基于人脸识别的双因素身份认证系统的设计与实现

身份认证是网络安全信息系统的第一道屏障,目前广泛使用口令等方式来确认身份的技术面临着严峻的挑战,并显得越来越不适应现代科技的发展和社会的进步;人们希望有一种更加方便可靠的方法来进行身份认证,根据身份认证的研究现状和生物特征的特点,文章设计了一种基于人脸识别和口令的双因素身份认证系统的新模式,不仅有效地提高了系统的安全性,而且有效地提高了系统认证速度,是一个安全、高效的身份认证系统。     

人脸识别在退休金身份认证中的应用

针对传统方法提供的身份证明时效性差、易伪造、识别过程复杂等缺陷,利用人脸图像具有唯一性、稳定性和不需要接触等优点,提出一种基于人脸识别技术的退休金身份认证算法。通过对退休人员人脸进行实时采集,并与服务器人脸库予以匹配,实现退休人员身份真伪判断。将该算法应用于退休金身份认证系统,结果表明,该算法可提高退休金身份认证的准确率,有效阻止身份造假行为。     

Bi-modal biometric authentication on mobile phones in challenging conditions

This paper examines the issue of face, speaker and bi-modal authentication in mobile environments when there is significant condition mismatch. We introduce this mismatch by enrolling client models on high quality biometric samples obtained on a laptop computer and authenticating them on lower quality biometric samples acquired with a mobile phone. To perform these experiments we develop three novel authentication protocols for the large publicly available MOBIO database. We evaluate state-of-the-art face, speaker and bi-modal authentication techniques and show that inter-session variability modelling using Gaussian mixture models provides a consistently robust system for face, speaker and bi-modal authentication. It is also shown that multi-algorithm fusion provides a consistent performance improvement for face, speaker and bi-modal authentication. Using this bi-modal multi-algorithm system we derive a state-of-the-art authentication system that obtains a half total error rate of 6.3% and 1.9% for Female and Male trials, respectively.     

Video-to-video face authentication system robust to pose variations

High-quality still-to-still (image-to-image) face authentication has shown success under controlled conditions in many safety applications. However, video-to-video face authentication is still challenging due to appearance variations caused by pose changes. In this paper, we propose a video-to-video face authentication system that is robust to pose variations by making use of synthesized frontal face appearance that contains both texture and shape information. To obtain the appearance, we first reconstruct 3D face shape from face feature points detected from the video using active shape model (ASM). Conventional ASM algorithms cannot handle large pose variations and fast head movement exhibited in video sequences. To address these problems, we present a novel prediction-assisted approach that is capable of providing an accurate shape initiation as well as automatically switching on multi-view models for ASM. Then we can generate frontal shape mesh from the reconstructed 3D face shape. Based on the mesh, we synthesize frontal face appearance with the ASM-detected faces in video. For authentication, in order to match the synthesized appearances of enrollment and probe, we propose a 2-directional 2-dimensional client specific fisher’s linear discriminant algorithm. The proposed algorithm is a variant of fisher’s linear discriminant (FLD) and directly computes eigenvectors of image scatter matrices in row and column direction without matrix-to-vector conversion. In experiments, our authentication system is compared with the other state-of-art approaches on public face database and our face database. The results show that our system demonstrates a higher authentication accuracy and pose-robust performance.     

身份认证威胁与对抗措施分析

本文讨论了身份认证面对的威胁,建立了相应的安全威胁模型,有针对性的研究各种身份认证威胁的对抗措施,并提供相应的技术支持。对身份认证面对的威胁的讨论中,主要介绍了身份认证的基本途径并提出了威胁模型;对身份认证威胁的对抗措施的讨论中,主要介绍了人为干预措施以及STRIDE威胁对抗措施。     

基于自适应LBP人脸识别的身份验证

提出了一种自适应LBP人脸识别算法用于进行身份认证。在身份特征录入阶段,首先采用Harr人脸级联分类器对人脸样本库进行人脸区域检测,并使用PCA方法对人脸区域进行降维处理;然后通过LBP二值模式的人脸识别算法提取人脸样本的特征值;最后通过LBP人脸训练生成人脸数据特征库。通过多场景人脸图像库和阈值队列,通过多阈值全组人脸匹配,建立人脸阈值特征库。在身份验证阶段,将登录用户人脸与人脸阈值特征库做粗粒度人脸LBP直方图匹配,确定当前最优的LBP阈值;然后将登录用户人脸与人脸数据特征库做LBP直方图匹配,通过匹配结果确定登录用户的系统权限。实验结果表明,在图像和视频模式下,基于自适应LBP人脸识别算法的身份验证具有很高的鲁棒性。     

