Authentication is not identity.
LiveEnsure® knows that authentication is different than identity. Identity is usually assigned by another entity and often self-reported in the context of trust. Most sites already suspect who they believe user ID to be. The challenge is to authenticate that ID in context. ID is great for federation, but authentication should remain independent. It’s what you bring to the session as a user, and how you can revoke your ID credentials if need be. Too many solutions conflate ID and authenticity within a single scan, fingerprint, login or cookie. Most solutions don’t understand the difference.
Security factors are not equal.
Not all security factors are made equal. The recent rush to accept and adopt involuntary biometrics as a single-stroke trust ID+authentication panacea has left end users with very few immutable tools to establish, control and revoke their real authenticity in the digital realm. Passwords, push tokens and PINs are useful, but as with biometrics, without context, they are dangerous. Few users know how to rescind a password. None know how to revoke bio or devices. We give users back control over credentials.
Trust has contextual meaning.
The majority of digital ID theft attacks and account takeover breaches are accomplished by hackers with the correct credentials, simply used in the wrong context. Modern systems are never fooled via brute forcing a false authenticity, but rather by effortlessly accept the right credentials from the wrong hands, location, device, time or context. Without context, IDs and security factors are essentially meaningless, as most hacked businesses have found. LiveEnsure® fixes that trust gap.
