Isometric drawing in peach of a printed photo, a mask on a stick, and a phone replaying a face, riding a belt from a webcam into the Moveris machine. Three cards leave the back of the machine for three stations: real or fake, the human-likelihood score, and the explanation.
PRESENTATION ATTACKS
PRINTED PHOTO
MASK
SCREEN REPLAY
WEIGHED TOGETHER
IS A BRAIN AND A BODY
DRIVING THIS FACE?
REAL OR FAKE
ONE DECISION PER CHECK
HUMAN-LIKELIHOOD SCORE
0 TO 100, AGAINST A THRESHOLD
EXPLANATION
WHAT AFFECTED THIS SCORE
ONE SECOND OF
STANDARD WEBCAM VIDEO

A presentation attack fools the camera. It is still not a living face.

Moveris reads one second of standard webcam video and decides whether a living face was in front of the camera. It is trained and tested on prints, masks, and screen replays.

What is a presentation attack?

A presentation attack puts a fake in front of a real camera. The camera works as it should, but what it sees is not a living person. The term comes from ISO/IEC 30107, the international standard for presentation attack detection, or PAD. You may also hear it called face spoofing.

A phone replaying a recording of a face.

The three kinds you will see

A printed photo of a face on a small easel.

Printed photo

A photo of someone else, held to the lens.

A mask of a face on a stick.

Mask

A face cut from paper or molded from silicone, worn or held up.

A phone replaying a recording of a face.

Screen replay

A phone or tablet playing a recording of someone's face.

Why presentation attacks still work

They are cheap. A printed photo costs almost nothing, and a recording of someone's face is often one public post away. A screen replay is the hardest of the three, because the recording can show a real person. The video was real. The person is not there.

What a presentation attack has to copy

A brain and a body run a living face, so its blood flow, muscle movement, and emotion work together. We call that cognitive coherence. A print has no blood flow. A mask has no microexpressions of its own. A screen replay shows a moment that is already over.

Moveris reads one second of video. It reads each of a hundred regions of the face four ways: facial muscle movement, blood flow, estimated depth, and neighbor contrast. Muscle movement goes down to the microexpressions that carry emotion. Moveris checks how all of those signs work together.

Isometric drawing in peach of one region of a face lifted as a small chip with an orange outline, its place in the face's grid below it. Lines run from the chip to four tiles: a moving sheet for facial muscle movement, an orange ramp for blood flow, stacked purple layers for estimated depth, and a grid with an orange center for neighbor contrast.

Built on attacks we record ourselves

We record our own screen replays, with phones and tablets held up to webcams. We generate, collect, and curate 90% of this data in-house, so it matches what happens in the real world.

Isometric drawing in peach of three short tracks, each bringing a card to a station: the living-face mark for the decision, a score bar against a threshold, and a table of pathway tests for what affected the score.

What your team gets back

Each check returns a decision, living face or not, and a human-likelihood score from 0 to 100. A breakdown shows what affected each score, so your fraud and review teams see more than the decision.

Questions

Still have a question? Book a demo and ask us.

What is presentation attack detection (PAD)?

PAD is software that decides whether a face on camera is a living person or a fake shown to the camera. ISO/IEC 30107 sets the terms and the test methods.

Can a photo fool a face check?

A printed photo can fool a check that only looks for a face. Moveris is trained and tested on prints, masks, and screen replays.

What is the difference between active and passive liveness?

Active liveness asks the person to do something, such as blink or turn their head. Passive liveness asks for nothing. Moveris is passive: your customer looks at the camera, and Moveris reads one second of video.

What do APCER and BPCER mean?

They are the two error rates in ISO/IEC 30107-3. APCER is the share of attacks wrongly accepted. BPCER is the share of real people wrongly rejected. Book a demo to see Moveris on your own flow.

What is the difference between a presentation attack and an injection attack?

A presentation attack puts a fake in front of a real camera. An injection attack skips the camera and feeds in fake video. Moveris is trained and tested on both.

What camera does Moveris need?

A standard webcam or phone camera. No special hardware.

Put a living face behind the next yes.

Tell us where you need a living-face decision. We will show you Moveris on your own flow.

Book a demo