Authentication is not identity.
LiveEnsure® knows that authentication is different than identity. ID is usually assigned by another entity and often self-reported in the context of trust. Most sites already suspect who they believe user ID to be. The challenge is to authenticate that ID in context. ID is great for federation, but authentication should remain independent. It’s what you bring to the session as a user, and how you can revoke your ID credentials if need be. Too many solutions conflate ID and authenticity within a single scan, fingerprint, login or cookie. Most solutions don’t understand the difference.
Trust has contextual meaning.
The majority of digital ID theft attacks and account takeover breaches are accomplished by hackers with the correct credentials, simply used in the wrong context. Modern systems are never fooled via brute forcing a false authenticity, but rather by effortlessly accept the right credentials from the wrong hands, location, device, time or context. Without context, IDs and security factors are essentially meaningless, as most hacked businesses have found. LiveEnsure® fixes that trust gap.
Security factors are not equal.
Not all security factors are made equal. The recent rush to accept and adopt involuntary biometrics as a single-stroke trust ID+authentication panacea has left end users with very few immutable tools to establish, control and revoke their real authenticity in the digital realm. Passwords, tokens and PINs are worthless, but biometrics without context are also dangerous. Few users know how to rescind a password. None know how to revoke biometrics. LiveEnsure® gives context to credentials.