When your user successfully completes an Incode onboarding journey, an Incode Identity is created and stored for that user. You can then create face authentication journeys that use facial recognition to match a user to their established Incode Identity.

Face authentication journeys support and enhance security for use cases such as:

• User login
• Granting access to specific parts of your application
• Authorizing high-value operations

Core Concepts

Facial Biometric Template

A facial biometric template is a mathematical representation of the characteristics and features extracted from a face image ("selfie").

Incode Identity

An Incode Identity is a unique ID for each previously registered user. It is linked to the facial biometric template extracted from the selfie taken during onboarding. An Incode Identity is created when all verification modules in an Onboarding Session are passed. If a module during onboarding fails, an Incode Identity is not created.

One-to-One (1:1) Facial Authentication

One-to-one or 1:1 facial authentication identifies a person by providing a selfie and a second authentication factor or Authentication Hint. The biometric template from the selfie is compared against the biometric template from the existing identity associated with the selected Authentication Hint.

One to N (1:N) Facial Authentication

One To N facial authentication identifies a person by providing a new selfie, comparing the new selfie's facial biometric template against all the existing identities to try to obtaining the more similar coincidence. This kind of authentication is called One to N because it compares one specific facial biometric template against N facial biometric templates (all the existing Identities).

Learn how to integrate Incode face authentication in your project.

Authentication vs. Authorization

Authentication

Authentication is the process of confirming that users are who they say they are. It serves as the initial step in a security procedure.

Authorization

Authorization is the process of granting a user permission to access a particular resource or perform a specific function. This term is often used interchangeably with access control or client privileges.

What Incode provides

Incode Face Authentication is a full set of tools to verify an identity, ensure that users are real, and detect common fraudulent behavior, including the Incode Liveness Check, physical and digital attacks, image quality, and face checks such as lenses, hats, closed eyes, or face masks. This qualifies as Authentication.

Incode does not provide an Authorization layer to grant or deny access or privileges.