Release Notes

1. The gender of the user was not visible in the agent portal. After this enhancement, it is visible to the ident specialist making it easier for user onboarding.

2. Changed the UI and removed the old/legacy endpoints from videoserver.liveswitch to mitigate the security risk of session hijacking due to insecure transmission of session tokens. This has improved the security of the application.

The special nationality codes are included in the application. They are visible in the nationality dropdown menu. The customer can now select special nationalities that were earlier not defined and caused cancellations of idents.

Implemented an onboarding website for all Lekkerland shops. The shop owners can now register and activate themselves online for IDnow ShopIdent.

Austria Emergency Passport 2022, Benin Electronic Consular ID Card 2021, Guinea Consular ID Card, Ireland Temporary Residence Permit 2014 – Certificate of Registration, Republic of Moldova Driver’s License 2008, Driver’s License 2015.

Belgium Electronic Diplomatic Passport 2022, Electronic Official Passport 2022, Electronic Service Passport 2022, Electronic Travel Document for Refugees 2022, Electronic Travel Document for Aliens 2022, Electronic Travel Document for Stateless 2022, Benin Electronic Consular ID Card 2021, Ukraine Electronic Diplomatic Passport 2015, Electronic Service/Official Passport 2015, Philippines Electronic Ordinary and Diplomatic Passport 2016.Improvements:

Anguilla Electronic Passport 2016/2020, Austria Electronic Passport 2023, Bermuda Electronic Passport 2016/2020, Cayman Island Electronic Passport 2016/2020, Gibraltar Electronic Passport 2016/2020, Montserrat Electronic Passport 2016/2020, Saint Helena Electronic Passport 2016/2020, Turks and Caicos Electronic Passport 2016/2020, United Kingdom Electronic Passport 2015/2020, Guernsey 2016/2020, Isle of Man 2016/2020, Jersey 2016/2020, Virgin Islands (British) Electronic Passport 2016/2020 – added support of signature page, France Health Card 2007 – new security check for INSEE number, Greece Electronic Alien Travel Document/Asylum Seeker 2006, Passport 2011, Travel Document for Refugee 2006, Stateless 2006 – added support of signature page and barcode verification security check, Ireland Electronic Diplomatic/Passport/Service Passport 2013 – added field nationality, improved colors security check, Switzerland Driver’s License 2023 – activated barcode security check, Switzerland Electronic Diplomatic/Passport for Alien/Service Passport/Travel Document for Refugee 2022 – added support of signature page.

Algeria Electronic Passport 2012 – improved OCR extraction, all models database – reviewed and updated reference numbers from official databases, Brazil Digital Driver License, Driver License Conselho de Transito, Driver’s License 2017/2022, Driver’s License Mod.1-7 (various states), ID Card 1988, ID Card For Foreigners, National ID Card 1998 Models 1-6, National ID Card 2018 Models 1-5, National Migratory Registry Card Models 1-3 – adjusted optional fields and updated validity rules to reduce FRR, Finland Driver’s License 1998 – updated layout modelization, Ireland Driver’s License 2015/2017, Learners Permit 2013/2015 – updated validation campaign.

Belgium Electronic Diplomatic Passport/Official Passport/Service Passport/Travel Document for Refugees/Travel Document for Aliens/Travel Document for Stateless 2022, Benin Electronic Consular ID Card 2021, Ukraine Electronic Diplomatic Passport/Service/Official Passport 2015.

Australia: Current self-signed Australian certificate public key, link certificate of the main public key, Bulgaria: CSCA link certificate 02/2024, CSCA Self-Signed Certificate 02/2024, Cyprus: Certificate revocation list, self-signed csca certificate, csca link certificate, Germany: Master List of 526 CSCA certificates and CSCA link certificates, Israel: CRL files, CSCA root certificates for Israeli passport and ID, Italy: Certificate revocation list, CSCA Master List, Link Certificate for CSCA04 and CSCA05, self-signed certificate, Liechtenstein: CSCA certificate 2024, Monaco: Link certificate CSCA MC0.1 and principal public key certificate MC8 for official documents issued since 05/03/2024, Netherlands: Master List

Norway: Masterlist, Sweden: CRL for issuer “CN=Swedish Country Signing CA v2,O=Polismyndigheten,C=SE” updated 13-04-2024, ML, Visible Digital Seals Certificates, Taiwan: 2024 CSCA current main public key certificate, 2024 CSCA link certificate, ICAO: Latest collection of eMRTD PKI objects, NON-CONFORMANT Document Signer certificates (DSCs) and Certificate Revocation Lists (CRLs)

1. Fixed an issue where the ISO country code did not update when the country flag was selected on the terms and conditions page. Now, when a user selects a country flag from the dropdown menu, the relevant country code automatically appears in the mobile number field.

