{"id":26202,"date":"2019-03-18T14:48:13","date_gmt":"2019-03-18T14:48:13","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29943\/Facial-Recognition-101-Your-Face-Is-Your-New-Fingerprint.html"},"modified":"2019-03-18T14:48:13","modified_gmt":"2019-03-18T14:48:13","slug":"facial-recognition-101-your-face-is-your-new-fingerprint","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/facial-recognition-101-your-face-is-your-new-fingerprint\/","title":{"rendered":"Facial Recognition 101: Your Face Is Your New Fingerprint"},"content":{"rendered":"

Facial recognition<\/a> is a blossoming field of technology that is at once exciting and problematic. If you’ve ever unlocked your iPhone<\/a> ($1,000 at Amazon<\/a>)<\/span> by looking at it, or asked Facebook<\/a> or Google<\/a> to go through an unsorted album and show you pictures of your kids, you’ve seen facial recognition in action.<\/p>\n

Whether you want it to or not, facial recognition (sometimes called simply “face recognition”) is poised to play an ever-growing role in your life. Your face could be scanned at airports or concerts with or without your knowledge. You could be targeted by personalized ads thanks to cameras at shopping malls. Facial recognition has plenty of upside. The tech could help smart home<\/a> gadgets get smarter, sending you notifications based on who it sees and offering more convenient access to friends and family. <\/p>\n

\"facial-recognition-promo\"<\/span><\/span><\/p>\n

This is part of a CNET special report exploring the benefits and pitfalls of facial recognition.<\/span><\/p>\n

James Martin\/CNET<\/span><\/p>\n

But at the very least, facial recognition raises questions of privacy<\/a>. Experts have concerns ranging from the overreach of law enforcement, to systems with hidden racial biases, to hackers gaining access to your secure information.<\/p>\n

Over the next few weeks, CNET will be diving into facial recognition with in-depth pieces on a wide variety of topics, including the science that allows it to work and the implications, both positive and negative, for many of its applications. To get you up to speed, here’s a brief overview including what facial recognition is, how it works, where you’ll find it in use today, as well as a few of the implications of this rapidly expanding corner of technology.<\/p>\n

What is facial recognition?<\/h2>\n

Facial recognition is a form of biometric authentication, which uses body measurements to verify your identity. Facial recognition is a subset of biometrics that identifies people by measuring the unique shape and structure of their faces. Different systems use different techniques, but at its core, facial recognition uses the same principles as other biometric authentication techniques, such as fingerprint scanners and voice recognition.<\/p>\n

How does facial recognition work?<\/h2>\n
\n
\n
<\/div>\n

Now playing:<\/span> Watch this:<\/span><\/span> Facial recognition: Get to know the tech that gets to…<\/p>\n

5:11<\/span><\/p>\n<\/div>\n<\/div>\n

All facial recognition systems capture either a two- or three-dimensional image of a subject’s face, and then compare key information from that image to a database of known images<\/a>. For law enforcement, that database could be collected from mugshots. For smart home cameras, the data likely comes from pictures of people you’ve identified as relatives or friends via the accompanying app. <\/p>\n

Woodrow “Woody” Bledsoe first developed facial recognition software<\/a> at a firm called Panoramic Research back in the 1960s using two-dimensional images, with funding for the research coming from an unnamed intelligence agency.<\/p>\n

Even now, most facial recognition systems rely on 2D images<\/a>, either because the camera doesn’t have the ability to capture depth information — such as the length of your nose or the depth of your eye socket — or because the reference database consists of 2D images such as mugshots or passport photos.<\/p>\n

2D facial recognition primarily uses landmarks<\/a> such as the nose, mouth and eyes to identify a face, gauging both the width and shape of the features, and the distance between the various features of the face. Those measurements are converted to a numerical code by facial recognition software, which is used to find matches. This code is called a faceprint.<\/p>\n

This geometric system can struggle with different angles and lighting. A straight-on shot of a face will show a different distance from nose to eyes, for instance, than a shot of a face turned to the side. The problem can be somewhat mitigated by mapping the 2D image onto a 3D model and undoing the rotation.<\/p>\n

Apple uses a 3D facial recognition system called Face ID. It’s good, but not perfect. <\/span><\/p>\n

Morgan Little\/CNET<\/span><\/p>\n

Adding a third dimension<\/h2>\n

3D facial recognition software isn’t as easily fooled<\/a> by angles and light and doesn’t rely on average head size to guess at a faceprint. With cameras that sense depth, the faceprint can include the contours and curve of the face as well as depth of the eyes and distances from points like the tip of your nose.<\/p>\n

Most cameras gauge this depth by projecting invisible spectrums of light<\/a> onto a face and using sensors to capture the distance of various points of this light from the camera itself. Even though these 3D sensors can capture much more detail than a 2D version, the basis of the technology remains the same — turning the various shapes, distances and depths of a face into a numerical code and matching that code to a database.<\/p>\n

