Repository navigation
Conversation
Updated the privacy document to include additional data processing steps involving NFC and OCR for personal data extraction. Added few steps in the purpose, and they probably need to be reflected in the flow diagram below?
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
Didr
left a comment
Didr
left a comment
There was a problem hiding this comment.
Several parts of the document are outdated so we can leave the flow diagram update for a separate PR.
| 1. Receive a biometric liveness scan. | ||
| 2. Take a photo of the photo-ID, perform the OCR read of the data including the MRZ information. | ||
| 3. Access the photo-ID chip using thE NFC and read the data stored in the document that includes the users personal data and the documents signing certificates and security components stored on the chip (hashes, signatures and keys). | ||
| 4. Perform active photo-ID authentication (check that the document was not cloned). (Performing the passive authentication of the photo-ID document is not in scope of facetec-api and is left to customers to implement their own flow). |
There was a problem hiding this comment.
| 4. Perform active photo-ID authentication (check that the document was not cloned). (Performing the passive authentication of the photo-ID document is not in scope of facetec-api and is left to customers to implement their own flow). | |
| 4. Perform active and passive photo-ID authentication. |
There was a problem hiding this comment.
One part of passive authentication is not part of facetec api and this is to build an authoritative source of countries CSCA. If you agree with this, i would rephrase this sentence.
| 2. Take a photo of the photo-ID, perform the OCR read of the data including the MRZ information. | ||
| 3. Access the photo-ID chip using thE NFC and read the data stored in the document that includes the users personal data and the documents signing certificates and security components stored on the chip (hashes, signatures and keys). | ||
| 4. Perform active photo-ID authentication (check that the document was not cloned). (Performing the passive authentication of the photo-ID document is not in scope of facetec-api and is left to customers to implement their own flow). | ||
| 5. Verify that the data from the NFC chip was not tampered with. |
There was a problem hiding this comment.
This is the same as active authentication defined in point 4. We can skip this.
There was a problem hiding this comment.
You are half right :) It is the same as the passive authentication so we can skip this indeed, but i would also describe it under that point so that we are clear.
There was a problem hiding this comment.
As per my previous comment, facetec api is not performing the passive authentication in its entirety.
Co-authored-by: Didr <Didr@users.noreply.github.com>
Co-authored-by: Didr <Didr@users.noreply.github.com>
|
Updated the privacy document to include additional data processing steps involving NFC and OCR for personal data extraction.
Added few steps in the purpose, and they probably need to be reflected in the flow diagram below?