2. Enabled users to save, download, or print the agreement form on their Android or iOS devices. Previously, during the contract registration process, users could not save, download, or print the document after signing it during ID verification and registration

3. Disabled fraudulent users from attempting to retry ID registration if their identification was marked as fraudulent. Previously, fraudulent users could retry using an alternative method by being redirected to the retry screen, which was incorrect because users marked as fraudulent should not have the option to retry the identification process.

4. Resolved the issue of repeated incorrect ident codes being sent to users during verification, which resulted in the cancellation of the identification process after three failed attempts.

5. Resolved the issue of the application crashing or restarting when the user revoked the microphone or camera permissions during the identification process

1. Updated the terms and conditions section for the Web SDK, requiring user consent during verification. The new terms and conditions are PVID and GDPR compliant, in accordance with the latest requirements from the legal department. These terms and conditions are displayed via a link, and users accept them by clicking the “Continue” button.

2. Corrected the translations for Romanian and Spanish languages in the Web SDK.

3. Fixed recurring camera errors that occurred when users integrated the Web SDK with the native app using WebView. Users previously experienced issues such as camera timeouts or denied camera access.

4. Enhanced the document capture error screens to include more contextual error details, providing reasons for rejection and options for retrying.

New error screens

5. Enabled text customization for the Romanian language-certified ETSI flow, allowing modification of the text input on web screens within the flow configuration.

6. Users can now see an updated screen that lists the documents required for user identification. All relevant screens, including the document introduction screen and error screens, display this list of documents.

PVID eligible documents list

Enhancement made in ID processing that have enabled IDCheck to:

— Extend cut corner detection functionality on German documents like the Germany identity card issued in 2010 and Germany Electronic National ID 2021.
— Photo Conformity Control: Photo conformity control to check that the photo in the identity document is not a substituted photo. This has been activated for documents like Italy Driving license 1999, Belgium Electronic Identity card 2020, Belgium Electronic ID Card 2021 for children, Belgium Electronic Identity card 2021, Italy Electronic Identity card 2016, and Italy Electronic Identity card 2022.
— Improvement on this control for UK Driving license.
— Improved document number reading rate on French resident permit: France Electronic Temporary Resident Permit 2020 (Carte de Sejour Temporaire)

Enhancement made in non-ID processing that have Enabled IDCheck to:

— Add New Proof of Address (PoA) document for : Prixtel invoice. Prixtel is a French mobile network service provider.
— Amelie statement. Amelie is a French Health Insurance provider.
— Manage new version of French tax assessment (new 2DDOC).

New documents supported in standard processing level:
Central African Republic Passport 2014, Greece Electronic Passport 2024, Ireland Electronic ID Card 2013, Temporary Residence Permit 2001, Visa A/B/C/D 2007/2019, Jamaica Passports 2001/2013/2023, Kosovo Driver’s License 2008, Electronic Passports 2024 series, Lesotho Electronic Passport 2013 series, Malawi Electronic Passport 2020, Micronesia Passports 2017 series, Moldova Driver License 1995, Mozambique Electronic Passports 2019 series, Emergency Passport 2019, Panama Seamans Book 2021, Republic of Moldova Electronic Diplomatic, Service Passport 2015, Saint Kitts and Nevis Electronic Passports 2010 series, Trinidad and Tobago Passports 2007, Vietnam Electronic Passport 2023, Zambia Passports 2008, Zimbabwe Diplomatic, Passport 1998/2015, Electronic Passports 2017/2022.

