Traditional printed card issued by your local DMV
Electronic ID stored on your phone's wallet
Your identity has been successfully verified. You can now proceed.
Sign in to your account
NewBanc is requesting access to verify your identity using your device biometrics. This will allow you to securely reset your password.
Continue on Mobile DevicePlease reset your password below.
Good morning, Alex ๐
Recent Transactions
The transfer has been securely authorized with your biometric.
A public key is a cryptographic value openly shared with anyone. It's one half of a key pair in public key cryptography, used to verify authenticity or decrypt data.
The public key is used to decrypt or verify a digital signature. If valid, it confirms the signer's identity โ i.e., they can reproduce the private key from their live face biometric.
A private key is a secret cryptographic value โ the other half of the key pair. It's used to encrypt data (like attestation data) to create signatures.
The private key is re-created from the account owner's live face biometric, used to encrypt the attestation data (the unique operation ID) to produce a digital signature, then immediately destroyed.
A unique operation ID serving as a nonce (number used once). It ensures freshness and prevents replay attacks, while linking the operation to a specific authentication event.
The attestation data is provided by the relying party as the challenge. It's a one-time-use value that ties the authentication to a specific transaction.
Produced by encrypting the attestation data with the private key. Serves as proof that the owner of the public key signed with the private key.
The relying party uses the public key to decrypt the signature, confirming the signer holds the private key and the attestation data matches the original challenge.
The account owner's live face is used to generate a public-private key pair. The private key is destroyed, and the public key is shared with the relying party.
The relying party generates a unique operation ID โ a nonce โ and sends it as the attestation data. This ensures the authentication is fresh and tied to a specific operation.
The user re-creates the private key from their live face biometric. The private key encrypts the attestation data, producing a digital signature. The private key is then destroyed.
The relying party uses the public key to decrypt the signature and verifies it matches the original operation ID, confirming the user can re-create the private key from their live face biometric.
Since the attestation data is a nonce, it prevents replay attacks โ the signature is only valid for this specific operation ID. Successful decryption authenticates the user.