A Startup Aims to Verify IDs Without Storing Personal Data

As governments and financial institutions shift their focus from verifying identities in the physical world to online verification, several companies have entered the market with innovative solutions. One such startup, ShareID, has emerged from France with a solution that aims to protect individuals’ privacy while ensuring secure authentication.

Table of Contents

A New Approach to Online ID Verification

ShareID’s Authentication-as-a-Service solution is designed to work in conjunction with government-issued IDs. Unlike other companies in the market, ShareID claims not to store any personal data. Instead, users are required to submit a video proving their "liveness" – that they are a real person and not a pre-recorded video. This is achieved through a series of challenges, including smiling, tilting their face, and following a randomly generated point on the screen.

No Personal Data Stored: ShareID’s Unique Approach

In an effort to ensure maximum security and minimal data storage, ShareID creates a homomorphic hash – a unique identifier that allows for re-authentication without storing any personal data. This approach sets ShareID apart from other companies in the market, which often store user data for extended periods.

Comparison with Other Companies

Several companies have entered the online ID verification market, each with their own approach to data storage and security. For instance:

ID.me: A US-based company that has obtained government contracts, including one with the IRS. However, it was criticized by members of Congress for misrepresenting its technology and inflating estimates of fraud.
CLEAR: A biometric security company present in airports and stadiums across the United States. CLEAR states in its privacy policy that it retains user data, including government-issued identification information, digital images and videos, and biometric data.

ShareID’s Commitment to Security

ShareID claims to prioritize user security above all else. According to CEO Sara Sebti, the company undergoes regular penetration tests (pentests) and other live security monitorings to ensure its systems remain secure. France’s military police have also audited ShareID’s security protocols.

Conclusion

As online ID verification becomes increasingly prevalent, companies like ShareID are redefining the landscape with innovative solutions that prioritize user privacy. By minimizing data storage and employing robust security measures, ShareID is setting a new standard for authentication-as-a-service solutions.