Solution

Introducing ATO Protect from Trusona. ATO Protect can validate the identification documents with authoritative sources and collect information on the user providing the scan to determine if the user scanning the document is the legitimate owner of the document. Through the use of a one-time URL, Trusona can display the information you need to confidently ensure that the person you are working with on the other end is indeed the person they say they are.

Key Capabilities

  • ATO Protect checks the formatting of the data and any missing data
  • ATO Protect matches the data to authoritative sources
  • ATO Protect monitors device behavior during the scanning process for anomalies

Setup

You can begin using ATO Protect in less than 30 minutes during a call with the Trusona team with no integration to your system required. All you need is a list of user email addresses you want to be able to use the product.

Note that this time can vary as you will want to implement two CNAME records in your system to get your customized ATO Protect URL live.

Usage

Use of ATO Protect is quick and easy. Let us walk through the overview, and then we will go into greater detail.

  1. Your team clicks a button in your Trusona portal to generate a unique verification
  2. Send this URL to the user via your normal digital channels (web, app, SMS, WhatsApp, email, chat etc..) or even read it aloud on a call center call
  3. User loads this unique URL on their mobile phone which requests a new scan of their document to complete the identity verification
  4. Document is analyzed for formatting, match authoritative sources, and comparing to the original doc that opened the account (if possible)
  5. Your team sees results in the portal immediately, pass or fail result, with explanation and details

 

Select the document type you would like the end user to scan

When the end user clicks on the link, the portal will show device details and an approximate geographic location of the device.

When a document is scanned, the portal will show more device details and authoritative information about the scanned document

From the above, we can see the device behavior matches the identification document, so this person is indeed the genuine person scanning the documentation.

If you click on the link on a desktop or non-mobile device, you’ll see the following screen:

This screen prompts the user to scan the QR code with the device’s camera, no app needed. Scanning this code will transfer the session to the user’s mobile device to continue the verification process.

What To Look For

ATO Protect monitors the device behavior during the scanning process; let us see what happens when the user is scanning a document, and the data looks…off. Note this this is only one of many scenarios.

We generate a URL, click it, then scan the same document

Look at the difference in location and IP address. In this case, this person clicked the link and scanned the document in two distinct locations. As of this writing, you cannot travel between those two places that quickly, so this should raise alarms and warn the user that whoever is scanning this document is not the true owner of the document.