Facial verification verifies with a picture of a face from a phone

Mark Davies 1 Reputation point
2020-09-09T14:18:55.333+00:00

I am using the Azure Cognitive Services Face API. I have set it up so I can take a snapshot of my face via a webcam and it will verify that it is me.

However, I can take a snapshot of my phone which has a picture of my face and that also verifies it is me. Is there anything that can be done to prevent this from working, we would like to use this for authentication but this is obviously quite a loop hole around it and would therefore make the platform unusable.

Regards
Mark

Azure AI services
Azure AI services
A group of Azure services, SDKs, and APIs designed to make apps more intelligent, engaging, and discoverable.
2,583 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. YutongTie-MSFT 48,001 Reputation points
    2020-09-10T16:52:55.733+00:00

    Hi Mark,

    Thanks for your feedback. I would forward your product feedback to product team. For now, the service would not differentiate between a high quality photo or a live image. Therefore, we do not recommend the service as a single form of authentication. There are 3 ways I heard to help but not easy.

    1) Some customers have tried capturing multiple frames to verify that it is not a still image.
    2) There is another Recognition API from Microsoft which can detect objects. I've tested and it can detect if there is a cellphone in the picture. (If you try to access with the picture in cellphone). The problem is if you try to access with the cellphone and you can't see the border of the cellphone.
    3)You can ask the user to do some random actions like close left eye or smile, or something like that. And you will get this in the second face detection.

    Regards,
    Yutong

    0 comments No comments