NFC Verification Process
When performing NFC-based authentication, the system attempts to:- Establish connection with the document’s NFC chip
- Read and validate the chip’s digital signature
- Compare the data stored in the chip with the OCR-extracted data
- Verify the authenticity of the chip using appropriate certificates
Automatic Decline Conditions
The following conditions will always result in an automatic decline regardless of application settings:NFC_AND_OCR_DATA_NOT_SAME- The Optical Character Recognition (OCR) data and the NFC chip data don’t match
Configurable Verification Settings
Applications can configure how the system handles various NFC verification issues by setting actions for different risk categories:-
Skipped NFC Validation
- Risks:
SKIPPED_NFC_VALIDATION - Configurable action: Decline, Review, or Approve
- Risks:
-
Unverified NFC Chip
- Risks:
NFC_CHIP_NOT_VERIFIED - Configurable action: Decline, Review, or Approve
- Risks:
-
Data Inconsistency
- Risks:
NFC_AND_OCR_DATA_NOT_SAME - Configurable action: Decline, Review, or Approve
- Risks:
-
Document Signer Certificate Revoked
- Risks:
DSC_CERTIFICATE_REVOKED - Configurable action: Decline, Review, or Approve
- Risks:
-
Document Signer Certificate Expired
- Risks:
DSC_CERTIFICATE_EXPIRED - Configurable action: Decline, Review, or Approve
- Risks:
NFC Verification Warnings
| Tag | Description |
|---|---|
SKIPPED_NFC_VALIDATION | The Near Field Communication (NFC) chip validation process was not completed, potentially due to technical issues or lack of NFC support. This could happen if the user’s device doesn’t support NFC reading or if there were connectivity issues during the verification process. |
NFC_CHIP_NOT_VERIFIED | The Near Field Communication (NFC) chip was not verified, potentially due to missing certificate to verify the signature of the chip, or the chip is designed to not be verified. This might occur with older document types or when the necessary verification certificates are not available. |
NFC_AND_OCR_DATA_NOT_SAME | The Optical Character Recognition (OCR) data and the NFC chip data don’t match, indicating potential document tampering or data inconsistency. This is a serious warning that could indicate document manipulation or forgery. |
DSC_CERTIFICATE_REVOKED | The Document Signer Certificate (DSC) used to sign the ePassport chip data has been revoked by the issuing country’s Certificate Revocation List (CRL), indicating the signing key may have been compromised. This is a serious warning that could indicate a security breach. |
DSC_CERTIFICATE_EXPIRED | The Document Signer Certificate (DSC) used to sign the ePassport chip data has expired, meaning the certificate’s validity period has passed. This may occur with older documents whose signing certificates are no longer within their validity window. |