The Multiple Facts of Multi-Factor Authentication

The Multiple Facts of Multi-Factor Authentication If you're a remote online notary, then you know that part of your job is to verify the identity of your signatories. But how exactly do you go about doing that? In this blog post, we'll explain the different methods of remote online notary verification. By the end, you'll have a better understanding of which method is best for each situation. So let's get started! If you are like most people, you use the words Kleenex to refer to facial tissues or you use the word Xerox to refer to a photocopy. Similarly, while everyone realizes there is ID verification as part of Remote Online Notarization (RON), most notaries generically refer to this as KBA or Knowledge Based Authentication, but there is a lot more to it than just KBA. KBA is just one part of the authentication process. There is actually quite a bit more to identifying your signer. Aside from KBA, there is typically Credential Analysis, but there can also be biometrics. All of which leads to multi-factor authentication. Let's break these down a bit more... Knowledge-Based-Authentication (KBA) KBA, in its simplest explanation, means that the person who wants to have documents notarized has to answer some questions about themselves. These are questions that only they should know, like their mortgage balance or an old address. They have to get a certain number of questions right to be able to sign. If they don't get enough questions right, they can try again, but if they don't pass the second time, they can't sign. Typically speaking, the questions on the KBA relate to information that is public but not common knowledge, and they should be such that a person other than the signer would be unlikely to know the answer. The signer must answer a certain number of questions correctly to be positively identified; for example, in many states, a signer requesting a RON must correctly answer a minimum of 4 out of 5 KBA questions (80%) in under 2 minutes. Each question must have at least 5 possible answers. If the signer fails the first test, the signer may retake the KBA, and each of the retakes must replace at least 2 of the 5 questions in the previous exam. If the signer fails the second retake, the Notary must not perform the RON. While there are slight variations to this, such as the number of retries and the hours in which there is a "cooling off period," this is generally the accepted definition of KBA. Credential Analysis Simply speaking, credential analysis is a way to check if an ID, like a driver's license, is real. A service provider doing credential analysis checks the security features, like the barcode or image placement. They also compare the data on the credential to other trusted sources. When conducting a credential analysis as part of a remote notarization, the software will use an automated process to verify the signer's ID. This process uses sophisticated algorithms to confirm that all security elements and information are present on the ID. The software will request that the signer allow the system to take a picture of the ID, which will then be analyzed. If all information and security elements are present, the ID will be considered valid. However, it is important to note that credential analysis requirements vary by state. Before selecting a RON platform, confirm that their system meets the requirements for your state. Doing so will help to ensure that the notarization is conducted in compliance with state law. Biometrics And finally, we have Biometrics. A biometric is a unique physical characteristic of an individual that can be used for identification or authentication. Some examples of biometrics include fingerprints, iris scans, and facial recognition. This process allows for the secure identification or authentication of an individual without the need for passwords or other identifying information. As it relates to RON, these characteristics are measured and compared against the presented identification card or passport to determine if the person in front of the Notary is the person who is signing the documents. ***BEWARE*** While the use of biometrics is a growing trend, this type of authentication is not available in all States. At the time (11 of the writing of this article, biometrics are only allowed in FL, LA, MN MT, NJ, VA, and WY. Please ensure yours is a biometrics-approved state before employing this measure of ID verification. Multi-factor Authentication So altogether, we end up with multi-factor authentication. Just as with some websites where you must enter your password and then a code that is generated from a third-party authentication system, sent via an SMS Message, or emailed to you, multi-factor authentication in RON signings is the best way to confirm someone's identity. It requires a person to use at least two different methods to prove who they are. This makes it much less likely that someone will commit fraud. Conclusion In summary, Multi-factor authentication is an important security measure to prevent fraud. By requiring a person to use at least two different methods to prove their identity, it makes it much less likely that someone will be able to commit fraud. Again, please remember, while biometrics are a growing trend, they are not available in all states yet. Make sure your state allows for biometric verification before employing this method. So the next time you say "They passed KBA," keep in mind there is a little more to it than just KBA. While the end-user does not necessarily need to know all the moving parts, by understanding the facets of the ID verification process and what they are, you are much better informed than most of your counterparts in the industry. It's kind of like making sausage... The end result should perfectly satisfy, but the consumer doesn't need to know every step of the process. If you are currently conducting, or interested in conducting, RON Closings and have not yet trained with Notary Stars consider joining us today. Not only do we over over 150+ hours of page-by-page training on every loan product under the Sun- we also offer excellent training for Remote Online Notarization & RON Safety. Here’s a list of our current playbacks from our RON Training Library you may want to access as a member: