FPT.eID meets international standard ISO 30107-3 (Level 1), enhances anti-spoofing security
FPT.eID, the electronic identification solution developed by FPT, has officially passed the rigorous testing procedures of iBeta to obtain the ISO 30107-3 (Level 1) certification – a key international standard for the ability to detect and prevent spoofing attacks in biometric authentication.This achievement not only enables FPT to comply with the regulations of the State Bank of Vietnam under Circular 50/2024/TT-NHNN, but also affirms the company’s pioneering position in the field of security and electronic authentication, demonstrating its readiness to meet the increasingly stringent demands of the digital finance – banking market.
FPT.eID secures international anti-spoofing certification ISO 30107-3 (Level 1) from iBeta.
ISO 30107-3 is an international standard issued by the International Organization for Standardization (ISO) and certified by iBeta, a testing agency recognized by the U.S. National Institute of Standards and Technology (NIST). ISO 30107-3 focuses on Presentation Attack Detection (PAD) capabilities in biometric authentication. The testing process includes numerous stringent assessments simulating sophisticated spoofing attacks such as using 2D printed photos, 3D masks, or replaying images on electronic devices. To obtain this certification, biometric technology must ensure absolutely accurate detection and prevention across hundreds of continuous tests. Achieving ISO 30107-3 (Level 1) means that FPT.eID has proven its ability to detect and defend against common spoofing attacks, meeting the highest current security standards.
Sharing about the journey to conquer this international certification, Mr. Phan Thanh Toan – Director of the Digital Identity Platform Center at FPT IS, FPT Corporation, said this is one of the most challenging tests in the biometric security industry, with very few organizations in Vietnam having achieved it. FPT’s development team faced many challenges, especially the 13-hour time zone difference between Vietnam and the United States. Throughout iBeta’s evaluation, the technical team had to work overnight to monitor the system and ensure no incidents occurred. According to iBeta’s requirements, the product must reach 100% accuracy in all stringent test cases. If even one single error appears in 900 spoofing attempts simulated by iBeta, the entire assessment must be restarted from the beginning. This demanded not only outstanding technological competence from the technical team but also high concentration and agile problem-solving abilities.
Obtaining the ISO 30107-3 certification not only helps FPT comply with legal requirements under the State Bank of Vietnam’s Circular 50/2024/TT-NHNN, but also affirms the company’s technological capabilities and product quality, serving as strong evidence of the exceptional security of the FPT.eID solution. This achievement also helps set market standards and raise safety benchmarks for biometric authentication solutions in Vietnam. As financial institutions and banks increasingly accelerate digital transformation, the demand for safe and trustworthy eKYC solutions continues to grow. ISO 30107-3 serves as a guarantee of FPT.eID’s reliability, enabling organizations to confidently deploy digital services without worrying about security risks.
According to Circular 50/2024/TT-NHNN, online service providers in the Vietnamese banking sector must meet ISO 30107-3 and ISO 19795-2 standards, tested by an organization recognized by the FIDO Alliance. As the provider of FPT.eID to more than 50 major financial and banking institutions in Vietnam, FPT considers achieving these international certifications a strategic priority to ensure security, build trust, and enhance competitiveness in the electronic authentication market.
In the near future, FPT aims to complete certifications for ISO 30107-3 (Level 2) and ISO 19795-2 by May 2025, two months ahead of the deadline set by Circular 50/2024/TT-NHNN. This will mark an important milestone for FPT in consolidating its pioneering position and opening up new development opportunities in international-level biometric authentication. With a robust technology foundation, rich hands-on experience, and a strong commitment to raising technical standards, FPT continues to affirm its leadership role in the development of electronic authentication solutions, accompanying financial and banking organizations on their journey toward secure and sustainable digital transformation.