{"id":4537,"date":"2023-10-27T12:46:15","date_gmt":"2023-10-27T12:46:15","guid":{"rendered":"https:\/\/filter.watch\/en\/?p=4537"},"modified":"2023-10-27T12:46:54","modified_gmt":"2023-10-27T12:46:54","slug":"facial-authentication-and-recognition-from-reality-to-political-propaganda","status":"publish","type":"post","link":"https:\/\/filter.watch\/english\/2023\/10\/27\/facial-authentication-and-recognition-from-reality-to-political-propaganda\/","title":{"rendered":"Facial Authentication and Recognition: From Reality to Political Propaganda"},"content":{"rendered":"

Executive Summary<\/b><\/p>\n

The discussion on the use of facial recognition technology became prominent when Mohammad Saleh Hashemi Golpayegani, the former secretary of the Command of Enjoining Good and Forbidding Wrong, <\/span>stated<\/span><\/a> in a September 2022 interview with the news site <\/span>Khabar Fori<\/span><\/i><\/a>: 'Technology now allows images to be matched with national ID photos, and those without proper hijab to be identified. If someone does not observe the hijab in public places like the metro, the metro camera captures their image, they are fined a significant amount, and the fine is mailed to them.<\/span><\/p>\n

This statement and the subsequent protests of the Women, Life, Freedom movement triggered a debate on the use of this technology. According to <\/span>Filterwatch<\/span><\/a>, which analyzed a collection of hacked prosecutorial emails by the hacker group <\/span>Anonymous Iran Ops<\/span><\/a>, two companies named <\/span>Niafam<\/span><\/a> and <\/span>Yaftaar Pioneers of Computing<\/span><\/a> (or Yaftaar) have been working with the Iranian prosecutor\u2019s office since around 2015 to develop technologies for image analysis and facial identification of individuals. The extent of their progress is unknown. However, given the long-term investment in this area, it can be inferred that the Iranian government has managed to develop this technology to some degree.<\/span><\/p>\n

Furthermore, by examining the new policies addressing what Iranian authorities refer to as 'improper hijab', one can infer that the facial recognition technology, as described by Iranian officials, has not been developed as suggested.<\/span><\/p>\n

For instance, on September 20, 2023, a report was <\/span>released<\/span><\/a> stating that according to Article 52 of the Modesty and Hijab Bill, drivers of online taxi services like Snapp and Tapsi are required to report instances of \u201cimproper hijab.\u201d<\/span><\/p>\n

In the note to Article 52 of <\/span>this bill<\/span><\/a>, it is stated: \u201cOnline taxi platforms are obliged, within two months, to incorporate in their communication systems with customers and drivers the ability for the driver to report passengers violating this law. If a driver reports a violation of this law by a passenger to the platform, they are exempted from paying a fine. Furthermore, these platforms are mandated to provide online connectivity for the officers of the Islamic Republic of Iran's Disciplinary Command (FARAJA) to this system. In the event of non-compliance with the obligations of this article, the violating platforms will be fined an amount equivalent to three months of the platform's profit derived from its revenues.\u201d<\/span><\/p>\n

The question that arises is: Why do Iranian authorities need to pass a law that forces a private company to monitor and report \u2018improper hijab\u2019 if the traffic control cameras can use facial and \u2018improper hijab\u2019 recognition technology as accurately and effectively as they say?T<\/span><\/p>\n

Or in another instance, we know that at least since 2019, the Iranian police, in collaboration with the Command for the Promotion of Virtue and the Prevention of Vice, <\/span>had designed<\/span><\/a> an application named \"Nazer\" for the police. The app allows the police to record any violations of the dress code and send a text message with a fine to the offender.<\/span><\/p>\n

This application, which has recently made headlines, raises the question again: Why do the Iranian authorities need to rely on this tool to punish \u2018improper hijab\u2019 if they have such advanced facial recognition technology?<\/span><\/p>\n

At the same time, Filterwatch has found out that some Iranian companies are working with the <\/span>Information Technology Organization<\/span><\/a>, a branch of the Ministry of Communications and Information Technology, to create similar systems for different uses.<\/span><\/p>\n

Some of these companies have publicly stated on their websites that they have made these technologies to improve authentication for banking and government services. But these technologies\u00a0 can have a dual purpose; on one hand, they can help with verifying identities, and on the other hand, they can be exploited by Iranian security and judicial authorities for security and judicial purposes.<\/span><\/p>\n

