HOW WE SECURE YOUR INFORMATION

Hackers innovate at a pace most of us would be proud of

Known biometric security issues

Physical spoofing

Using plastic/clay to model fingerprints, using pictures, video, and masks to spoof face biometrics even when special hardware is used (for example iPhone X, and Microsoft hello)

Compromised devices

Inserting frames of video into the camera feed coming from the device to fool the face authentication mechanism.

Intercepting communications

Intercepting communications between the device and server and faking the result of the biometric verification, this is referred to as a Man in the Middle attack.

How we secure against issues in biometrics

Liveness Detection

When the picture is taken we use the phone/computer screen to flash a series of coloured lights at the subject. The captured picture and video of the subject with the lights reflecting off them is then securely sent to backend servers.

Deep Learning

A proprietary neural network running on custom hardware then analyses these images and determines whether the subject matches the picture on file, and whether the subject is a real person or a picture/video/mask. This does not require any custom camera hardware or end-user device.

Anomaly Detection

The neural net also determines whether the image that is captured is real or has been inserted digitally into the camera feed.

How we secure against man in the middle attacks

Tokenised Sessions

When starting a biometric verification, our app/webapp firstly contacts the backend server in order to start a secure tokenised session. The token and some other information is then passed to the server along with the biometric data for verification.

Validating Tokens

After the biometric verification is done, the app/webapp then contacts to the server again to ensure that there was a valid biometric authentication that was run for this user and confirms the result. This ensures that the result cannot be faked by intercepting the app communications as its validated by a session token plus secret information.

At SmilePass we apply security best practice to every part of our platform to ensure that you and your customer’s information is protected and authentic. If you want to build a trusted community, you can trust us to help you achieve that.

Request a Demo

Do you want a personalised summary of how SmilePass can benefit your business?

By submitting this form you accept our privacy policy.

Contact Details

1 Knightsbridge Green
Knightsbridge
London
SW1X 7QN

Tel: +44 (0) 203 130 0291
Email: info@smile-pass.com

Latest News

Fraudsters targeting UK start-ups for money laundering

Fraudsters targeting UK start-ups for money laundering

At SmilePass we’re in the process of raising a late seed round to speed up IP development and implement our go-to-market plan. Given the size and stage of the round, we’re largely targeting angel investors and have registered on a few angel network sites as part of...

read more
What Is The Potential of Blockchain For Identity Management?

What Is The Potential of Blockchain For Identity Management?

We are seeing a significant move towards using biometrics and blockchain technologies for identity management. Currently we rely on governments issuing specialised documents – such as driving licences, birth certificates and passports – as identity credentials. Such...

read more

SmilePass © 2018 All Rights Reserved.