我还是书归正传，不调侃和尚了。真正的FACE ID 从设计到安全考虑的平衡说明。 以现在的新 IPHONE X 设计为例。
没有谁现在真会认为用照片儿就能刷脸。三星最开始的“刷脸”简陋技术就是用照片儿骗过了，然后现在的技术改进才有了新的技术成果， 但还是有技术上的质疑。如下面的TED Presentation 讲述的那样。我一直在关注和学习这些新技术的研究和应用，但不是中国那些应用级别的研究， 不在一个讨论范畴里。
The aspect of the technology that will be of most interest to biometric professionals will be the abilities of the
new 3D depth camera (TrueDepth). This system appears to work like the Microsoft Kinect,
by projecting an infrared pattern in order to measure the 3D face structure. The extra level of security this will provide to the face recognition unlock feature will depend on the depth accuracy. I'd have to say that is currently questionable. It is also the case that infrared is directly affected by sunlight, so it will be interesting to see how the feature works in an outside setting.
In particular, there are a range of security concerns that need to be addressed. The claim during the presentation was that the accuracy comparison (the chance of someone else being able to access your phone) from TouchID was 1:50,000 and 1:1,000,000 for FaceID. This is a substantial claim that I suspect will soon turn out to be a significant overstatement. As a start, your face is not a private commodity (unlike your fingerprints). A high-resolution photograph of most people’s faces can be easily found online.
Just like the fingerprint technology, I predict it won’t take long for the FaceID to be hacked. The significant difference being that most people don't have their fingerprint images online. The techniques for producing fake fingerprints are also more involved than those need to produce fake facial images.
TouchID is currently relied on to manage security risks across a wide range of applications. Despite some vulnerability concerns in practice, TouchID has provided a good security model without the need for additional risk management. This is likely not to be the case with the new FaceID. Application developers and users will need to be aware of the increased security risks.
Two issues briefly covered at the launch were the vulnerability to masks (the claim is that FaceID can detect these, but from the work that Biometix has done we know this is a very hard to solve) and for people that look similar (for example, that ‘share a genetic relationship’). I expect these issues will get a lot of coverage once people start using the new iPhone X.
On a related note, there is a serious security vulnerability facing many government departments using facial biometrics, known as morphing attacks. This is where two face images from different people are merged together to produce an image that can be used to recognize either person. Biometix is releasing a free morph testing set in the coming days to allow researchers and users to test their systems’ vulnerability to this type of attack.
Please be in contact with Biometix for more information (
www.biometix.com).
- Sign in to like this article
- Sign in to comment on this article
- Share