There is evidence suggesting that some of these companies might have collaborated with these authorities. Sometimes, this evidence has surfaced in the public domain, prompting journalists to inquire about it. For instance, Nima Shamsapour, the CEO of U-ID, denied cooperation with security institutions in an interview on June 16, 2023, with the '<\/span>Blue Room<\/span><\/a>' program.\u00a0<\/span><\/p>\n

Sardar Ahmadreza Radan, the Chief Commander of the Iranian Police, <\/span>stated<\/span><\/a> in an interview with the Islamic Republic of Iran Broadcasting (IRIB) news agency on April 8, 2023, that as of the Iranian month of Farvardin (March 20, 2023 and ended on April 18, 2023), individuals not adhering to the hijab regulations \u201cwill be identified using advanced technology and equipment, reprimanded, and then referred to the judicial courts.\u201d<\/span><\/p>\n

The U-ID CEO\u2019s answer implies that biometric and facial identity verification companies may be giving this technology to security and judicial authorities. <\/span>
\n<\/span>
\n<\/span>As such, in this report, we will look at some Iranian companies that work with the Information Technology Organization to make this technology. Filterban received the list of these companies from sources who talked to us anonymously.<\/span><\/p>\n

What is facial recognition\/biometric technology?<\/b><\/p>\n

Facial recognition technology is an artificial intelligence-based system that, using pre-existing data, allows for the identification and tracking of individuals. Liveness Detection is a component of the facial recognition system that prevents system errors, ensuring that an individual cannot be recognized or gain access using a two-dimensional photo or anything other than their actual face.<\/span><\/p>\n

In 'Liveness Detection', the system asks the individual to face the camera and perform specific movements (such as turning their head left and right) to determine if the face is artificial or a photograph. By recognizing facial details, this system can discern the authenticity of the face and enhance the accuracy of the recognition.<\/span><\/p>\n

Applications of Identity Recognition Systems Worldwide; Why Are We Concerned for Iran?<\/b><\/p>\n

Face recognition and identity verification systems are used across the world in electronic systems and applications that require authenticating individuals. For example, in a banking system, a person needs to register their identification card and then verify their real identity using the face\/liveness detection system. This system compares the person\u2019s face with the photo on the ID card and checks if the person is alive and awake. This way, the system can prevent fraud or deception by photos or unconscious people.<\/span><\/p>\n

A source who wished to remain anonymous and who was involved in developing these software applications told Filterban that identity verification and liveness detection systems are integrated. This means that a company offering identity verification can also implement the feature of checking if the person is alive and present.<\/span><\/p>\n

On one hand, the general principles of liveness detection systems are similar to other systems such as license plate recognition. They are based on detecting specific points in an image and matching them with real samples. Therefore, facial recognition companies often offer a package that covers both liveness detection and license plate recognition features. Filterban\u2019s research supports this statement.<\/span><\/p>\n

Facial identity verification systems are mainly used for banking and stock exchange purposes in Iran. However, these systems also raise concerns among users and human rights activists who fear that they could be used to identify and track down government protesters.<\/span><\/p>\n

Over the past months, the government had claimed, through official figures and media outlets, that it used facial recognition systems to identify hijab protesters in the past months.<\/span><\/p>\n

Sardar Ahmadreza Radan, the Chief Commander of the Iranian Police, <\/span>stated<\/span><\/a> in an interview on April 8, 2023, that starting from April 15, individuals without hijab would be \"identified using advanced technology and equipment, they would be warned, and then referred to judicial courts.\u201d<\/span><\/p>\n

On June 15, 2023, Radan, while addressing reporters in the province of Qom, <\/span>announced<\/span><\/a> the implementation of a \"plan to confront those without hijab using surveillance cameras.\" He also revealed that the President has agreed to expand the coverage of cameras so that they can be utilized \"to ensure security using smart platforms in all security dimensions.\u201d<\/span><\/p>\n

Iran's Infrastructure for Face Recognition: What Systems are Required?<\/b><\/p>\n

Face recognition and liveness detection services require various software and hardware capabilities. On the software side, they need face recognition programs that use artificial intelligence to differentiate between similar faces. These programs require digital software, programmers, and a large number of real-life samples and a comprehensive database of citizens\u2019 photos. On the hardware side, they need high-quality and accurate images for this purpose.<\/span><\/p>\n

