고스트패스 CityFlow - Seamless ID & Payment Experience

While online simple payment methods have advanced, the offline reality still requires taking out a card or app. It is especially difficult to verify identity or make payments without a wallet or phone. Furthermore, existing biometric authentication methods store fingerprint/face data on a central server, posing a risk of personal information leakage in the event of a large-scale hack.

GhostPass CityFlow addresses this problem, namely:"Simultaneously process identity verification and payment on-site without using your hands"while also providing a way to safely manage personal biometric information.

The biggest differentiator of CityFlow is that"You can authenticate and pay anywhere with just your face/fingerprint on your phone."User biometric information is never stored in the cloud, but only in the individual's smartphone Secure Enclave, and payment is automatically approved with only biometric authentication such as facial recognition at the time of payment.

To achieve this, a distributed authentication structure and hierarchical encryption data transmission technology are used to share only the minimum information required by each institution, thereby preventing excessive exposure of personal information. For example, when passing through a subway gate, simply showing your face to the camera will verify your identity using the facial information stored on your smartphone → and pay the fare with the linked payment method all at once. There is no need to run an app or tag a card, and if the device is lost, deleting the CI (Connecting Information) value will fundamentally prevent the misuse of biometric information.

It is differentiated from existing Apple Pay and Samsung Pay in that it is a decentralized biometric authentication + payment that works anywhere offline. In other words,"The user only needs to blink"to implement an imperceptible authentication flow.

In a B2B2C model, public transportation, hospitals, financial institutions, and retail stores are the adopters that provide this service to end users. For example,Subway operating organization (B2B)If CityFlow is established,Passengers (B2C)can board without an app/card, andBank (B2B)If adopted,Customer (B2C)can verify their identity and withdraw money at the counter with just their face.

GhostPass provides technology to these companies/institutions as an SDK or integrated solution, and ultimately an unspecified number of general people are the users. In the case of B2G, it can be adopted into the government's digital ID system or smart city payment system. Currently, the main areas of introduction are the financial sector (Samsung Card PoC at C-Lab Outside), transportation payments, and unmanned convenience store payments.

Authentication and payment are general-purpose technologies, so the applicable industries are very broad. Initially, we focus on transportation and finance, but in the future, we can expand to all offline situations where ID verification is required, such as airport security, access control, ticket inspection, and vehicle access (Hi-Pass).

Global regulations also require attention to GDPR and other biometric information-related issues, but GhostPass is designed to be regulation-friendly because it does not store information. However, the speed of spread is a variable because infrastructure construction costs and related party consultations are required. In terms of standardization, it is also necessary to cooperate with EMVCo, etc. to ensure compatibility with the international payment network.

If successful,"Walletless Society"It is a technology that can accelerate the process and can be expanded explosively when it meets the national-led digital ID policy.

GhostPass CityFlow has proven its technological completeness and innovation by winning the CES Innovation Award for three consecutive years from 2024 to 2026.Top Innovation Award in the Fintech field (2025)Following the 2026 Innovation Award, the concept of"Eliminating the boundary between authentication and payment"was highly praised.

The judges focused on the safety of not placing personal information on a central server and the truly hands-free experience, and"It has captured both user convenience and security."The history of being selected as a Samsung C-Lab and a government-funded super-gap startup also adds to the credibility.

However, there were also realistic arguments that it would take time to build an ecosystem and questions about the possibility of similar technology competition from Big Tech. Overall,"It presents the direction of future finance and identity verification."is a positive evaluation.