Abstract
Generative systems can reproduce many signals historically associated with human presence. Human Link Project proves human presence without transmitting personal data. When identity assurance is required, FaceDNI adds on-device identity-document matching and AI-powered liveness detection designed to resist deepfakes.
1. The trust gap
Authentication establishes control of an account or credential. It does not necessarily establish that a human is present for a particular action. Human Link Project treats presence as a separate claim with its own lifecycle and threat model.
2. Design goals
- Prove human presence without identifying the person or transmitting personal data by default.
- Bind proof to a clear application action.
- Minimise retained and disclosed data.
- Resist replay, automation and delegated execution.
- Remain interoperable across devices and applications.
3. Protocol overview
The verifier issues a fresh challenge containing audience, action digest and expiry. Presence-only mode verifies a live human without personal data; when identity is required, FaceDNI performs on-device document matching and AI-powered liveness detection. Protected key material then signs the challenge and verification result. The verification API evaluates freshness, signature integrity, device attestation and policy.
4. Privacy model
Presence-only verification does not identify the person or transmit personal data. In optional identity-assurance flows, FaceDNI performs facial matching and liveness verification on the mobile device, while Human Link Project exposes only the scoped result required for the authorised interaction.
5. Threat model
The system considers replay, malware, remote control, coercion, compromised applications, synthetic media and AI-generated deepfakes. No single signal is treated as sufficient; verification combines independent claims and communicates residual uncertainty.
6. Governance
Trust infrastructure requires transparent security review, documented policy changes and meaningful recourse. The project roadmap includes independent audits and a path toward shared technical governance.