacy auditor capable of analyzing large data sets of potentially personal information. This Cloud-based auditing and reporting service accepts a data set and parameters as input, proceeds to evaluate for privacy risks, and generates results that include findings and suggestions for action. The evaluation process consists of systematically applying multiple privacy tests to the furnished data set. The resulting audit report summarizes results of the separate tests, creates a composite privacy score, and presents the findings so that the privacy risks can be visualized and mitigated by the data owner.



Cloud-based Badging   

In 2016, CST introduced a revolutionary Cloud-based identity management solution. This multi-language system greatly reduces the costs, errors and inadequacies generated by traditional employee badging systems, which can contain sensitive PII. For the first time, organizations now have a truly Cloud-based, privacy-sensitive credential issuance solution. CST is in active discussions with major security product manufacturers, re-sellers, and other partners to expand the system's use throughout the Americas and the rest of the world.



 Mobile Identity   

At the heart of these new systems described above is a unique, first of its kind virtual ID (vID™)  badge, which is displayed on common mobile devices, such as smart phones and tablets. The vID instantly and independently verifies an individual’s employment and/or active status within an organization through a separate authoritative source. The rapidly expanding user base includes organizations of all sizes eager to use this new breakthrough identity management system.  One example use case: an applicant applies online for a visitor pass where the CompositeID verifies the applicant's identity and completes remote proofing with vetting.  The CompositeID scorecard is automatically submitted to Cloud-based badging for visitor pass approval and issuance.  The applicant is then sent a vID™ badge to their mobile phone which includes the requested visitor pass credentials.