On September 4, 2023, a few weeks before the tragic death of Mahsa (Jina) Amini, Mohammad Saleh Hashemi Golpayegani, the then-Secretary of the Command for the Promotion of Virtue and the Prevention of Vice, told the \u201c<\/span>Khabar Fori<\/span><\/a>\u201d website that his organization used facial recognition technology to identify and punish citizens who violated the hijab law or engaged in \u201cnon-standard and inappropriate behaviors\u201d. He said that they compared the images of the offenders with the national citizens\u2019 database for their ID cards. He urged other institutions to employ the same systems to enforce what is termed by law as \"modesty and hijab\", in order to deal with violators.<\/span><\/p>\n

As previously mentioned, Sardar Radan had earlier <\/span>announced<\/span><\/a> the use of surveillance cameras to capture images of those protesting against the government. Filterban\u2019s field investigations, based on interviews with citizens inside Iran and Fars News Agency <\/span>reports<\/span><\/a>, reveal that military and plainclothes officers in some parts of the city - especially in public transportation and main roads - are filming people without hijabs using mobile phones or cameras. It is not clear if all these videos are used to improve the facial recognition system, but some of them have led to the arrest and identification of protesters.<\/span><\/p>\n


\n<\/span>In terms of historical usage, facial recognition technology is also used for all electronic government services.. For example, the 'Smart Government Services Window' or <\/span>http:\/\/my.gov.ir<\/span><\/a> employs two-factor authentication.\"<\/span><\/p>\n

The Ministry of Communications also has to implement three authentication levels by the end of 1401. These levels are: verifying the applicant\u2019s identity information with the Iranian Identity Information Database, checking it with the User Authentication Network Database (SHAHKAR), matching the applicant\u2019s biometric data with the registered biometric information in the Iranian Identity Database, and using digital signatures to confirm the service request process from start to finish. Private companies offer these services and sell their solutions to the government.<\/span><\/p>\n

In the software realm, numerous companies have so far introduced facial recognition software, which we will delve into later in this report. Furthermore, in the subsequent section, we will detail the facial recognition and liveness detection software provided by these groups<\/span><\/p>\n

Facial Recognition Service Providers<\/b><\/p>\n

Kavoshgaran Hamrah Kish (Novin Development Hamrah Kish)<\/i><\/b><\/p>\n

 <\/p>\n

The Development <\/span>Novin Hamrah Kish Company<\/span><\/a> is a subsidiary of the <\/span>Geraish Tazeh Kish Group of Companies<\/span><\/a> (GSS), led by CEO Kiavash Arj. The GSS was founded in 1989 and has several companies that provide software services in fields such as banking and electronic payment, identity verification, card-based payment, and fuel system solutions.<\/span><\/p>\n

The Kavoshgaran Hamrah Kish Company\u2019s <\/span>website<\/span><\/a> mentions its collaboration with government organizations such as the Ministry of Interior, Ministry of Communications, Information Technology Organization, Civil Registration Organization, and the \u2018Root\u2019 Electronic Certificate Issuance Center. It provides \u2018access to identity data for precise verification\u2019 for all these organizations. The website also introduces a range of its software products.<\/span><\/p>\n

zoomID<\/span><\/a><\/p>\n

The '<\/span>zoomID<\/span><\/a>' infrastructure for non-present biometric authentication and electronic signature <\/span>authenticates<\/span><\/a> the user by receiving their identity information and comparing it with the records in the civil registration. This is a summary of the functionalities of 'zoomID' available on the company's website. The website does not provide more details about this service, such as what \u2018non-present authentication\u2019 means, or what specific data is used for verification.<\/span><\/p>\n

Non-present authentication Providing services for managing the digital identity lifecycle <\/span>
\n<\/span>
\n<\/span>Using the Public Key Infrastructure (under the \u2018root\u2019 center approved by legal authorities) to issue electronic signature certificates for different entities, such as natural persons, legal entities, and equipment.<\/span><\/p>\n

National \"Pas\" Application<\/i><\/b><\/p>\n

\"\"
Loading...<\/figcaption><\/figure>\n


\n<\/span>The National \u201c<\/span>Pas<\/span><\/a>\u201d Application website says that this app uses government services and artificial intelligence technology to make identity verification, registration, and digital signature certificate issuance easier. The site provides identity verification and electronic signature services to companies.<\/span><\/p>\n

This app <\/span>offers<\/span><\/a> facial recognition-based identity verification and matches information with civil registration data for access to various websites, which can be governmental, semi-governmental, banks, mobile phone operators, taxis, or online stores.<\/span><\/p>\n

Summary of Services:<\/span><\/p>\n