Face authentication embedding migration and drift-compensation

A user device comprising:

• an authentication system configured to implement a facial recognition module to authenticate a user to unlock the user device;
• a camera system configured to capture image data associated with a face of the user during a face-authentication attempt;
• a hypervisor configured to, during the face-authentication attempt, enter a secure session for passing data between the camera system and the authentication system;
• a processor unit configured to:
• update the user device to include both a current version of firmware and an updated version of the firmware;
• subsequent to the updating, receive an indication of the face-authentication attempt and the image data associated with the face of the user;
• responsive to receiving the indication of the face-authentication attempt and during the secure session, execute the current version of the firmware to generate comparison data using the image data captured during the face-authentication attempt;
• and
• during the secure session and responsive to the user being authenticated by the authentication system based on the comparison data substantially matching a first profile, generate one or more new embeddings by executing the updated version of the firmware using the image data captured during the face-authentication attempt, the first profile based on a set of enrolled embeddings that were previously generated using the current version of the firmware on previously-captured image data of the face of the user;
• and
• a secure storage unit configured to, during the secure session, store the one or more new embeddings at a separate location from the set of enrolled embeddings, the one or more new embeddings stored as part of a second profile for the user, the hypervisor configured to exit the secure session after the one or more new embeddings are stored.

One or more non-transitory computer-readable storage media storing instructions that, responsive to executing by one or more processors, cause the one or more processors to implement operations including:

• updating the user device to include both a current version of firmware and an updated version of the firmware;
• subsequent to the updating, receiving an indication of a face-authentication attempt and image data associated with a user's face, the image data captured during the face-authentication attempt;
• entering a secure session for passing data between a camera system and an authentication system;
• during the secure session:
• loading both the current version of the firmware and the updated version of the firmware into the authentication system;
• executing the current version of the firmware to generate comparison data using the image data captured during the face-authentication attempt;
• authenticating the user to unlock the user device based on the comparison data substantially matching a first profile, the first profile based on a set of enrolled embeddings that were previously generated using the current version of the firmware on previously-captured image data of the user's face;
• responsive to authenticating the user to unlock the user device, generating one or more new embeddings by executing the updated version of the firmware using the image data captured during the face-authentication attempt;
• storing the one or more new embeddings at a separate location from the set of enrolled embeddings, the one or more new embeddings stored as part of a second profile for the user;
• and
• after storing the one or more new embeddings, exiting the secure session.