Hoozoorino — Smart Biometric Attendance & HR Platform
Enterprise-grade smart attendance system powered by real-time face recognition, multi-frame anti-spoofing liveness detection, RBAC, and automated payroll reporting.
The Problem
The Solution
System Flow & Architecture
Kiosk Camera
Webcam captures a 2-second live video stream upon employee arrival.
Anti-Spoof Liveness
Multi-frame neural model analyzes blinking & motion to block printed photo/video fraud.
Biometric Match
Facial vector embedding matched against encrypted database in <1s.
Shift Rules Engine
.NET Core evaluates active shift rules, grace periods, and registers entry/exit.
Live Admin & Payroll
Instant headcount refresh on manager dashboard and one-click monthly Excel export.
Technical Challenges & Solutions
Multi-Factor Anti-Spoofing under 3s SLA
Preventing fraud from static photos, tablet replays, and cutouts without creating entry bottleneck delays during morning employee check-in rushes.
Engineered a multi-frame pipeline analyzing 5+ consecutive frames. Combined Eye Aspect Ratio (EAR) for blink detection with 2D-to-3D landmark projection for horizontal Head Yaw rotation and facial tilt angles, executed in parallel using ONNX Runtime.
Impact: Zero false-positive photo bypasses with total inference latency kept under 2.4 seconds.
Biometric Privacy & Cosine Similarity Matching
Raw employee photos cannot be permanently stored due to privacy compliance and database bloat. Verification must match against hundreds of registered staff with sub-second response times.
Extracted and encrypted 512-dimensional vector embeddings on initial enrollment. Attendance requests compute cosine distance against active employee embeddings, rejecting any score below the confidence threshold (0.65).
Impact: 100% compliance with biometric privacy norms and instantaneous matching for 1,000+ employees.
Automated CI/CD with SSL & Nginx State Preservation
Automated GitHub Actions CI/CD workflows repeatedly overwrote the live Nginx reverse-proxy configuration on each push, discarding Let's Encrypt SSL certificates and causing service drops.
Decoupled infrastructure provisioning (Certbot SSL & Nginx configuration) from the rolling application deployment. Refactored the deployment runner to update binaries and trigger atomic systemd daemon reloads without touching Nginx site configuration.
Impact: 100% automated CI/CD pipeline with zero configuration drift and seamless zero-downtime updates.