3.4 Facial Recognition

When the user authenticates through Facial Recognition method, Advanced Authentication can use blink detection to differentiate live face and photos. You can configure Device Service to enable blink detection. So, the user needs to blink several times, depending on the service settings to get authenticated.

  1. Open the following configuration file for respective OS

    • In Microsoft Windows, open C:\ProgramData\NetIQ\Device Service\config.properties.

    • In Linux, open /opt/NetIQ/DeviceService/config.properties.

    • In Apple Mac OS X, open /Library/Application\ Support/NetIQ/DeviceService.app/Contents/Resources/config.properties.

  2. Specify the following parameters:

    Parameter

    Description

    video.checkByBlinking

    Set this parameter to True to enable blink detection.

    video.blinkThreshold

    To specify the eye aspect ratio.

    The Eye Aspect Ratio is an estimate of the eye opening state. Eye ratio below the specified value will be counted as a blink. The default value is 0.2.

    The eye aspect ration of closed eye is between 0.08 - 0.2 and eye aspect ration of open eye is between 0.2 up to 0.32.

    video.blinkFrames

    To specify the number of consequent frames with the ratio below the threshold.

    If the eye ratio is below the threshold within the given number of consequent frames, that counted as one blink. The default value is 2.

    If the blink frame value is 2, make sure the eye aspect ratio in 2 consequent frames is lesser than the value specified in the blink threshold.

    video.blinkCount

    To specify the number of blinks needed to authenticate.

    video.deviceId

    Specify the value to select the camera. The default value is 0.

    If you set the parameter to 0, the Device Service picks the default camera.

    If you set the parameter to 1, the Device Service selects the secondary camera. If you set the parameter to 2, the Device Service selects the third camera and so on if you have many.

  3. Save the changes.

  4. Restart Device Service.