本人確認チェック

書類チェックでは、不正な本人確認書類の使用を未然に防ぐことができますが、不正行為者は盗んだ本物の書類を使用する可能性もあります。これを防ぐために、Stripe Identity では、ユーザーに対して顔写真チェックを行うことができます。

顔写真チェックでは、写真付き身分証明書とユーザの顔写真から、顔の形などの生物学的特徴を検出します。その後、Stripe では高度な機械学習アルゴリズムを使用して、その顔写真が同一人物のものであることを確認します。

EU など一部の地域では、個人情報保護法により、生体認証技術の使用が正当である理由を示すか、生体認証以外の認証手段を提供することが義務付けられています。代替となる認証手段を用意するか、法律顧問に相談されることをお勧めします。

利用可能対象

顔写真チェックで使用できるのは、以下の国の政府発行の写真付き身分証明書です。

Adding selfie checks

To add selfie checks to your application, first follow the guide to collect and verify identity documents.

Adding selfie checks to VerificationSessions

When creating a VerificationSession, use the options.document.require_matching_selfie parameter to enable selfie checks.

curl https://api.stripe.com/v1/identity/verification_sessions \
  -u "
sk_test_BQokikJOvBiI2HlWgH4olfQ2
:" \
  -d type=document \
  -d "options[document][require_matching_selfie]"=true

This configures the verification flow to require a photo ID and a face picture from your user.

Accessing selfie check results

After it’s submitted and processed, the VerificationSession status changes depending on the result of the checks:

• verified — Both the document and selfie checks were successful. The session verified_outputs contains extracted information from the document.
• requires_input — At least one of the document or the selfie checks failed.

To access the captured selfie and document images, you’ll need to retrieve the associated VerificationReport, you can do this by expanding the last_verification_report field in the session:

// Set your secret key. Remember to switch to your live secret key in production.
// See your keys here: https://dashboard.stripe.com/apikeys
const stripe = require('stripe')(
'sk_test_BQokikJOvBiI2HlWgH4olfQ2');
const verificationSession = await stripe.identity.verificationSessions.retrieve(
  '{{SESSION_ID}}',
  {
    expand: ['last_verification_report'],
  }
);
const verificationReport = verificationSession.last_verification_report;

The VerificationReport has document and selfie fields holding the results of the document and selfie checks. Here’s an example VerificationReport with successful document and selfie checks:

{
  "id": "vr_ZXqQq3n6uZxgB4anV3rCZtbN",
  "object": "identity.verification_report",
  "type": "document",
  "verification_session": "vs_2CSEL0WLwDlKr4W4b1kdXrSi",
  "created": 1611776872,
  "livemode": true,
  "options": {
    "document": {
      "require_matching_selfie": true
    }
  },
  "document": {
    "status": "verified",
    "error": null,
    "first_name": "Jenny",
    "last_name": "Rosen",
    "address": {
      "line1": "1234 Main St.",
      "city": "San Francisco",
      "state": "CA",
      "postal_code": "94111",
      "country": "US"
    },
    "document_type": "id_card",
    "expiration_date": {
      "day": 17,
      "month": 7,
      "year": 2024
    },
    "files": ["file_ygiIVoJqvw0u8wxqT6zNO4OH", "file_AlFFwHoZ26Gz2RZo3ESLRB8e"],
    "issued_date": {
      "day": 4,
      "month": 27,
      "year": 2021
    },
    "issuing_country": "US"
  },
  "selfie": {
    "status": "verified",
    "error": null,
    "document": "file_BAZ1CQCLcpJy67ZRMCiNU0vm",
    "selfie": "file_Rx09KREiouYvl9rdE4X0ps4f",
  }
}

To access the collected document and face images, see Accessing verification results.

Understanding selfie check failures

The document and selfie VerificationReport fields contain the collected data as well as a status and error fields to help you understand whether the check is successful or not.

The status field tells you whether each check is successful or not. The possible values are:

• verified - The verification check is successful and the collected data is verified.
• unverified - The verification check failed. You can check the error hash for more information.

When the verification check fails, the error field contains code and reason values to explain the verification failure. The error.code field can be used to programmatically handle verification failures. The reason field contains a descriptive message explaining the failure reason and can be shown to your user.

Document check failures

Failure details are available in the report document.error field.

Selfie check failures

Failure details are available in the report selfie.error field.