Upgraded document support level:
India Diplomatic Passports, India Official Passport, India Passport 2019, India Passport 2019 – no personal number, Ireland Electronic Travel Document for Alien 2014, Ireland Electronic Travel Document for Stateless (Convention of 28 September 1954) 2014, Philippines Electronic Diplomatic Passport 2016, Philippines Electronic Passport 2016, Philippines Electronic Service Passport 2016.

Improvements:
Colombia Electronic Passports 2018 series – improvements on FRR, Ireland Driver’s Licenses and Learners Permits 2015/2017 – improved security checks, Italy Driver’s License 2013 – added new security checks.
All Schengen Visas – update done on OCR field descriptions, Djibouti Passport 2003 – improved classification, France Electronic Driver’s License 2013 – improved OCR extraction, France Electronic ID Card 2021 – improved OCR extraction of first name, France Electronic Passport 2006/2008/2013 – added format to birth place city, France ID Card 1987/1994/2001/2016 – added format to birth place city, Germany Electronic ID Card 2010 (with Address Sticker) – updated security check, Hungary Address ID Card 2012 – improved barcode extraction, Ireland Driver’s License 2013/2015/2017, Learners Permit 2013/2015 – improved OCR extraction of all fields, Morocco Electronic Passport 2009 – improved OCR extraction, Peru ID Card – added barcode and improved security check, Peru ID Card pre-2007 – updated security check, Switzerland Electronic ID Card 2023 – enabled first name and last name extraction, United Kingdom Driver’s License 2014/2015/2021, Driver’s License (Wales) 2014/2015, Provisional Driver’s License 2014/2015/2015 – activated address field extraction.

eMRTD Chip enabled (DG1 and DG2):
Central African Republic Electronic Ordinary/Service/Diplomatic Passport 2014, Greece Electronic Passport 2024, Ireland Electronic ID Card 2013 (Public Service Card), Electronic Travel Document for Alien 2014, Electronic Travel Document for Stateless (Convention of 28 September 1954) 2014, Jamaica Electronic Passport 2023, Kosovo Electronic Ordinaty/Diplomatic/Official Passport and Travel Document 2024, , Lesotho Electronic Ordianry/Diplomatic/Service/Official Passport 2013, Malawi Electronic Passport 2020, Mozambique Electronic Ordinary/Diplomatic/Service/Official Passport 2019, Republic of Moldova Electronic Diplomatic/Service Passport 2015, Saint Kitts and Nevis Electronic Ordinary/Diplomatic/Service/Official Passport 2010, Vietnam Electronic Passport 2023, Zimbabwe Electronic Ordinary/Diplomatic/Service Passport 2017/2022.

— Screen Detection: IDcheck now supports a screen detection control feature to check whether the photo in the document provided by the user has been taken from a digital screen. This new security feature helps in the identification of digital photos taken from screens of laptops, desktops, or mobile devices that have been pasted onto the ID document submitted for identity verification – helping to verify if the photo in a submitted identity document is from a genuine physical document. This feature does not add an extra step to the user journey as it verifies the photo during the document verification step in the Identity verification process. This robust screen photo detection control enhances security and mitigates the risk of identity fraud. 

— Cut-Corner Detection: IDcheck now supports a corner detection feature that identifies and distinguishes between the four corners of a submitted identity document, including the laminated border. If a missing or truncated corner is detected, the identity document is rejected. If all four corners are captured and more than 90% of the document is visible, then the document is counted as valid. This feature enables security compliance and prevents impersonation and fraud attempts during identity verification.

✅ Valid document because all corners are visible

❌ Invalid document because one corner is cut

— Blur/unblur confidential data on-demand: IDcheck now supports a feature that enables sensitive or confidential data on an ID document to be blurred on-demand. Customers can also request to unblur data fields, with the admin or operator able to blur or unblur data. This feature is configurable at the settings level, with confidential data in some fields blurred to maintain the confidentiality of sensitive user data.

Some fields blurred in the stored photo of the Driving License used earlier for ID verification

Some fields blurred in the stored photo of a Passport used earlier for ID verification

1. Upgraded from React 17 to React 18 for enhanced automation, data fetching, integration of the design system, and product updates. This upgrade will help to improve user experience and minimize vulnerabilities.

2. Language selector: All languages in the European Union (EU) mentioned in the language selector and identified by respective short names are grouped under the acronym “EU”. If “EU” is selected, then all documents in different European languages are selected. Similarly, they can be deselected at a time.

