Face Template Enrollment Using Dynamic Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing face recognition technologies in mobile terminals lack robust security mechanisms to prevent unauthorized access and tampering of face template data, leading to potential vulnerabilities in face-based unlocking systems.
Innovation Solution
Implement a verification mechanism using dynamic check tokens generated by a face recognition trusted application to ensure the legitimacy of face template data transmission, integrating a face recognition service with a security system to validate the tokens and store data securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If face template data is transmitted without verification, then the enrollment process is simple and fast, but security is compromised and unauthorized access becomes possible
Solution Approach 1:
A trusted application acts as an intermediary between the face recognition service and the security system. The trusted application generates and manages dynamic check tokens, verifying their legitimacy before allowing face template data transmission. This mediator ensures security without requiring the face recognition service to directly implement complex verification logic, thus maintaining reliability while managing complexity through specialization.
Solution Approach 2:
The system performs preliminary verification by validating dynamic check tokens before face template data is transmitted. The trusted application generates these tokens in advance and verifies them during the enrollment process, ensuring that only authenticated data transmission proceeds. This preliminary security check prevents unauthorized access while maintaining a streamlined enrollment flow for legitimate operations.
2Reliability
If dynamic verification tokens are implemented, then data integrity is protected, but the enrollment process becomes more complex
Solution Approach 1:
The trusted application automatically generates and manages dynamic check tokens without requiring manual intervention from users. The system self-verify the legitimacy of data transmission through automated token validation, ensuring data integrity while maintaining ease of operation. Users simply need to participate in the standard enrollment process, while the background verification occurs automatically.
3Reliability
If face template data is stored without secure verification, then storage is simple and fast, but unauthorized access and tampering become possible
Solution Approach 1:
The system separates security-critical functions into a dedicated trusted application that operates within the security system, distinct from the face recognition service. This segmentation isolates the verification logic and token management in a secure environment, protecting face template data without requiring the entire storage system to be restructured. The segmented architecture enhances security while maintaining simplicity in the overall system design.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
Embodiments of the present disclosure provide a control method for enrolling face template data and related products. The control method includes: controlling a face image collection device (130) to capture a face image and generate face template data; acquiring via the face recognition service a dynamic check token sent by the face recognition trusted application; sending a face template enrolling command carrying the dynamic check token and the face template data to the face recognition trusted application via the face recognition service; and verifying the dynamic check token in the face template enrolling command is valid and storing the face template data in the security system via the face recognition trusted application.