UR Codes Pass Rigorous Independent Security Testing

FaceTec announced that its digitally-signed biometric barcode UR Code protocol successfully passed Praetorian Security Inc's rigorous reverse engineering testing process and its risk-informed security assessment as the company continues to expand its industry-leading position in global 3D Face Verification and digital identity software.

Praetorian completed reverse engineering analysis of the UR Code's SDK focused on identifying internal hashing mechanisms, encryption keys, and customer PII.

Praetorian also tested security controls related to robust code obfuscation, like dead code insertion, control flow flattening, and variable, class, and function renaming.

UR Codes enable legal identity-issuing authorities to provide machine-readable codes that bind together the legal identity data and biometric face data of a code holder. UR Codes provide similar privacy-protecting biometric security to e-passports, but without the usability and durability problems, or the exorbitant costs of scannable NFC chips.

UR Codes are generated by issuing authorities using secure UR Encoder software that runs behind their own firewall. The issuing authority encodes the identity information and feature vector data from the face photo of the person who is being issued the UR Code. A digital signature is then derived and also encoded, verifying that the identity data was truly issued - as encoded - by the listed issuing authority. Using each issuer's unique public/private encryption key pair, the software cryptographically signs each UR Code, making them provably immutable. The face data encoded cannot be reconstituted back into a human-viewable face photo, preserving the privacy of the stored face data.

UR Codes, in universal QR format, can be scanned with any smart device or webcam. Any organization, government, private sector, for-profit or nonprofit, and even any individual, can scan and match any 2D face photo UR Code with a 3D face photo. All required software is included in the UR Code Scanner/Matcher SDK and is free for unlimited use for not-for profits, law enforcement, and government agencies.