If that database consists of 2D images, software needs to convert the 3D faceprint back to a 2D faceprint to get a match.<\/p>\n

Apple’s Face ID uses 30,000 infrared dots<\/a><\/span> that map the contours of your face. The iPhone then remembers the relative location of those dots the next time you try to unlock your phone.<\/p>\n

Even these more advanced systems can be defeated by something as simple as different facial expressions, wearing glasses or scarves that obscure parts of your face. Apple’s Face ID can struggle<\/a><\/span> to match your tired, squinting, just-woke-up face to your made-up, caffeinated, ready-for-the-day face.<\/p>\n

\n
\n
<\/div>\n

Now playing:<\/span> Watch this:<\/span><\/span> The Property Brothers can trick Face ID<\/p>\n

2:34<\/span><\/p>\n<\/div>\n<\/div>\n

Reading your pores<\/h2>\n

A more recent development, called skin texture analysis, could help future applications overcome all of these challenges. Developed by Identix<\/a>, a tech company focused on developing secure means of identification, skin texture analysis differentiates itself by functioning at a much smaller scale. Instead of measuring the distance between your nose and your eyes, it measures the distance between your pores. It then converts those numbers into a mathematical code. This code is called a skinprint.<\/p>\n

This method could theoretically be so precise that it can tell the difference between twins. Currently, Identix is working to integrate into facial recognition systems alongside a more normal 3D face map. The company claims the tech increases accuracy by 25 percent.<\/p>\n

\"face-id-recognition-6\"<\/span>

\"face-id-recognition-6\"<\/span><\/p>\n

<\/noscript><\/span><\/p>\n

Your face can be turned into a code. <\/span><\/p>\n

James Martin\/CNET<\/span><\/p>\n

Where is facial recognition being used?<\/h2>\n

While Bledsoe laid the groundwork for the tech, modern facial recognition began in earnest in the 1980s and ’90s thanks to mathematicians at MIT<\/a>. Since then, facial recognition has been integrated into all manner of commercial and institutional applications with varying degrees of success.<\/p>\n

The Chinese government uses facial recognition<\/a><\/span> for large-scale surveillance in public CCTV cameras, both to catch criminals and monitor the behavior of all individuals with the intent of turning the data into a score. Seemingly harmless offenses like buying too many video games<\/a> or jaywalking can lower your score. China uses that score for a sort of “social credit” system that determines whether the individual should be allowed to get a loan, buy a house or even much simpler things like board a plane or access the internet.<\/p>\n

The London Metropolitan Police also use it as a tool<\/a><\/span> when narrowing their search for criminals, though their system supposedly isn’t very accurate<\/a><\/span> — with incorrect matches reported in a whopping 98 percent of cases. In the US, police departments in Oregon<\/a> and Florida<\/a><\/span> are teaming up with Amazon<\/a> to install facial recognition into government-owned cameras.<\/p>\n

Facial recognition is undergoing trials at airports<\/a><\/span> to help move people through security more quickly. The Secret Service is testing facial recognition systems<\/a><\/span> around the White House. Taylor Swift even used it to help identify stalkers<\/a><\/span> at one of her concerts. Facial recognition famously led to the arrest of the Capital Gazette shooter<\/a><\/span> in 2018 by matching a picture of the suspect to an image repository of mugshots and pictures from driver’s licenses. The upcoming 2020 Olympics in Tokyo will be the first to use facial recognition<\/a><\/span> to help improve security.<\/p>\n

Facial recognition could have large implications for retail outlets and marketers as well, beyond simply watching for thieves. At CES<\/a> 2019, consumer goods giant Procter & Gamble showed a concept store<\/a><\/span> where cameras could recognize your face and make personalized shopping recommendations.<\/p>\n

\n
\n
<\/div>\n

Now playing:<\/span> Watch this:<\/span><\/span> Nest Hello video doorbell: Smarter than your average…<\/p>\n

2:39<\/span><\/p>\n<\/div>\n<\/div>\n

Bringing facial recognition home<\/h2>\n

Aside from large-scale installations, facial recognition has several uses in consumer products. Beyond iPhones, some phones<\/a> with Google’s Android operating system like the Google Pixel 2<\/a><\/span> and the Samsung Galaxy S9<\/a><\/span> are capable of facial recognition, but the technology on Android isn’t yet secure enough to verify mobile payments<\/a><\/span>. The next version of Android is expected to get a more secure facial recognition system<\/a><\/span> closer to Apple’s Face ID, although Samsung did not incorporate any facial recognition into its newest phone, the Galaxy S10<\/a> ($1,000 at Amazon<\/a>)<\/span>, as many industry watchers had expected.<\/p>\n

