What is iBeta certification? — iBeta certification requirements

August, 2025, by Axon Labs

What iBeta PAD Certification Means

ISO 30107-3 defines how to evaluate liveness detection systems against presentation attacks at the sensor (camera) during acquisition. iBeta operationalizes that standard into two progressive certifications:

iBeta Level 1 certification: resistance to common, readily available 2D presentation attack instruments (PAIs) in cooperative conditions
iBeta Level 2 certification: resistance to more sophisticated or varied PAIs and less predictable capture conditions
iBeta Level 3 certification: resistance to targeted, high-sophistication attacks with custom, hyper-realistic artifacts and curated test environments that give testers more time to engineer optimal attempts; initially available for face PAD under ISO/IEC 30107-3

iBeta PAD Certification Requirements

Level	Typical attacker sophistication	PAI cost limit	Time limit	Test volume	APCER limit	BPCER limit
1	Simple attacks: printed photo, image on a screen	≤ 30 USD	8 h per PAI	6 types × 150 attacks + 50 bona-fide (≈ 900 attempts)	0%	≤ 15%
2	Medium complexity: dynamic video, 3D prints, latex/silicone masks	≤ 300 USD	≤ 24 h per PAI; total 2–4 days per type	5 types × 150 = 750 attacks + 250 bona-fide	≤ 1%	≤ 15%
3	Targeted high-end attacks: custom hyper-realistic masks, controlled scene (lighting, background, motion)	No fixed limit; budget agreed per system	Time and conditions set individually	Parameters defined ad hoc; PASS/FAIL evaluation	≈ 0% (strict PASS/FAIL)	≤ 10%

What Are the Types of Attacks in iBeta Level 1 Certification?

Attack Name	Comment	Source
Printed photograph	Typical in Level 1 PAD tests; ID R&D explicitly mentions “photo printouts.”	iBeta whitepaper, ID R&D news
Video replay (short videos on smartphone/laptop screen)	Level 1 examples include “short videos displayed on a smartphone or laptop screen”; ID R&D confirms videos shot and displayed on phones and laptops	iBeta whitepaper, ID R&D news
Paper mask	Classified as a “typical PAD Level 1 attack species”	iBeta whitepaper
Cutout mask (with cutouts)	PAI description includes “a cutout or a mask” in their Level 1 testing	ID R&D news

References: iBeta whitepaper, ID R&D news

Examples of attacks from real iBeta success cases - Level 1

KBTG Labs – 2021 – source

In 2021, KBTG Labs achieved iBeta Level 1 certification under the ISO/IEC 30107-3 standard. The evaluation involved six types of Presentation Attack Instruments (PAI), with the results presented in the table below

Dataset for iBeta Level 1 by Axon Labs

We have compiled a complete dataset for passing iBeta Level 1. Our clients have already used it to successfully pass certification:

What Are the Types of Attacks in iBeta Level 2 Certification?

Attack Name	Comment	Source
Silicone mask	Listed in “typical PAD Level 2” attacks; Veridas notes “3D masks made of … silicone”	iBeta whitepaper, Biometric Update – Veridas
Latex mask	Explicitly listed as Level 2 example	iBeta whitepaper, Biometric Update – Veridas
Resin mask	Also named in typical Level 2 attack list	iBeta whitepaper, Biometric Update – Veridas
3D animation / 3D animation software	Typical in L2 PAD; 1Kosmos lists “3D animation software” among attack tools	iBeta whitepaper, 1Kosmos press release
3D-printed mask	Listed as one of the attack tools used in L2 evaluation	1Kosmos press release
Realistic dolls	Listed for Level 2 as an example of “more sophisticated methods”	Biometric Update – Veridas

References: iBeta whitepaper, Biometric Update – Veridas, 1Kosmos press release

Examples of attacks from real iBeta success cases - Level 2

Innovatrics – 2020 – source

In 2020, Innovatrics successfully passed testing under the ISO/IEC 30107-3 (Level 2) standard at the iBeta Quality Assurance laboratory. The evaluation included five types of attacks (Presentation Attack Instruments, PAI), with the results shown in the table below

KBTG Labs – 2021 – source

In 2021, KBTG Labs also earned iBeta Level 2 certification under the ISO/IEC 30107-3 standard. The evaluation covered five types of Presentation Attack Instruments (PAI), with the results shown in the table below

Dataset for iBeta Level 2 by Axon Labs

For iBeta Level 2, we also have a dataset. Based on our experience, there are enough attacks in it to successfully pass certification:

Ensure GDPR-Compliant Face Dataset

To ensure GDPR-compliant face dataset practices across R&D and certification:

Explicit purpose & consent: use signed, revocable consent tailored to training/validation, separate from production KYC consent
Data Protection Impact Assessment: document risks, mitigations, and residual risk acceptance
Retention policy: define and enforce time-bound retention; auto-purge when the purpose ends or consent is withdrawn
Cross-border transfers: if applicable, use approved transfer mechanisms and vendor DPAs
Subject diversity and fairness: monitor performance by demographics to minimize disparate impact

Success iBeta stories of our clients

Accelerate Your AI Development Today

Speed up your AI projects with our high-quality, ready-to-use datasets. Enjoy easy integration, fast deployment, and reliable biometric data collection

Get Started with Axon Labs