Why does face tokenization matter?
A raw face image is sensitive data. If an attacker steals it, the user cannot change the face. A stolen face image is a lasting risk.
Face tokenization protects the face. It replaces the image with a token that a system can control.
What makes a face token safe?
A strong face token has three properties. These properties come from biometric template protection.
- Irreversible: a system cannot rebuild the face from the token.
- Unlinkable: two services get different tokens for the same face. No party can track the user across services.
- Revocable: a system can cancel a token and issue a new one.
What standard guides template protection?
ISO/IEC 24745 is the standard for biometric information protection. It defines irreversibility, unlinkability, and renewability. Engineers build tokens to these rules.
A vendor builds a token to the standard. A vendor does not certify a token against the standard.
How is face tokenization different from encryption?
Encryption hides data with a key. A holder of the key can read the data again. So encryption is reversible by design.
Face tokenization aims for a one-way change. A system cannot rebuild the face from the token. So a stolen token does not expose the face.
How does SenseCrypt use face tokenization?
SenseCrypt is a passwordless identity provider (IdP). It uses patent-pending face tokenization. A face becomes a single-use face token.
SenseCrypt runs face matching on-device. SenseCrypt stores no biometric data on the server.
Frequently asked questions
What is face tokenization?
Face tokenization is a method that turns a face into a protected token, not a stored image. The token stands in for the face during a match.
Can someone rebuild a face from a face token?
No. A strong face token is irreversible. A system cannot rebuild the face from the token.
Can a system revoke a face token?
Yes. A revocable token lets a system cancel it and issue a new one. The user does not need a new face.
How does SenseCrypt protect the face?
SenseCrypt uses patent-pending face tokenization. A face becomes a single-use face token. Face matching runs on-device. SenseCrypt stores no biometric data on the server.
Related