Beyond Authentication. Protecting Human Intent.
Access is not intent.
A successful login proves access. It does not prove that the transfer, payee change or privilege grant that follows was intended. Hyperion verifies the account holder’s intent at the moment a high-risk action occurs — inside the systems you already run.
01
Authentication ends at login. Fraud doesn’t.
Stolen credentials. Compromised devices. Account takeover. Once a session is open, a fraudulent instruction is indistinguishable from a legitimate one.
Credentials leak.
Passwords and one-time codes are phished and breached. A stronger login does nothing once they are in the wrong hands.
Sessions inherit trust.
After sign-in, every action is treated as the holder’s. A large transfer runs on the same trust as a balance check.
Fraud looks legitimate.
A fraudulent instruction sent through the genuine interface is hard to dispute after the fact — for the customer and for the institution.
02
Friction where it matters. Nowhere else.
Routine actions stay seamless. High-risk actions require confirmation that the person who appears to have issued them actually meant to. Everything we build follows from that principle.
Who?
The rightful account holder.
Which device?
A registered device bound to that person.
Did they approve?
Explicit approval, with the details in view.
What exactly?
What executes is exactly what was approved.
03
Irreversible actions require verified intent.
High impact. Hard to recover. That is where verification belongs. Each organization’s risk policy defines which actions are in scope and how strictly they are checked.
| High-risk action | Typical threat | What needs confirming |
|---|---|---|
| Large transfers | Unauthorized transfer after account takeover | The holder approved this amount to this recipient |
| Payee / bank-detail changes | Redirection of funds to a fraudulent account | The holder reviewed and approved the new details |
| Privilege escalation | Takeover of internal systems via elevated rights | The right person granted the right scope |
| Adding a device | Attacker device enrolled as trusted | The holder approved it from an already-trusted device |
| Benefit-account changes | Diversion of public payments | The change was made by the beneficiary |
| Contracts & applications | Commitments made without the holder’s knowledge | The holder read and deliberately approved the content |
Intent verification is a critical control, not a complete one. Scams that deceive the holder into approving remain a risk and require customer education, transaction monitoring and operational controls alongside it.
04
PassProof binds a verified person to a registered device, confirms intent at the moment of a high-risk action, and checks that what executes matches what was approved. It complements your identity and authentication stack. It does not replace it.
Verified person
Trust anchored in identity verification.
Trusted device
A device bound to that person, used to confirm critical actions.
Explicit approval
Requested only when the action is high-risk.
Transaction integrity
What executes is what the holder approved.
05
Every industry has actions it cannot undo.
Banking. Enterprise. Public services. Logistics. The sectors differ. The requirement to verify intent before an irreversible action does not.
Banking, securities & payments
Holder approval for large transfers, payee changes and sensitive account settings.
Enterprise
Privilege changes, supplier bank-detail updates and other internal high-risk actions.
Public sector
Benefit-account changes, proxy applications and other citizen-critical procedures.
Logistics & industry
Workforce identity, operational authority and corporate card controls.
06
Built on national payment-infrastructure experience.
Our technology comes from first-hand experience scaling a payment network used across Japan — and more than a decade of research and development.
Infrastructure heritage
Representative Director and inventor Noboru Hishinuma served as secretary-general of the council that drove adoption of Pay-easy, Japan’s electronic payment service for taxes and utility bills. PassProof began with the fraud risks he saw there.
Patented technology
PassProof is built on three registered Japanese patents: No. 6408745, No. 7007501 and No. 7914490.
Designed to complement
PassProof works alongside identity verification, passkeys and Japan’s JPKI. Each deployment is scoped to the customer’s operations and risk policy.
07
Digital Trust Infrastructure
People. Registered devices. Transactional intent. Delegated authority. Each verifiable when it matters.
Available
Intent verification for high-risk actions
Holder approval and transaction confirmation for critical operations, delivered by PassProof.
Per-project integration
Sector system integration
Integration with banking, public-sector and enterprise systems, designed to each customer’s requirements.
Future direction
AI agent authorization (KYA)
As AI agents act on people’s behalf, someone must verify who delegated what — and how far the agent may go. Know Your Agent (KYA) is a direction of our research, not a product available today.
Start with your highest-risk action.
Tell us which operations you need to protect. We will show you where PassProof fits and how it is deployed.