3. Implemented new privacy manifests and SDK signatures in the mobile Software Development Kits (SDK) versions v7 and v6 for iOS as per the directive of Apple. This integration is required by Apple for compliance linked to dependencies of third-party applications used by SDKs.
Proof of Address (PoA): Updated to latest version of the Engie payment schedule. Engie is a French energy supplier for which IDNow has several models of proof of address. This latest enhancement is related to the statement of direct debits made.

4. ID processing: Improved the rate of reading of the Optical Character Recognition (OCR) for the city of birth field on French identity cards. In this enhancement, errors in OCR were reduced by 50 percent. 
Photo ghost control: This enhancement is related to the eradication of impersonation of the identity and for that, it compares the face with security features like Near Field Communication (NFC), Optical Variable Device (OVD), hologram, and others embedded in the Identity document. IDnow has added this control for the following models:
— CHE_RP_9662.  
— ITA_P_0150, ITA_P_0885, ITA_P_6312, ITA_P_6840
— NLD_ID_0156, NLD_ID_7606

1. Fixed an issue of capturing the user’s image in the camera’s new version of iOS (17.4.1). Previously, if the user wanted to take a photo and ask for camera access, the camera showed an error on the screen. Now, the user can access the camera and move ahead with onboarding.

2. Resolved an issue that caused the application to crash during document liveness check. The user could not proceed because of a black screen. When the user refreshed the screen, the application terminated the session, indicating an error that said the user had voluntarily closed the session. Now, the user can retry without any issues.

3. Resolved the issue of the rejection of the Kosovian ID.

4. Fixed an issue of the crash on IDCheck mobile SDK 6.2.0 on iOS that was compiled with Xcode 15. The issue was happening on some devices with iOS 17 after starting the liveness session. Now, Liveness sessions are completed without any crashes or errors.

5. Fixed an issue on the CHE_ID_4981 reading rate. The reading rate is the rate of extraction of information from fields of the model ID.

1. New ID documents added to VideoIdent, including the Portuguese residence permit and Finnish ID card.

1. Resolved the issue of the wrong date format for the Congo passport to the correct date format MM/DD/YYYY.

1. Enhanced facetec mobile SDK (Software Development Kit) to v9.6.80 or above, updating the the liveness component to the latest version to improve performance.

1. Added a new checkbox in the customer portal and set its status as true, by default to enable Representational State Transfer (REST) encryption and thus reduce security risks.

2. Added new method to SDK interface. It is DTLS Certificate Provider. If Datagram Transport Layer Security (DTLS) certificate provider is set up then DTLS injection will happen. Otherwise, the default process will start. DTLS is a session layer protocol that enables tamper proof client-server communication thus preventing message forgery, tampering and eavesdropping.

3. Enhanced Agent Portal Search: Enhanced how we can identify and search idents in our agent portal via more parameters, improving how we service our customers during calls.

4. Added Content Security Policy (CSP) header: addedto improve security by allowing detection and preventing attacks like cross-scripting and content injection. Header will be introduced automatically to improve security. No action is needed by the customer.

5. Language Selector: A Language selector now assists the product users to choose their preferred language during customer onboarding. It is not the application’s interface language. The customer can choose the preferred language configured against the language short name (e.g., GER for German, ENG for English). The list populates based on the available languages in the default configuration.

6. Enhanced name check logic during eID Qualified e-signat6. ure (QES) phase of the verification flow: Customer whose name does not match will not be allowed to proceed further in the verification process. Since the Qualified e-signature (QES) is relied upon as as the most-secure method to prove the digital identity of the person, it is used as a benchmark to match the name of customer against the name in the ident. This enhancement will make the verification process more robust, and prevent fraud and impersonation.

7. Updated the Chrome driver to fetch the latest version of Chrome for test robots. Until now, all customers in the same realm where using the test robots. But this enhancement will enable customers to also choose an agent besides Test Robot.

1. Fixed an issue where signature page shows an error or failed to load on the device screen, when attempting to give consent during the identification process.

2. Resolved the issue of identification cancellationon the ident specialist side if the customer refreshes the page during the identification process. Now, an ident specialist can pick up the ident (identification process) in the admin portal from where the user had left or refreshed it.

