Facial Anti-Spoofing Certification

NIST ISO/IEC 30107 Standard

There are two major certifications for face liveness detection and facial antispoofing, introduced since 2017. Both certifications — constituted by FIDO and ISO — are valid on par. FIDO also incorporates some clauses and rules from the ISO face antispoofing standard. Both certifications are considered legitimate for corporate certification and facial antispoofing certification.

The ISO/IEC 30107 face antispoofing liveness certification standard was introduced in 2017 in an effort to formulate and establish a clear picture of Presentation Attacks (PA) that are used against biometric and liveness detection systems including facial recognition and fingerprint scanning etc. The standard was developed by International Organization for Standardization in unison with the International Electrotechnical Commission.

To provide a more accurate selection of terms and definitions, the face antispoofing ISO/IEC 30107 standard also utilizes some other standards accepted by ISO, such as Biometric performance testing and reporting. The document   lists attack types and their components, evaluation elements, and PA detection mechanisms. It also presents error rates, defines terminology and focuses on other related technicalities.

Levels of attacks

According to the face antispoofing ISO/IEC 30107 standard, there are 3 levels of a Presentation Attack Detection. The levels may vary based on: time, equipment, and the skill level of attackers.

Level 1. A level 1 attack has an average preparation time of up to 8 hours. The equipment required for such an attack is easily obtainable. It includes printed photos, dusted fingerprints, video of a target replayed from a phone, and palm photo etc.

Level 2. A level 2 attack has greater complexity and takes malicious actors up to 3 days of preparation. The tools for such an attack can still can be procured, but may require greater cost and effort. The attack is initiated by means of fingerprint casting, 2D or 3D paper masks, and face demonstration with eye movements etc.

Level 3. A level 3 attack requires a preparation time ranging from 10 days to 3 weeks or more. Attackers need specified and rare skills for this level of attack and require professional equipment which is hard to obtain. To launch an attack, elaborate silicone masks with realistic face imitation are required.

Certification methodology

As observed by the facial liveness Wiki, the liveness certification process for the face antispoofing ISO/IEC 30107 standard is overseen by the iBETA laboratory. It offers a Quality Management System and biometrics test procedures and is accredited by NVLAP and FIDO Alliance.

The methodology includes:

• Presentation Attack Detection in accordance with the ISO 30107-3 standard.
• Spoofing and liveness detection.
• Enrollment attack detection, which involves a test attack simulated with a false human-imitating mask.
• Application evaluation, in which attack types are selected depending on application and use location/ environment of a system. This includes voice imitation with sound artifacts, facial recognition in a poorly lit room, and other examples.
• Biometric Performance Testing as dictated by ISO 19795.
• Biometric data subject collection. (This is considered a controversial matter from legal point of view, as collecting data from random people will likely be prohibited in the future).

Similar to the classification for attack types, the people being identified by the biometric system can also be grouped.

Certified vendors

There are a number of vendors who are accredited by the ISO’s facial anti-spoofing certification and its face antispoofing guidelines. A List of vendors certified with the highest level 2 (facial liveness only) is shown in the following table. The vendors are categorized by name, FNMR/BPCER limit, Passive/Active, and number of OS supported at certification:

The complete list of certified enterprises can be found on the iBETA website.

FIDO Certification

In October 2020, FIDO (Fast Identity Online) published a comprehensive report on assessment methods, attack types and terminologies used for testing a biometric system. This face antispoofing test measures data related to Failure-to-Enroll Rate (FTE), Impostor Attack Presentation Accept Rate (IAPAR), Failure-to-Acquire Rate (FTA), and Zero-Effort Impostor Attempt etc.

The system under test is dubbed Target of Evaluation (TOE) and its components — data capture, signal processing, comparison-and-decision — are subjected to simulated attacks. The standard requires that the Target of Evaluation be placed in a test environment, which simulates the actual "field" environment where the system is going to be installed. For instance, it implies noisy surroundings for voice identification or premises with dim lighting for facial recognition. If a TOE is designed to work in varying environments, each must be simulated separately to meticulously test the face antispoofing capability.

Levels of attacks

FIDO categorizes presentation attacks in three levels which are differentiated by the time, effort, and resources required to orchestrate them. The complexity of equipment required also grows as the levels progress.

The levels defined by FIDO are:

Level A. This level includes the most primitive and crude, yet sometimes effective attack methods. Among them are photo print-outs, including those made from high-definition originals, as well as the target’s images presented on a phone/tablet screen.

Level B. This level involves more evolved impostor techniques including the use of  masks, which vary in quality — from simple and cheap 2D masks to intricate and more creative versions made using a 3D printer. Videos picturing a target are also used.

Level C. In this level, malicious actors employ artfully designed, realistic silicone masks or high-definition videos, including deepfakes, to trick the face antispoofing system. The masks can also be designed to emit artificial warmth to simulate a more realistic human face.

Certification methodology

The certification for face antispoofing testing is performed by FIDO-accredited independent testing laboratories on products or systems provided by vendors. The evaluation measures the Impostor Attack Presentation Match Rate (IAPMR), as defined in ISO 30107 Part 3.

The certification procedure includes:

• Presentation Attack Instruments (PAI). These are tools — masks, printouts, mobile phone videos — that should be used during a test.
• Test Crew. It is required that at least 10 people, who will play the role of subjects examined by the biometric system, must participate in the test. Their biological organs — eyes, fingers, etc. — used for the test are referred to as "unique samples".
• Time. Each level has a defined time for attack attempts: Level A - up to 1 day, Level B - up to 7 days, Level C - 7 days.

When the metadata based on above mentioned areas is gathered, a detailed report is submitted to FIDO. Testing is conducted by one of the FIDO Accredited Biometric Laboratories who focus on face antispoofing among all else (see the table below)

Difference between ISO/IEC 30107 and FIDO

Both ISO/IEC 30107 and FIDO standards of face antispoofing are highly detailed when it comes to defining threats, testing systems and envisioning challenges. Additionally, the two standards are literally intertwined, as a FIDO certification accepts many of the terms proposed by ISO/IEC 30107 standard.

Both ISO/IEC 30107 and FIDO pursue the same goals of revealing vulnerabilities of biometrics systems, perfecting their performance and classifying problems and threats. Major discrepancies lie in the terminology used by both face antispoofing standards and slightly different attack types proposed by them.

References

1. SO/IEC 30107-1:2016 standard
2. ISO official website
3. IEC official website
4. ISO/IEC 19795 Biometric Performance Testing and Reporting
5. iBETA Laboratory official website
6. National Voluntary Laboratory Accreditation Program (NVLAP)
7. ISO/IEC 19795-1:2021
8. Biometric data and privacy laws (GDPR, CCPA/CPRA)
9. Towards the Security Evaluation of Biometric Authentication Systems
10. FIDO Biometrics Requirements
11. FIDO Announces Latest Set of FIDO Certified Products
12. Innovatrics DOT Passive Liveness Application - V2.1.0(1) iOS/V3.0.0 Android PAD Level 1 Test Report