Face Recognition Security

[Brennon_W_]

Hi,

Was just noticing the other day, a particular problem.

If I have a user registered in my solution, it appears that I can take a photo of that user and get a positive recognition as well.

That is a pretty major security concern.

I originally thought using the depth camera would take values from the depth of the face as well, making a photo impossible to use.

Is there a property or method that I have missed somewhere which will make this secure?

Cheers

[samontab]

You can add your own extra layers of security, for example checking actual face dimensions, or even check slight movements over time.

[Brennon_W_]

So let me understand what you think is the right process here:

Get a recognition result (which may be a false positive - so you need to implicitly treat each result as a false positive) and then compare your live face data with another database with depth information to potentially verify it?

You really think that is secure or even in the slightest bit performant? The answer is no.

This is another case of the SDK functionality not really being fit for purpose.

@Intel: Are you going to address these issues?

[Brennon_W_]

BTW Samontab, really like your blog. Some great stuff on there.

Cheers

[samontab]

Thanks Brennon!