Biometric Authentication Software Resources

xVoice passive authentication enrolls a voiceprint during a natural conversation, then on subsequent calls, authentication happens in the background during normal speech with no prompts or interruptions. All the customer needs to do is give their permission. This actually improves the customer experience by eliminating not only the effort of authenticating, but the need to remember pass phrases. Authentication can even happen in the IVR before they talk to an agent. If a customer fails the biometric match, Daon’s multi-channel capabilities allow for step-up authentication through an app to eliminate false positives. This process also has an added bonus of reducing operational spend by shortening call times and handling more calls completely in IVR.

xAuth is designed to meet PSD2 SCA requirements, which mandate combining two factors from different categories: something you know, something you have, or something you are. FIDO2 passkeys deployed through xAuth satisfy this requirement on their own, combining device possession with a biometric or PIN unlock. xAuth additionally supports phishing-resistant cryptographic authentication and is explicitly compliant with PSD2 SCA, FIDO2, and COPPA. xFace carries GDPR, PSD2, and NIST AAL2 compliance with full audit trail logging.

Biometric authentication is one factor in the authentication equation, specifically something you are. Defeating a well-implemented identity system requires compromising multiple independent mechanisms simultaneously, and biometrics alone do not provide that depth. xAuth supports the complete factor library across knowledge, possession, and biometric categories, including xFace server-side verification, voice biometrics via xVoice, passkeys, TOTP, push notifications, and registered device signals. Layering factors also improves resilience when one factor encounters environmental limitations. Daon customers who offer multiple biometric options rather than a single factor report near-elimination of biometric login failure, because when one factor cannot be used due to conditions, another succeeds. Stronger layering means a higher cost for any attacker to overcome.