人脸识别智能终端的安全实现及验证  

Security implementation and verification of face recognition intelligent terminal

作　　者：唐培丽 黄贵玲 TANG Peili;HUANG Guiling(National Computer Quality Supervising&Testing Center,The 15th Research Institute of China Electronics Technology Group Corporation,Beijing 100083,China)

机构地区：[1]中国电子科技集团公司第十五研究所国家电子计算机检验检测中心,北京100083

出　　处：《自动化与仪器仪表》2023年第4期147-151,共5页Automation & Instrumentation

摘　　要：通过分析人脸识别智能终端的特点和构成,将其可能面临的攻击手段按照攻击目标进行分类,分为:硬件层攻击、系统层攻击、应用层攻击和通信层攻击。针对系统层和通信层面临的安全风险提出设计方案,对设备的安全性进行了提升和加强,以确保人脸数据在采集、使用、传输等的过程中的安全性,并完成了针对性的测试,测试结果达到预期。即该安全防护方案,对于增强人脸识别终端中人脸数据的安全性是切实有效的。The characteristics and composition of face recognition intelligent terminal is analyzed,and according to the attack target,the current attack means of this kind of terminal can be divided into:hardware layer attack,system layer attack,application layer attack and communication layer attack.In this paper,the design scheme is proposed for the security risks facing the system layer and the communication layer,and the security of the equipment is improved and strengthened,that ensure the security of face data in the process of collection,use,transmission and other processes.Also we do the targeted test,and the test results meet the expectations.The design and implementation of the security protection scheme mentioned in this paper is effective for enhancing the security of face data in face recognition terminals.

关 键 词：人脸识别 侧信道攻击 TLS协议 密码安全 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]