Search past winners/finalists


  • MESA logo

Keyless, London, United Kingdom: Zero-Knowledge Biometrics: A New Biometric System

Company: Keyless, London, UK
Company Description: Keyless is a passwordless authentication company pioneering privacy-preserving biometric authentication solutions. The first to use privacy-enhancing technologies (PETs) for biometrics, Keyless empowers organizations to authenticate their users smoothly and securely from any device with a single selfie.
Nomination Category: Company / Organization Categories
Nomination Sub Category: Technical Innovation of the Year - At Organizations With Up to 100 Employees
2023 Stevie Winner Nomination Title: Zero-Knowledge Biometrics: A New Biometric System
  1. Which will you submit for your nomination in this category, a video of up to five (5) minutes in length about the achievements of the nominated organization since 1 January 2021, OR written answers to the questions for this category? (Choose one):
    Written answers to the questions
  2. If you are submitting a video of up to five (5) minutes in length, provide the URL of the nominated video here, OR attach it to your entry via the "Add Attachments, Videos, or Links to This Entry" link above, through which you may also upload a copy of your video.

     

  3. If you are providing written answers for your submission, you must provide an answer to this first question: Briefly describe the nominated organization: its history and past performance (up to 200 words):

    Total 141 words used.

    Keyless is a passwordless authentication company that provides a secure way for users to authenticate their identity. Keyless eliminates the need for passwords or other authentication methods that can be easily stolen or hacked, instead using advanced biometric authentication technology to authenticate users. The company focuses on providing a secure, convenient, and privacy-focused way for users to access financial systems and transact securely.

    Keyless has been operational since late 2019 – when US $2.2m was raised in pre-seed funding. Since then, Keyless has raised a total of US $9.2m. Since 2020, Keyless has grown from a team of 10 people to 45 and now operates across Europe and the Middle East. Keyless was launched on the market in May 2020, starting with a large client in production (15K users), and now has more than 20 active deployments and POCs.

  4. If you are providing written answers for your submission, you must provide an answer to this second question: Outline the organization's achievements since the beginning of 2021 that you wish to bring to the judges' attention (up to 250 words):

    Total 243 words used.

    Keyless has achieved significant milestones in the development and implementation of their Zero-Knowledge Biometrics (ZKB) authentication system since the beginning of 2021. This groundbreaking solution combines the privacy advantages of local biometrics with the usability and flexibility of centralized biometrics, establishing a new category in the biometric authentication industry.

    Unlike traditional biometric systems, ZKB does not store any biometric data, whether on the user's device or in the cloud. This unique approach ensures the utmost privacy and data protection for users. Biometric data, in the context of facial recognition, includes the selfie image, extracted biometric features, and any linked information. However, data that cannot be linked to the user is not considered biometric data.

    Our Zero-Knowledge Biometrics system effectively combines the privacy benefits of local biometrics with the infrastructure advantages of server-side systems. Data is securely transmitted to and from the Keyless cloud service but undergoes a transformation process that renders it unrecognizable as biometric data. Neither Keyless nor our cloud service can decipher or extract any meaningful information from the transformed data, including potential links to a user's biometrics.

    These achievements demonstrate our dedication to pushing the boundaries of biometric authentication and ensuring the privacy and security of user data. The introduction of Zero-Knowledge Biometrics offers organizations and individuals an innovative solution that protects their sensitive information while maintaining usability and flexibility. Our advancements in ZKB have the potential to revolutionize the biometrics industry and establish new standards for privacy-focused authentication systems.

  5. If you are providing written answers for your submission, you must provide an answer to this third question: Explain why the achievements you have highlighted are unique or significant. If possible compare the achievements to the performance of other players in your industry and/or to the organization's past performance (up to 250 words):

    Total 232 words used.

    The biometric authentication industry currently revolves around two approaches: device-native (local) and server-side (centralized) biometric systems, each with distinct impacts on privacy, usability, and regulatory considerations.

    Local biometric systems, like Apple Face ID, store and process data on the user's device, ensuring privacy as biometric templates never leave the device. However, this approach sacrifices usability and identity portability. Losing the device means losing biometric templates, requiring re-enrollment, and cross-device authentication is not supported.

    On the other hand, centralized biometric systems store and process data on remote servers (cloud), offering convenience and usability. Users can retrieve their biometrics if they lose their device and authenticate on different devices. Yet, privacy becomes a concern as sensitive data leaves the device, including personal traits and health status. Encryption is limited, leaving biometrics during authentication.

    In summary, local biometrics prioritize privacy and data protection, while centralized biometrics prioritize usability and user experience. Neither approach has achieved a balance between the two until Keyless emerged.

    Keyless is a significant breakthrough in the industry, adding the privacy benefits of local biometrics to a centralized system. Using the cryptographic technique sMPC, we transform biometric data on the device so that it is unreadable when it leaves the device. Simultaneously, we offer usability and cross-device authentication, overcoming the limitations of local biometrics.

    Keyless represents a unique achievement. We successfully bridge the gap, providing privacy and usability in a single solution.

  6. You have the option to answer this final question: Reference any attachments of supporting materials throughout this nomination and how they provide evidence of the claims you have made in this nomination (up to 250 words):

     

Attachments/Videos/Links:
Zero-Knowledge Biometrics: A New Biometric System
PDF Keyless_Zero_Knowledge_Biometrics.pdf