Dynamic Passphrase Voice Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current voice authentication systems are vulnerable to fraudsters obtaining and replaying a user's passphrase, compromising the security of biometric comparisons.
Innovation Solution
Implement a dynamic passphrase system where a customer is initially enrolled with a text-independent voice print, and subsequent authentications use a unique passphrase selected from a plurality, which can be updated and changed frequently, preventing passphrase reuse and reducing the risk of fraud.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static passphrase is used for voice authentication, then the authentication process is simple and fast, but the system becomes vulnerable to fraudsters who can record and replay the passphrase
Solution Approach 1:
The patent implements dynamic passphrases that automatically change over time or after each successful authentication. The system generates new passphrases from a predefined set and updates them periodically, ensuring that recorded passphrases become obsolete. This dynamic approach maintains security without requiring complex manual management from users.
Solution Approach 2:
The system changes the passphrase parameter over time by selecting from a predefined set of passphrases. Each authentication may use a different passphrase, and the system tracks which passphrases have been used. This parameter change approach prevents replay attacks while keeping the authentication process automated and user-friendly.
2Reliability
If passphrases are changed frequently to prevent fraud, then security is improved, but the system complexity and computational overhead increase
Solution Approach 1:
The system pre-generates a set of passphrases during system initialization or enrollment, storing them in a secure database. This preliminary action allows the system to quickly rotate through predefined passphrases without requiring complex real-time generation algorithms, reducing computational overhead while maintaining frequent passphrase changes.
Solution Approach 2:
The patent treats each passphrase as a short-lived credential that becomes obsolete after use or after a predetermined time period. The system systematically rotates through a set of passphrases, discarding used ones and moving to the next in the sequence. This approach provides strong security against replay attacks while keeping the implementation relatively simple.
3Measurement precision
If a text-dependent voice print is used for authentication, then the system can verify specific passphrase accuracy, but it requires the user to remember and repeat specific phrases increasing complexity
Solution Approach 1:
The system uses the same voice biometric technology for both text-independent enrollment and text-dependent verification. The voice print extraction and comparison algorithms work universally across different passphrase types, allowing the system to maintain high verification accuracy while keeping the user interface simple and consistent.
Data Source
AI summary
A computerized method for voice authentication of a customer in a self-service system is provided. A request for authentication of the customer is received and the customer is enrolled in the self-service system with a text-independent voice print. A passphrase from a plurality of passphrases to transmit to the customer is determined based on comparing each of the plurality of passphrases to a text-dependent or text-independent voice biometric model. The passphrase is transmitted to the customer, and when the customer responds, an audio stream of the passphrase is received. The customer is authenticated by comparing the audio stream of the passphrase against the text-independent voice print. If the customer is authenticated, then storing the audio stream of the passphrase and the topic of the passphrase.