Browser-based Account Recovery IDV Module (AR-IDV)

šŸŽÆ Purpose

The Browser-based Account Recovery IDV (AR-IDV) module is the comprehensive identity verification system that validates user identity when they cannot access their normal authentication factors. It provides multiple verification methods to accommodate different user situations while maintaining security standards.


šŸ—ļø AR-IDV Architecture

🌐 Web Application Design

  • Modular Component: Built as independent web application flow
  • Redirect-Based: Operates through secure redirect-based integration
  • Flexible Integration: Can be called from REL-ID portal or customer systems
  • Security-First: Maintains security throughout verification process

šŸ”„ Integration Model


šŸ“Š AR-IDV Process Overview

The AR-IDV module operates through four sequential steps:

  1. Access Code Validation: Verify user control of registered communication channels
  2. IDV Method Determination: Select appropriate identity verification method
  3. IDV Method Execution: Perform chosen identity verification
  4. Credential Activation Redirect: Route user to credential re-establishment

šŸ”’ Security Model

šŸ›”ļø Security Principles

  • Multi-Factor Verification: Multiple verification steps required
  • Configurable Security: Administrators control available verification methods
  • Secure Transitions: All handoffs between steps properly secured
  • Audit Trail: Complete logging of all verification activities

šŸ“Š Security Validation

Security AspectImplementationPurpose
User ExistenceDatabase validationConfirm user account exists
State VerificationAccount status checkEnsure account can be recovered
Method AvailabilityConfiguration checkVerify IDV methods are enabled
Token ManagementSecure token generationMaintain security across steps