Facebook has used facial recognition for years to suggest tags for pictures. Other photo applications, such as Google Photos, are getting better at doing the same<\/a><\/span>.<\/p>\n

In the smart home, after starting as a niche feature in connected cams such as the Netatmo Welcome<\/a><\/span>, facial recognition is now built into several popular models, including the Nest Hello video doorbell<\/a><\/span>. We saw a bunch of new gadgets with the tech on display at CES 2019<\/a><\/span>.<\/p>\n

\n
\"honeywell-security-1\"<\/a><\/p>\n
Security cameras with facial recognition tech inside<\/p>\n

8 Photos<\/p>\n<\/div>\n<\/div>\n<\/div>\n

Connected cams compare faces with others they’ve seen before so you can customize notifications based on who the camera sees. All the models we’ve tested<\/a><\/span> take a while to learn faces, as they need to be able to recognize the members of your household at various angles and in various outfits. Once the cameras learn, you can use facial recognition to make your connected security system that much smarter by making your notifications more relevant to what you actually want to know.<\/p>\n

Beyond the security uses in the home, even robots like Lovot<\/a><\/span> and Sony’s Aibo robot dog<\/a><\/span> can recognize faces. Aibo and others learn faces not to track who comes and goes, but to adapt to the specific preferences of different people over time.<\/p>\n

\n
\n
<\/div>\n

Now playing:<\/span> Watch this:<\/span><\/span> My week living with Aibo, Sony\u2019s robot dog<\/p>\n

6:55<\/span><\/p>\n<\/div>\n<\/div>\n

What are the implications?<\/h2>\n

Unlike other forms of biometric authentication, cameras can gather information about your face with or without your knowledge or consent. If you’re a privacy-minded person, you could potentially be exposing your data when in a public place without knowing it. <\/p>\n

Because the technology is so new, there aren’t any laws in the US limiting what companies can do with images of your face after they capture it. A bipartisan bill was recently introduced in the Senate<\/a><\/span> to rectify the lack of regulation. <\/p>\n

The American Civil Liberties Union delivered a petition<\/a><\/span> to Amazon last year asking it to stop giving its facial recognition technology to law enforcement agencies and the government, calling the prospect “a user manual for authoritarian surveillance.”<\/p>\n

According to a report by Buzzfeed<\/a>, the US Customs and Border Protection agency plans to implement facial recognition to verify the identity of passengers on international flights in airports across the country. The Electronic Privacy Information Center shared documents with Buzzfeed that suggested the UCB skipped over gathering public feedback before starting to implement these systems, and that they have a questionable accuracy rate and little established privacy regulations as far as what the airlines can do with this facial data after they collect it.<\/p>\n

NBC News reported<\/a> that the databases of pictures used to improve facial recognition often comes from social media sites without the consent of the subject or photographer. Companies like IBM have the stated goal of using these images to try and improve the accuracy of facial recognition, particularly among people of color. Theoretically, by ingesting the data from a large catalog of faces, the system can fine tune its algorithms to account for a larger variety of facial structures.<\/p>\n

The Electronic Frontier Foundation notes<\/a> that current facial recognition systems tend to produce a disproportionately high number of false positives when identifying minorities. NBC’s story also details how it can be tedious to impossible for private citizens to opt out of using their pictures in these databases.<\/p>\n

\"ring-video-doorbell-two-1\"<\/span>

\"ring-video-doorbell-two-1\"<\/span><\/p>\n

<\/noscript><\/span><\/p>\n

The Ring Doorbell would have watched for suspicious individuals. <\/span><\/p>\n

Chris Monroe\/CNET<\/span><\/p>\n

Facebook faces a class action lawsuit<\/a><\/span> over its own facial recognition technology, called DeepFace, which identified people in photos without their consent. Smart home company Ring, an Amazon subsidiary, also came under fire last year for filing patents based on facial technology that could have violated civil rights<\/a><\/span>.<\/p>\n

Ring’s video doorbells would have monitored neighborhoods for known sex offenders and those on “most wanted” lists and could then have automatically notified law enforcement. The idea was criticized as likely to target those unfairly deemed a threat and potentially even political activists.<\/p>\n

The science behind facial recognition is certainly exciting, and the tech could lead to a safer and more personal smart home, but facial recognition could easily result in a loss of privacy, unjust profiling and violations of personal rights. While the impact of facial recognition is still being determined and debated, it’s important to recognize that facial recognition is no longer some distant concept reserved for science fiction. For better or worse, facial recognition is here now and spreading quickly. <\/p>\n

Check back throughout the month as CNET dives deeper into the implications of this developing technology.<\/p>\n

Published March 18 at 5:00 a.m. PT
Update<\/strong>, 3:00 p.m. PT.<\/p>\n

\n
\n

CNET Smart Home<\/h2>\n<\/p>\n<\/div>\n<\/div>\n