Signing in to a service

Biometric authentication using facial recognition

A facial recognition matrix for authentication.

Description

Check someone is who they say they are using their unique physical features, like their fingerprint, iris, face or voice.

Biometric authentication using facial recognition uses a camera to map the position of key facial features, like the distance between the eyes, to create a unique “faceprint”. To verify a person’s identity, an algorithm checks if a scanned faceprint matches a previously enrolled faceprint.

IF thinks that facial recognition can provide a secure method of authentication when used with other methods. However, the adoption of facial recognition technologies more broadly and for other use cases has happened faster than societal conversations about the ethics and legality of using such technologies. As such, this pattern should only be used after careful examination of the context in which it will be applied, and with due consideration to the level of investment required to build truly effective facial recognition technology.

Advantages

  • Can be quicker, more convenient and more secure than using a password
  • Facial recognition can now be done on device - this is more secure and private than processing images remotely.

Limitations

  • Facial recognition systems might be less accurate for twins, faces that are still developing (e.g. Apple’s FaceID system is less effective with children under 13 ), or black faces.
  • Facial recognition systems can be tricked using photos and videos of individuals. To avoid this, recognition systems often require additional technological requirements like additional hardware components (e.g. infrared camera), more effective software to process images, and secure storage on devices.
  • It’s possible to take advantage of facial recognition systems to access s someone’s device without their consent. For example, when someone is asleep or unresponsive or if they are forced to (sometimes by police and government services - like in Hong Kong and USA ). By default, Apple iOS and Google Pixel devices only unlock the device when you have the eyes open and are looking directly at it.

Examples

Related patterns