{"id":1780,"date":"2021-10-04T11:00:00","date_gmt":"2021-10-04T09:00:00","guid":{"rendered":"https:\/\/alicebiometrics.com\/identificar-verificar-validar-y-autenticar-no-son-lo-mismo\/"},"modified":"2023-09-05T17:33:31","modified_gmt":"2023-09-05T15:33:31","slug":"identify-verify-validate-and-authenticate-are-not-the-same-thing","status":"publish","type":"post","link":"https:\/\/alicebiometrics.com\/en\/identify-verify-validate-and-authenticate-are-not-the-same-thing\/","title":{"rendered":"Identify, verify, validate and authenticate are not the same thing"},"content":{"rendered":"\n

One of the great challenges of our times is to link the digital identities<\/a> with non-digital identities.<\/p>\n\n\n\n

In this publication we talk about four concepts that facilitate this link and that are very present in the procedures and processes of onboarding digital <\/a>. <\/p>\n\n\n\n

Let’s take an example<\/h2>\n\n\n\n

Pepe needs to rent a motorcycle as soon as possible (discover Pepe’s story here<\/a>).<\/p>\n\n\n\n

He opts for a motorcycle rental company that uses a digital onboarding solution<\/a> to register clients remotely.<\/p>\n\n\n\n

As this is the first time he is going to use the app of this service, Pepe has to enter his email to introduce himself. That is, Pepe IS<\/strong> IDENTIFYING HIS IDENTITY<\/strong>. The type of identification depends on the requirements of the company, it could also ask for your first and last name, for example.<\/p>\n\n\n\n

\"\"
Pepe identifies himself by entering his email<\/figcaption><\/figure>\n\n\n\n

Next, the system asks him to prove that he is the person he claims to be (that is, to confirm to me with evidence that he is Pepe G.).<\/p>\n\n\n\n

To prove it, he has to take a selfie and capture both sides of his ID. The system VERIFIES<\/strong> that the biometric data extracted from his selfie matches the data from the photograph of the DNI. <\/p>\n\n\n\n

\"\"
Pepe verifies his identity with a selfie and captures his ID<\/figcaption><\/figure>\n\n\n\n

Meanwhile, the system VALIDATES<\/strong> that his ID exists, that it is valid, that the user is old enough to drive, etc.<\/p>\n\n\n\n

As Pepe is a legitimate user, with his documentation up to date, the system registers him in a matter of seconds. Pepe is already a customer of the motorcycle rental company, so whenever he wants, he can enjoy the vehicles.<\/p>\n\n\n\n

From now on, every time Pepe needs a motorcycle, he will only have to take a selfie. The system already recognizes him and with a selfie, he is able to AUTHENTICATE<\/strong> that he was previously verified as a customer.<\/p>\n\n\n\n

In case the differences are not clear enough, from the point of view of Pepe…<\/h4>\n\n\n\n

\u27a1\ufe0f Identification: I am Pepe G.<\/em><\/p>\n\n\n\n

\u27a1\ufe0f Verification: I prove that I am Pepe G. with a selfie and a screenshot of my ID<\/em><\/p>\n\n\n\n

\u27a1\ufe0f Validation: The<\/em> system<\/em> confirms<\/em> that my ID exists and that its information is legitimate<\/em> and authentic<\/em><\/p>\n\n\n\n

\u27a1\ufe0f Authentication: I take a selfie to show that I am Pepe G. and that I want to use the service again<\/em><\/p>\n\n\n\n

A bit of theory: Clarifying concepts<\/h2>\n\n\n\n

Identification<\/h3>\n\n\n\n

We identify ourselves when we say who we are.<\/strong><\/p>\n\n\n\n

During identification, we answer the question: “Who are you?” <\/p>\n\n\n\n

\n

<\/p>\nAccording to the dictionary, IDENTIFY means “to give the personal data necessary to be recognized”. <\/cite><\/blockquote>\n\n\n\n

Verification<\/h3>\n\n\n\n

Verification links us to the proof of identity that we provide<\/strong> to prove that we are ourselves.<\/p>\n\n\n\n

Generally, verifications include confirmation against official databases, such as credit bureaus, identity documentation files, etc. <\/p>\n\n\n\n

Specifically, during the online identity verification process, it is guaranteed that an identity document belongs to the person who owns it <\/strong>, based on the collation of biometric information from a selfie and the capture of the document information. <\/p>\n\n\n\n

We verify ourselves through our identity documents. <\/p>\n\n\n\n

Verification answers two questions: “Who are you?” and “Are you really who you say you are?” <\/p>\n\n\n\n

\n

<\/p>\nAccording to the dictionary, VERIFY is “to check or to examine the truth of something”. <\/cite><\/blockquote>\n\n\n\n

Validation<\/h3>\n\n\n\n

The validation of documentation or personal information of potential clients implies their comparison with databases in order to verify that these data exist in the real world and are correct (also in order to reduce human errors). <\/p>\n\n\n\n

Everything that is validated is found and consistent with another data source.<\/strong><\/p>\n\n\n\n

The step of validating users provides companies with the certainty that postal addresses, bank accounts, telephone, etc. exist. that. they provide, but do not link directly to them. <\/p>\n\n\n\n

That is, the validation confirms that, for example, an email account exists, but does not confirm 100% that it belongs to a person<\/strong> (hence the validation must be completed with other mechanisms security). <\/p>\n\n\n\n

Answer the question: Does this data exist? <\/p>\n\n\n\n

\n

<\/p>\nAccording to the dictionary, VALIDATE is “to give strength or firmness to something, make it valid”. <\/cite><\/blockquote>\n\n\n\n

Verification vs. validation<\/h4>\n\n\n\n

During identity validation, the data is verified to exist and to be correct or real. While in identity verification the data in question are directly associated and the relationship and ownership between the data and the person to be verified is checked. <\/p>\n\n\n\n

Authentication<\/h3>\n\n\n\n

We authenticate ourselves when we provide a password, a selfie, etc. (information that only us should have), that is, a proof that we are who we say we are<\/strong>.<\/p>\n\n\n\n

A proof of our identity before giving us access to a platform or service usually involves:<\/p>\n\n\n\n