text: Pioneering Digital Identity with FaceLock

category: case-studies

slug: facelock

section: Introduction

product: FaceLock / LA Wallet

client: Envoc / State of Louisiana

keywords: pioneering digital identity facelock


text: Overview: Louisiana pioneered digital identity with LA Wallet, a secure mobile application for digital driver's licenses. Envoc led the mobile development and digital identity services, ensuring accessibility, convenience, and robust security against fraud in this transformative government initiative. FaceLock extends this capability into enterprise and financial services: face-based credential binding that makes biometric verification a first-class, standards-compliant workflow. ---

section: Overview

keywords: digital identity mobile services louisiana pioneered wallet secure application driver licenses envoc development ensuring accessibility convenience robust security against fraud


text: The Problem: Traditional identity verification workflows rely on physical credentials, manual document checks, or brittle knowledge-based authentication (KBA). These methods are: Prone to fraud (stolen documents, synthetic identities) Slow and friction-heavy for end users Non-compliant with emerging ISO 18013-5 mobile driver's license standards Inaccessible across device types and connectivity conditions Financial institutions, government agencies, and enterprises needed a solution that could verify identity at enrollment, bind biometrics to credentials, and re-authenticate seamlessly — without depending on physical presence or third-party identity brokers. ---

section: The Problem

keywords: identity physical credentials traditional verification workflows rely manual document checks brittle knowledge-based authentication methods prone fraud stolen documents synthetic identities


text: The Solution: Envoc built FaceLock as a face-based biometric binding platform with the following core capabilities: Biometric enrollment: Captures a live facial geometry hash at onboarding; stored as a non-reversible template (no raw images retained) Credential binding: Links the biometric template to a verified credential (mobile driver's license, enterprise SSO token, or JWT) Re-authentication: Passive or active face match at login, transaction signing, or step-up auth events ISO 18013-5 compliance: Supports mDL (mobile Driver's License) presentation flows via NFC and QR Offline support: Local biometric match with signed challenge-response for air-gapped environments ---

section: The Solution

keywords: biometric binding template credential mobile driver license match envoc built facelock face-based platform following core capabilities enrollment captures live facial


text: Technical Architecture: FaceLock is implemented as a layered stack: iOS SDK (SwiftUI + FaceTec): Native enrollment and match UI, Secure Enclave key storage Android SDK (Jetpack Compose + FaceTec): Parity with iOS, uses Android Keystore .NET 10 Backend (ASP.NET Core): Credential issuance API, biometric audit log, revocation registry Azure Key Vault: Credential signing keys, HSM-backed for government-grade assurance Azure AD B2C: Federation layer for enterprise SSO integration Firebase: Real-time sync for enrollment state across devices ---

section: Technical Architecture

keywords: facetec enrollment android credential azure facelock implemented layered stack swiftui native match secure enclave storage jetpack compose parity uses keystore


text: Outcomes: Millions of Louisiana residents onboarded to digital identity via LA Wallet Zero reported biometric data breaches since launch Sub-2-second face match latency on mid-range devices Accepted at TSA checkpoints, select retail POS terminals, and state agency kiosks Foundation for FaceLock enterprise rollout to financial services sector

section: Outcomes

keywords: millions louisiana residents onboarded digital identity wallet zero reported biometric data breaches since launch sub-2-second face match latency mid-range devices