Browser-based Account Recovery IDV Module (AR-IDV)

🎯 Purpose

The Browser-based Account Recovery IDV (AR-IDV) module is the comprehensive identity verification system that validates user identity when they cannot access their normal authentication factors. It provides multiple verification methods to accommodate different user situations while maintaining security standards.


🏗️ AR-IDV Architecture

🌐 Web Application Design

  • Modular Component: Built as independent web application flow
  • Redirect-Based: Operates through secure redirect-based integration
  • Flexible Integration: Can be called from REL-ID portal or customer systems
  • Security-First: Maintains security throughout verification process

🔄 Integration Model


📊 AR-IDV Process Overview

The AR-IDV module operates through four sequential steps:

  1. Access Code Validation: Verify user control of registered communication channels
  2. IDV Method Determination: Select appropriate identity verification method
  3. IDV Method Execution: Perform chosen identity verification
  4. Credential Activation Redirect: Route user to credential re-establishment

🔒 Security Model

🛡️ Security Principles

  • Multi-Factor Verification: Multiple verification steps required
  • Configurable Security: Administrators control available verification methods
  • Secure Transitions: All handoffs between steps properly secured
  • Audit Trail: Complete logging of all verification activities

📊 Security Validation

Security AspectImplementationPurpose
User ExistenceDatabase validationConfirm user account exists
State VerificationAccount status checkEnsure account can be recovered
Method AvailabilityConfiguration checkVerify IDV methods are enabled
Token ManagementSecure token generationMaintain security across steps