topic So let me understand what you in Software Archive

Face Recognition Security

Brennon_W_ — Mon, 23 Nov 2015 14:01:03 GMT

Hi,

Was just noticing the other day, a particular problem.

If I have a user registered in my solution, it appears that I can take a photo of that user and get a positive recognition as well.

That is a pretty major security concern.

I originally thought using the depth camera would take values from the depth of the face as well, making a photo impossible to use.

Is there a property or method that I have missed somewhere which will make this secure?

Cheers

You can add your own extra

samontab — Mon, 23 Nov 2015 15:11:35 GMT

You can add your own extra layers of security, for example checking actual face dimensions, or even check slight movements over time.

So let me understand what you

Brennon_W_ — Mon, 23 Nov 2015 15:23:55 GMT

So let me understand what you think is the right process here:

Get a recognition result (which may be a false positive - so you need to implicitly treat each result as a false positive) and then compare your live face data with another database with depth information to potentially verify it?

You really think that is secure or even in the slightest bit performant? The answer is no.

This is another case of the SDK functionality not really being fit for purpose.

@Intel: Are you going to address these issues?

BTW Samontab, really like

Brennon_W_ — Mon, 23 Nov 2015 15:26:53 GMT

BTW Samontab, really like your blog. Some great stuff on there.

Cheers

Thanks Brennon!

samontab — Tue, 24 Nov 2015 23:40:47 GMT

Thanks Brennon!