3. Enabled the selection of generic items like customer photos, which earlier would select all available user photos.

4. Enabled the customer to receive the SMS on the phone before the identification process begins with the help of an agent or expert.

5. Fixed the issue of language mix-up in the popups as the customer undergoes the identification process.

6. Resolved the issue of the signature contract page not opening on the users’ devices when the users selected German as the language. Now, users can sign the contract in German language.

7. Provided resolution for the inconsistency in the placement of content on the customer interface. This issue happened when the customer registered for identification and was put on the waiting list.

8. Enabled customers to select the language of choice because the language selector was not working during the identification process.

9. Reviewed Google’s recommendations on how to handle Secure Socket Layer (SSL) errors securely and made the handling of errors stricter to prevent man-in-the-middle attacks. Such attacks cause impersonation of users and theft of critical personal information.

10. Fixed an error that occurred when snapping the front side of the ID of a customer during the identification process.

11. Fixed the issue of the phone number checkbox not working, thereby disabling the user from entering the phone number and proceeding ahead with verification of identity,

12. Removed the unnecessary/repetitive text on the Customer Quality Call (CQC) screen.

13. Enabled the terms and conditions link in the Check Contact section to work, allowing customers to sign the contract after identity verification.

14. Enabled iOS users to view and sign the consent document and complete the identity verification process, which they were earlier unable to do because the consent form was not visible during the verification process.

15. Resolved the issue that was not allowing the customer to change the phone number.

16. Enabled content to load on the signature screen, which earlier had failed to do so and showed an error message.

17. Enabled iOS users to sign the document as part of the signing process leading to verification of the user identity.

1. Added the orientation of customer document. This enhancement allows indent specialist to know the type of document captured by the customer during the identification process. For example, it can be a snapshot of a passport, driving license, or any other KYC document required for the registration.

2. Added support of Serbian and Albanian languages in IDC Web SDK. As a result of this enhancement Serbian and Albanian customers can now onboard IDC products using their native languages. 

3. Added ID processing functionality:

— Cut corner control on ID or identity document of the customer: now available on more than 50 models (German ID, Belgium ID, Spanish models, French models, Italian models). Please contact Customer Service Manager (CSM) team for more details.

— Newer Optical Character Reader (OCR) now allows faster reading of customer ID: now it is easier to accelerate extraction of the data from the fields on ID document. The OCR technology now provides up to 30% performance gain on certain models.

— Improve expiration date reliability when year on two digits: We have recurring problems with Romanian document models, for example, which are valid for 50 years

— Reduce the time we spend processing non-ID documents: if we analyze a document that isn’t an ID card, it takes less than 5 seconds to answer ‘DOCUMENT NOT FOUND’.

4. Unstructured document processing functionality:

— PoA: Integrated Bouygues in voice version in IDcheck: Bouygues is a French mobile service provider.

— PoA / Tax assessment: improve OCR field reliability, thereby improving conversion rates.

1. Resolved the issue of the exchange of the data from the Optical Variable Device (OVD)s service and IDC for KYC of customers because of the wrong format of the message.

2. Corrected the issue of document cropping. The ident specialist can now crop a document and read it.

3. Fixed the issue of image cropping. Now, the ident specialist can crop an image without any error.

4. Resolved the issue of the mismatch between faces and their analyses in the Liveness functionality of IDC, including the issue of enlarged videos of the customers.

5. The KYC data of the customer – name, type of Know Your Customer (KYC) documents, and country – were visible to the ident specialist even after they were selected. This issue is solved, and the Ident specialist cannot see the customer information.

6. Fixed the display issue related to International Bank Numbers or IBAN. The tooltip or dialog box was not visible, and the IBAN field did not appear red when the wrong IBAN was entered.

7. Fixed crashes that recurred on IDcheck after starting the liveness session on iOS devices.

8. Resolved the issue of non- acceptance of the PDF files (PoA, Tax Assessment, Pay sheet.)

9. Fixed the issue of manual review documentation for Spanish and Romanian Proof of Address (PoA)models.

10. Fixed the on-manual mode for Photoconformity control.

11. Resolved location part keys for LUA scripts in the ontology.

12. Fixed the PVID issue INTERNAL_ERROR / VIDEO_SCAN_SESION_FAILED (Page matching Aborted in fats mode)

13. Fixed the PVID issue where the error code in the final verdict is an internal error instead of camera capture error.

1. Implemented an onboarding website for the Lekkerland trade fairs: the shop owners use the website to register and activate themselves on-site for IDnow ShopIdent. The process is operated by IDnow on-site via a tablet.

