* Passfaces Corporation provides authentication based on the recognition of faces
I’m still on my quest to find good user authentication techniques that can supplement or replace the old username and password scheme. In this age of spoofing, phishing and stolen IDs, we need strong multifactor authentication to make sure that a user is who he says he is, and an application is the genuine thing. It’s especially important for Web based applications like online banking and other applications involving financial transactions.
I’ve come across a company with a truly unique authentication technique. Passfaces Corporation provides authentication based on the recognition of faces. Scientific studies show that people have the innate ability to recognize familiar faces long after we have been exposed to them. This technology, then, uses a set of faces instead of the usual numbers or letters in passwords and PINs as a secret authentication code.
Here’s how it works. An individual is assigned a set of five faces. He is given an orientation session (usually lasting two to four minutes) to imprint those faces into his brain. Studies have shown that a person can recognize a distinct face years after first exposure to that face.
In using Passfaces to authenticate an application, the user is presented with a grid of nine faces. Only one face on the grid is from the user’s unique set of faces; the rest are decoys. He must select his specific face on the grid to get passed the digital gate. This process continues for the other four faces of his set. If he fails to recognize or select all of his faces, he is taken back a step to try again. If too many failures occur, he is locked out of the application.
Try it for yourself. Passfaces has an online demonstration of the technology.
Now let’s look a bit at the science behind Passfaces. This unique technology is supported by extensive academic studies and experiments.
Professor Hadyn Ellis of the School of Psychology at the University of Wales in Cardiff studied how the human visual brain works and how it perceives, remembers and recognizes faces. He concluded that face recognition is a dedicated process that is different from general object recognition. Both inference and direct neurological measurement indicate that our brains have a special component whose sole function is to recognize faces. What’s more, the human brain commits faces to memory without any conscious effort, and familiar faces are recognized, not recalled.
Read the whitepaper to learn more about the science behind Passfaces. Other whitepapers describe how Passfaces fits in as an authentication scheme for computer applications.
Passfaces has some distinct advantages over traditional passwords. First of all, the “passcode” can’t be written down or copied, and it can’t be given to or taken by another person. Also, it can’t be guessed, since there is a series of grids creating a very high number of possible combinations. Passfaces involves involuntary cognitive skills, not memory skills, so the faces can be recognized long after one would forget a password.
If there’s one drawback to this technology, it is that the solution cannot work for people who are blind or have other visual impairments that prevent them from seeing clearly. People with cognitive disabilities also might have difficulty using the tool. Passfaces is inherently dependent on the ability to clearly see an image, recognize it, and be able to distinguish it from other similar images. Unfortunately, there is a distinct portion of our population who don’t have that ability.
For this reason, I don’t see Passfaces as being suitable as the sole method of authentication. An alternative – like usernames and passwords – must still be available for people unable to use the technology of Passfaces. With this one exception, Passfaces seems to offer a truly unique and useful authentication scheme.
