Acoustic Metamaterial Filter for Ultrasonic Voice Attack Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Voice-based computing devices are vulnerable to inaudible ultrasonic attacks due to the 'shadow effect' of microphones, lacking cost-effective and robust defense mechanisms against such attacks.
Innovation Solution
An acoustic filter using metamaterials with engineered resonant chambers to suppress ultrasonic frequencies while allowing audible signals to pass through, installed externally or internally on voice-based devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware modifications are made to include additional filters and circuits to eliminate the shadow effect, then security against ultrasonic attacks is improved, but device complexity and manufacturing cost increase
Solution Approach 1:
The patent extracts and addresses only the harmful ultrasonic frequency components while allowing the rest of the audio signal to pass through unchanged. The acoustic filter is designed to selectively remove ultrasonic frequencies (above 20kHz) that carry malicious commands, while preserving the audible frequency range (20Hz-20kHz) for normal voice commands. This targeted extraction approach improves security without requiring comprehensive hardware redesign.
Solution Approach 2:
The acoustic filter introduces a localized component with specific frequency-selective properties positioned between the microphone and the processing circuitry. This local quality enhancement allows the filter to perform ultrasonic attenuation at a specific point in the signal chain, rather than requiring global hardware modifications throughout the entire device. The filter can be integrated into existing microphone assemblies with minimal impact on other components.
2Reliability
If active noise control is used to selectively filter ultrasonic frequencies, then security against ultrasonic attacks is improved, but manufacturing cost and implementation complexity increase significantly
Solution Approach 1:
The patent employs acoustic filters that can be manufactured using cost-effective methods such as 3D printing or injection molding. These filters are designed as simple physical structures with specific geometries (holes, cavities, resonators) that can be produced at low cost and integrated into mass-produced devices. The filters are passive components requiring no power supply, control electronics, or complex assembly, making them economically viable for widespread deployment in consumer electronics.
3Reliability
If software modifications are made to defend against ultrasonic attacks, then security is improved temporarily, but the solution is not permanent as attack signals can be modified to bypass new software defenses
Solution Approach 1:
The patent converts the physical properties of ultrasonic waves (which are harmful when carrying malicious commands) into a detectable and filterable characteristic. By designing acoustic filters with specific resonant frequencies and impedance characteristics, the system exploits the physical behavior of ultrasonic sound waves to attenuate them passively. This physical-layer defense approach is inherently more robust than software solutions because it relies on fundamental acoustic principles rather than mutable code, making it difficult for attackers to bypass by modifying their signal characteristics.
4Reliability
If a broadband filter is used to block all high frequencies, then ultrasonic attacks are mitigated, but normal voice commands in the high-frequency audible range are also affected
Solution Approach 1:
The patent carefully adjusts the filter parameters (cutoff frequency, roll-off rate, resonant frequencies) to create a selective frequency response that distinguishes between malicious ultrasonic signals and legitimate voice commands. The filter is designed with a cutoff frequency slightly above the human audible range (e.g., 20-22kHz) and incorporates passbands that preserve important speech frequencies. By optimizing these parameters, the system achieves effective ultrasonic attenuation while maintaining natural voice recognition performance.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Effectively mitigates ultrasonic attacks without disrupting normal voice commands, providing enhanced security and cost-efficiency compared to hardware or software modifications.
Implementation Method 1
The filter is composed of rigid plates with individual holes that are configured to exhibit local resonance phenomena that suppress incoming waves at specific (e.g., inaudible) frequencies
Implementation Method 2
The filter is based on the concept of metamaterials, which are engineered structures with embedded scatters, which are structures that can scatter incoming acoustic waves, e.g., by reflection, refraction, or scattering
Data Source
AI summary
An acoustic filter mitigates audio signal-based attacks (particularly inaudible attacks in the ultrasonic frequency range) on voice-based computing devices by modulating the signals before they reach the device's microphone. One filter is formed as a rigid body defining multiple holes that exhibit local resonance phenomena that suppress incoming audio waves at specific frequencies. The filter distorts or otherwise modifies the attack signals and thereby prevents the microphone(s) from receiving the intended attack signal, and prevents the associated computing device from processing and executing the intended malicious “command”/signal. The filter can be tuned to be operable outside the frequency range of normal spoken commands, so that typical voice-based commands are unaffected by the filter. A frame is provided to enable one or more filters to be retrofitted to existing consumer electronics devices, outside their housings. Alternatively, new consumer electronics may be manufactured to include such filters inside their housings.