Verifying Identity

Identity verification with Lithos ID is performed using official Government Identity Apps (also known as identity wallets). No document photos or liveness checks are required.

Personal Identification Data and Privacy

To maintain a high level of privacy and security, the API does not send Personal Identification Data (PID) to your application. Instead, it returns a cryptographic proof of the data.

You can then verify the proof against the information you collected from the user, such as their given name, family name, and citizenship.

Lithos ID provides SDKs and a Docker container to make proof verification on your servers straightforward.

Verification Process

The identity verification process using the Lithos ID API consists of the following steps:

1. Collect the Personal Identification Data (PID) you need, such as the user's given name, family name, date of birth, and citizenship.
2. Call the Lithos ID API to initialize identity verification. The API returns a URL to which you should redirect the user.
3. After the user completes identity verification, Lithos ID redirects them back to your application using the Redirect URL configured in the Customer Portal. The cryptographic proof is included in the request.
4. Use a Lithos ID SDK or the Docker container to verify the proof against the data collected in step 1.
5. If proof verification succeeds, the user's identity has been verified.

We modeled the verification process after OpenID for Verifiable Presentation direct_post response mode.