Secure multimodal biometric authentication with wavelet quantization based fingerprint watermarking

As malicious attacks greatly threaten the security and reliability of biometric systems, ensuring the authenticity of biometric data is becoming increasingly important. In this paper we propose a watermarking-based two-stage authentication framework to address this problem. During data collection, face features are embedded into a fingerprint image of the same individual as data credibility token and secondary authentication source. At the first stage of authentication, the credibility of input data is established by checking the validness of extracted patterns. Due to the specific characteristics of face watermarks, the face detection based classification strategies are introduced for reliable watermark verification instead of conventional correlation based watermark detection. If authentic, the face patterns can further serve as supplemental identity information to facilitate subsequential biometric authentication. In this framework, one critical issue is to guarantee the robustness and capacity of watermark while preserving the discriminating features of host fingerprints. Hence a wavelet quantization based watermarking approach is proposed to adaptively distribute watermark energy on significant DWT coefficients of fingerprint images. Experimental results which evaluate both watermarking and biometric authentication performance demonstrate the effectiveness of this work.     

无线传感器网络快速广播认证协议研究

现有的高效无线传感器网络广播认证协议一般难以避免认证延迟,不适用于要求即时响应的应用和采用逐跳认证机制。本文总结了现有消除广播认证协议认证延迟的方法,指出其本质是将接收端延迟转化为发送端延迟,没有完全消除认证延迟。本文提出在满足应用需求前提下可放宽对认证延迟的要求,在此基础上提出了快速广播认证协议FBAP。该协议根据广播报文的发送速率和频繁程度灵活设置,通过提前发送报文认证信息,较好地满足了放宽的认证延迟要求。分析和实验表明,FBAP协议具有可控的认证延迟上限,与已提出的RPT等协议相比,具有适用范围广、通信开销小等优点。     

鉴别矢量增强在人耳人脸多模态识别中的应用

人耳识别与人脸识别在生物特征识别领域中占有重要位置,然而,剧烈的姿态变化一直是阻碍它们在现实生活中应用的瓶颈,提出一种鉴别矢量增强算法,以解决姿态人耳和姿态人脸图像的识别问题。为了考察多模态识别的可行性和有效性,利用串联、并联（广义主元分析）和典型相关分析等融合策略,将强化后的人耳、人脸鉴别矢量进行有效融合,通过最近邻方法进行分类识别。实验结果表明,鉴别矢量强化算法可以显著提高姿态人耳或是姿态人脸单生物特征的识别率,而多模态方法又会表现出更好的识别性能。     

基于C＋＋和OpenCV的人脸识别系统的设计与实现

人脸识别是通过对人的脸部特征信息进行身份识别的一种生物识别技术.研究现实基于人脸识别的身份验证系统具有重要意义.提出一种基于C＋＋和OpenCV的人脸识别系统的设计与实现方法.系统实现的功能模块包括人脸图像采集、图像预处理、人脸检测与定位、人脸特征提取与识别、人脸数据库管理等.系统中人脸检测采用基于Haar-like特征的Haar 分类器,人脸识别采用Eigenfacae算法.系统经过运行测试,结果表明该系统能够满足一般的基于人脸识别的身份验证需求.     

结合人脸特征和密码技术的网络身份认证系统*

为了解决传统密码或单纯生物特征在远程身份认证中存在的安全问题,利用人脸识别中特征模板的生成特点,设计了一种人脸特征与密码技术相结合的双重身份认证方案。人脸识别的仿真结果证明了人脸特征用于识别的有效性;系统分析表明,该系统能够对付传统网络身份认证中所遇到的窃听、重放、假冒或窜改等各种攻击,且实时性比较好。     

基于秘密共享的SIP身份认证方案

SIP以其灵活的部署特性,为多媒体会话带来了便利。但由于协议本身对安全机制的考量较少,其面临的安全威胁也很多样。本文着重研究了SIP身份认证的安全方案,结合现有的公钥认证体制,提出了一种基于(2,2)秘密共享加密方案的SIP身份认证方案,实现了通信双方的双向身份认证,同时也实现了会话密钥的分发。     

