Proposed Object of Conformity Definition for Facial Recognition / Selfie

[trbouma]

Would we need another object of conformity definition for the "selfie" requirement below?

ask the person to take a "selfie" photo using the camera on their mobile phone or electronic device, and use an application to apply facial recognition technology to compare the features of that "selfie" (also highlighted in context of the FINTRAC defintion below)

This can be considered as part of identity verification or credential binding, but I think it is a narrower definition.

---

FINTRAC photo identification method if a person is not physically present

Can I use the government-issued photo identification method if a person is not physically present?

You may use the government-issued photo identification method if a person is not physically present, but you must have a process in place to authenticate the government-issued photo identification document. For instance, you could assess a document by using a technology capable of determining the document's authenticity. For example, you could:

ask a person to scan their government-issued photo identification document using the camera on their mobile phone or electronic device; and
use a technology to compare the features of the government-issued photo identification document against known characteristics (for example, size, texture, character spacing, raised lettering, format, design), security features (for example, holograms, barcodes, magnetic strips, watermarks, embedded electronic chips) or markers (for example, logos, symbols) to be satisfied that it is an authentic document as issued by the competent authority (federal, provincial, or territorial government).
When a person is not physically present, you must still determine whether the authenticated government-issued photo identification document is valid and current, and that the name and photo are those of the person providing the document. For example, you could:

• ask the person to take a "selfie" photo using the camera on their mobile phone or electronic device, and use an application to apply facial recognition technology to compare the features of that "selfie" to the photo on the authentic government-issued photo identification document. You would also need a process to compare the name on the government-issued photo identification document with the name provided by the person.

[trbouma]

Added Facial comparison as an object of conformity The table is here

[trbouma]

I had a look at the "identity verification" definition in CAN/CIOSC 103-1 and concluded that the definition was broader than facial recognition methods. So I created a definition for facial comparison which is more focused.