1. Enhancement of the evaluation capabilities of ShopIdent identifications: through the implementation of the “Customer abandonment” scan in the iTM tracking system. The scan is triggered when the customer aborts the identification process in the shop.

1. Resolved the issue where an order was not set to finish and when the identification was negative, and the parameter “Identdaten Prüfung” in the short name configuration was set to “true”.

1. Hash Signing: AutoIdent with Qualified Electronic Signature (QES) now supports Hash Signing via the trust service provider Namirial. Hash signing is a method of creating an electronic signature in which the PDF document is not actually signed, but a cryptographic hash of the document is signed instead. This method provides a significant enhancement compared to the traditional file signing approach.

2. Enhanced document support: Support for new document models, including the addition of Austrian Passport 2023 and Swiss Drivers License 2023.

3. Automatic ident cancellation: For any idents whereby the ‘Security Features’ video is missing, this new feature can be enabled to automatically cancel the ident. Support for this feature was driven by customers’ compliance requirements mandating that every ident must have a ‘Security features’ video in the final result – if this video is not included in the final result, such idents would be non-compliant.

1. Updated phone number validation library: The phone number validation library in the AutoIdent with Qualified Electronic Signature (QES) signing flow has been enhanced to support validation of new Romanian mobile phone number series.

2. Updated liveness detection component: Updates to the liveness detection component in the Android SDK to better support fraud detection.

1. Ident Auto Cancellation: If NFC is used by the user during the ident, the Security Features step will be skipped and there will be no Security Features video captured and saved. Such idents will no longer be cancelled by the system when the configuration is enabled.

2. Underage error screen: Fixed UI issues in the Underage error feedback screen on iOS.

3. UI Fixes: Fixed UI inconsistencies in the iOS SDK for the Additional Document capture screen.

N/A

No major features to highlight this month, however, we have released multiple enhancements and bug fixes! See below.

1. Ghost image control

— Two enhancements made to the ghost image check, where the secondary holographic image of the person on the back of an ID document is checked against the primary photo on the front of the ID document, ensuring that no manipulation has taken place to the document and that the photos match.

— This check has now been implemented for French Resident Permits, and has also been improved for Romanian IDs to further improve the False Rejection Rate (FRR)

2. EDF Invoice Proof of Address

— Enhanced fraud detection for EDF invoices, with additional fraud indicators, such as templates linked to reported fraud, added to Proof of Address.

3. French Address Validation

— Enhanced address validation with the addition of a comprehensive French address database.

1. French ID Cards: Fixed cases where barcode scanning on France Electronic ID cards belonging to people with double-barrelled or multiple first nameso were rejected erroneously.

2. Android Mobile SDK: Fixed cases where the CAPTURE_ENDED event notification was sent incorrectly.

1. User Interface (UI) Improvements:

1.1. On upload flows, customers can now upload documents by using the drag and drop option from a laptop in order to simplify the capture workflow.

1.2. Improved PVID flows at the document list screen to make it easier to access to the rest of the flow

1.3. On the PVID consent screen, the remote verification policy and the personal data protection policy for our certified services ave been updated:

Remote verification policy:

— removal of section for NFC mobile reading for mobile SDK

— updated list of allowed documents

Privacy policy (only on ETSI):

— change of company name (Ariadnext was removed)

— spelling correction

1.4. The biometric liveness challenge tutorial screen has been improved, with additional explanations on how to do the challenge added.

2. User Interface (UI) bug fixes:

2.1. Camera focus blurred during static capture

— Fixed cases where the opened camera on certain devices was blurry during static capture

— Improved how the application asks for camera permissions from the user

2.2. Incorrect animation orientation on document liveness

— Fixed cases where an incorrect document orientation during static capture causes the incorrect tilt animation during dynamic capture. Now, the crop used for the tilting animation follows the orientation of the static capture.