Dynamic Voice Authentication Password Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current voice authentication methods are susceptible to playback spoofing attacks, especially when short passwords are used or in noisy environments, and existing detection methods are unreliable.
Innovation Solution
The system dynamically generates a password and prompt based on current acoustic environment conditions and context, emphasizing differences between users, using a shared secret and multistage authentication with confidence scoring to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a recorded user voice is used for authentication, then convenience is improved, but susceptibility to playback spoofing attacks increases
Solution Approach 1:
The system changes the parameters of the authentication process by using dynamically generated passwords and prompts instead of static ones. It analyzes acoustic environment conditions, user activities, geolocations, and application contexts to generate unique authentication challenges, making playback attacks ineffective while maintaining user convenience
Solution Approach 2:
The authentication system transitions from static passwords to dynamic, context-aware passwords and prompts. Each authentication attempt generates unique challenges based on current environmental and contextual parameters, making the system adaptive and resistant to replay attacks while preserving ease of use
2Productivity
If a short password is used, then authentication speed is improved, but accuracy deteriorates
Solution Approach 1:
The system adds multiple dimensions to the authentication process beyond just the password itself. It incorporates acoustic environment analysis, user behavior context, geolocation data, and application-specific parameters to create a multi-dimensional authentication challenge that maintains speed while improving accuracy
Solution Approach 2:
The authentication process is segmented into multiple stages, where each stage provides context, transcriptions, and confidence scores to the next stage. This multi-stage approach allows for rapid initial verification while maintaining high accuracy through progressive refinement
3Adaptability or versatility
If voice authentication is performed in a noisy environment, then adaptability is improved, but reliability deteriorates
Solution Approach 1:
The system performs preliminary analysis of acoustic environment conditions before generating the authentication password and prompt. By pre-assessing noise levels and environmental factors, it can adjust the authentication challenge to maintain reliability while adapting to various acoustic conditions
Solution Approach 2:
The multistage authentication process incorporates feedback loops where each stage provides confidence scores and transcriptions to subsequent stages. This feedback mechanism allows the system to continuously refine its authentication decision, maintaining high reliability even in noisy environments by compensating for individual stage uncertainties
Data Source
AI summary
Systems and methods for voice authentication are provided. An example method starts with dynamically generating authentication information and a prompt associated therefor. The authentication information is generated to emphasize differences between an authorized user and others. The authentication information may be generated based on at least one of a user profile, an acoustic environment in which a mobile device is located, and a history of interactions with the mobile device. The authentication information may be an answer to a question which the authorized user would uniquely be able to provide, or it may be a distinctive password. The prompt, for the authentication information, is provided to a user attempting to use the mobile device. The method proceeds with capturing an acoustic sound of a speech of the user and detecting the authentication information in the speech. Based on the detection, a confidence score is determined. Based on the confidence score and context, the method performs an authentication of the user or providing the confidence score, the context, and a transcription of the speech to a next stage of authentication.