Overview: Identity Proofing

Quick Definition

Identity proofing is the process of verifying that a person is who they claim to be during account registration or credential issuance. This critical security procedure involves collecting, validating, and verifying identity evidence to establish confidence that an individual's claimed identity corresponds to their actual identity.

The process typically occurs in multiple stages, beginning with identity evidence collection where individuals provide documents such as driver's licenses, passports, or birth certificates. Next comes identity validation, where the authenticity and integrity of these documents are verified through various means including document security features, database checks, and cross-referencing with authoritative sources.

The final stage involves identity verification, where the person presenting the identity evidence is confirmed to be the rightful owner of that identity. This may include biometric verification, knowledge-based authentication questions, or in-person verification procedures.

Identity proofing standards, such as those defined in NIST Special Publication 800-63A, establish different assurance levels based on the rigor of the proofing process. Higher assurance levels require more stringent verification procedures and are necessary for applications involving sensitive data or high-risk transactions. Effective identity proofing helps prevent identity fraud, account takeovers, and various forms of impersonation attacks while enabling organizations to establish trusted digital relationships with legitimate users.