现代网络安全：SIP网络中的DIAMETER鉴定

作为整个现代网络安全的基础，该文提出了验证的概念，它是会话初始化协议（SIP）网络中合并了可扩展认证协议(EAP)验证体系的一种机制。研究表明，SIP验证可以由EAP验证体系进行扩展而现有的AAA基础结构可以为SIP用户再次用于验证。实施验证的过程中使用了DIAMETER基础协议。这个基本协议工具使用低权目录访问协议（LDAP）而且必须使用接口，DIAMETER网络访问服务器请求（NASREQ）应用命令码的一个子集和AVP以在运行中实现扩展验证协议（EAP）传输。     

Anti-spoofing in face recognition-based biometric authentication using Image Quality Assessment

Multimedia Tools and Applications - Despite the rapid growth of face recognition-based biometrics for both authentication and identification, the security of face biometric systems against...     

Frontal face authentication using discriminating grids withmorphological feature vectors

A novel elastic graph matching procedure based on multiscale morphological operations, the so called morphological dynamic link architecture, is developed for frontal face authentication. Fast algorithms for implementing mathematical morphology operations are presented. Feature selection by employing linear projection algorithms is proposed. Discriminatory power coefficients that weigh the matching error at each grid node are derived. The performance of morphological dynamic link architecture in frontal face authentication is evaluated in terms of the receiver operating characteristic on the M2VTS face image database. Preliminary results for face recognition using the proposed technique are also presented     

Preventing delegation-based mobile authentications from man-in-the-middle attacks

In this paper, an approach of mutual authentication and key exchange for mobile access, based on the trust delegation and message authentication code, is developed, and a novel nonce-based authentication approach is presented. The proposed protocols can effectively defend all known attacks to mobile networks including the denial-of-service attacks and man-in-the-middle attacks. In particular, in contrast to some previous work, our design gives users a chance to set a session key according to users' will, and does not require a mobile user to compute useless hash key chains in the face of HLR-online authentication failures or run the initial authentication protocol before HLR-offline authentication. Moreover, our design enjoys both computation efficiency and communication efficiency as compared to known mobile authentication schemes.     

基于FR的远程考试身份认证系统研究

在远程教育考试系统中,如何实时有效地验证考生身份非常重要。本文提出一种基于FR(Face Recognition)的远程考试身份验证系统,首先利用肤色信息检测人脸图像,经过预处理后提取特征点,然后通过与报名库中人脸图像进行几何特征比对,从而完成考生的身份验证。实验表明该系统具有较好的识别率,能有效地识别出考生信息。     

一种灵活的认证授权系统的设计与实现

论文提出了一种基于Java认证授权框架和角色访问控制的认证授权系统的总体结构,并给出了具体的实现过程。特别对涉及到的关键技术包括认证模块的设计、授权模块的设计进行了详细的介绍。     

Cancellable face template algorithm based on speeded-up robust features and winner-takes-all

Multimedia Tools and Applications - Features such as face, fingerprint, and iris imprints have been used for authentication in biometric system. The toughest feature amongst these is the face....     

3D face authentication and recognition based on bilateral symmetry analysis

We present a novel and computationally fast method for automatic human face authentication. Taking a 3D triangular facial mesh as input, the approach first automatically extracts the bilateral symmetry plane of the facial surface. The intersection between the symmetry plane and the facial surface, namely the symmetry profile, is then computed. Using both the mean curvature plot of the facial surface and the curvature plot of the symmetry profile curve, three essential points of the nose on the symmetry profile are automatically extracted. The three essential points uniquely determine a Face Intrinsic Coordinate System (FICS). Different faces are aligned based on the FICS. The symmetry profile, together with two transverse profiles, composes a compact representation, called the SFC representation, of a 3D face surface. The face authentication and recognition steps are finally performed by comparing the SFC representations of the faces. The proposed method was tested on 382 face surfaces, which come from 166 individuals and cover a wide ethnic and age variety. The equal error rate (EER) of face authentication on scans with variable facial expressions is 10.8%. For scans with normal expression, the ERR is 0.8%.