«Diya.Pydpysi» is changing the creation procedure: to activate a new signature, you will need to attach a biometric document to your smartphone via NFC, but they promise to make signing documents faster.
«Diya.Pydpysi» is changing the creation procedure: to activate a new signature, you will need to attach a biometric document to your smartphone via NFC, but they promise to make signing documents faster.
According to Channel 24, the updates are explained by the increase in digital threats and the desire to transfer the «most stringent» verification to the signature creation stage. The key change is this: now only data in the system and photo confirmation are not enough. For activation, a physical biometric document with a chip that is read via NFC, as well as a smartphone with support for this technology, is required.
The activation scenario is also changing: the user scans the document number, applies the ID card or passport to the phone to read data from the chip, passes photo confirmation and sets a new 6-digit code. Because of this, people without an NFC module or without a physical biometric document nearby will not be able to create an «Action.Signature» in the new format.
Instead, the procedure for signing documents should be simplified. After activation via NFC, the constant photo verification for each signature is removed, and confirmation of the action is reduced to entering a 6-digit code. The transition period is described separately: signatures created according to the old rules will remain active until the expiration date or until the account is logged out, and the user will switch to the new scheme the next time they create a signature.
NFC verification via a document chip has become an answer to scenarios where attackers try to remotely «bind» a signature to someone else’s phone through social engineering or face swapping. The new approach adds the factor of «physical presence» of the document owner, but at the same time increases the requirements for the device and the presence of biometrics at hand.
Previously, dev.ua wrote about how verification for recruiters appeared on the job search site Work.ua using the «Action.Signature» service.
