Abstract:Face authentication systems are widely employed in access control systems to ensure the security of confidential facilities.Recent works have demonstrated their vulnerabilities to adversarial attacks.However, such attacks typically require adversaries to wear disguises such as glasses or hats during every authentication, which may raise suspicion and reduce their attack impacts.In this paper, we propose the UniID attack, which allows multiple adversaries to perform face spoofing attacks without any additional disguise by enabling an insider to register a universal identity into the face authentication database by wearing an adversarial patch.To achieve it, we first select appropriate adversaries through feature engineering, then generate the desired adversarial patch with a multi-target joint-optimization approach, and finally overcome practical challenges such as improving the transferability of the adversarial patch towards black-box systems and enhancing its robustness in the physical world.We implement UniID in laboratory setups and evaluate its effectiveness with six face recognition models (FaceNet, Mobile-FaceNet, ArcFace-18/50, and MagFace-18/50) and two commercial face authentication systems (ArcSoft and Face++).Simulation and real-world experimental results demonstrate that UniID can achieve a max attack success rate of 100% and 79% in 3-user scenarios under the white-box setting and black-box setting respectively, and it can be extended to more than 8 users.

A user identity authentication protocol under universal identifier-based network

Inter-domain authentication scheme for Pervasive Computing Environments

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Authentication scheme based on biometric encryption for pervasive computing environments

UniID: Spoofing Face Authentication System by Universal Identity

Lightweight efficient and feasible IP multimedia subsystem authentication

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient Delegation-Based Anonymous Authentication Protocol

An Identity Management Protocol For Multi-Identifier Network

Study of Network Authentication Based on RADIUS Protocol

TrueID: A Practical Solution to Enhance Internet Accountability by Assigning Packets with Creditable User Identity Code.

IGIDA:Internet General IDentity Architecture

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

Universal Authentication Protocols for Anonymous Wireless Communications

Privacy-Preserving Universal Authentication Protocol for Wireless Communications

Locator resolving system for flat identity

Cellular universal IP: a low delay mobility scheme based on universal IP addressing.

An Identity Authentication Scheme in Wireless Peer-to-peer Network

Efficient authentication and key agreement procedure in ip multimedia subsystem for umts