source

Kneron

• Researchers with an artificial-intelligence firm said they were able to fool facial-recognition software at an airport and mobile-payment kiosks using a printed mask, highlighting security vulnerabilities.
• The researchers said the tests, which were carried out across three continents, fooled two mobile-payment systems, a Chinese border checkpoint, and a passport-control gate at Amsterdam’s Schiphol Airport.
• However, researchers were unable to fool some facial-recognition software, including Apple’s Face ID.
• Visit Business Insider’s homepage for more stories.

Facial recognition is being widely embraced as a security tool – law enforcement and corporations alike are rolling it out to keep tabs on who’s accessing airports, stores, and smartphones.

As it turns out, the technology is fallible. Researchers with the artificial-intelligence firm Kneron said on Thursday that they were able to fool some facial-recognition systems using a printed mask depicting a different person’s face.

The researchers, who tested systems across three continents, said they fooled payment tablets run by the Chinese companies Alipay and WeChat, as well as a system at a border checkpoint in China. In Amsterdam, a printed mask fooled facial recognition at a passport-control gate at Schiphol Airport, they said.

The researchers said their findings suggested that a person who prints a lifelike mask resembling someone else could bypass security checkpoints to fly or shop on their behalf.

“Technology providers should be held accountable if they do not safeguard users to the highest standards,” Kneron CEO Albert Liu said in a statement. “There are so many companies involved that it highlights an industry-wide issue with substandard facial recognition tech.”

Some facial-recognition software proved impervious to the printed-mask test, however. The researchers said Apple’s Face ID and Huawei’s system passed; both use more sophisticated technology known as structured light imaging. Kneron said its own facial recognition software also passes the test.

Researchers said that tests at security checkpoints were carried out with the permission of security guards supervising them – suggesting that as long as humans are present to notice the mask, facial-recognition checkpoints aren’t entirely unsecured.

Got a tip? Contact Aaron Holmes at (706) 347-1880 or at aholmes@businessinsider.com. Open DMs on Twitter at @aaronpholmes. You can also contact Business Insider securely via SecureDrop.