Randomized Digit Prompting for Secure IVR Input
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for providing confidential information to IVR systems are insecure, as they can be overheard or intercepted, especially in public places, allowing potential misuse of sensitive information like credit card numbers or social security numbers.
Innovation Solution
The system uses a prompting mechanism where the IVR reads out digits to the user, who responds with 'yes' or 'no' to input digits securely, making it impossible for listeners to discern the actual numbers, and can optionally include additional encryption methods like random digit insertion or language changes to further secure the transaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If speech input is used to enter confidential information in an IVR system, then the ease of operation is improved, but the security is worsened because eavesdroppers can overhear the information in public places
Solution Approach 1:
The patent introduces an intermediary translation layer between the user's input and the IVR system's processing. Instead of directly transmitting sensitive information, the system uses a dictionary-based substitution mechanism where sensitive terms are replaced with predefined code words or phrases. This intermediary layer masks the actual confidential information while preserving the ability to process the intended command, thereby maintaining ease of operation while improving security against eavesdropping.
2Object-affected harmful factors
If DTMF keys are pressed to enter confidential information, then the security is improved compared to speech input, but the ease of operation is worsened and spy risk increases
Solution Approach 1:
The patent replaces the mechanical DTMF key pressing system with a voice-based input system that uses natural language or code words. This substitution eliminates the need for physical keypad interaction, improving ease of operation. Simultaneously, by using coded verbal responses instead of direct digit entry, the system maintains security while reducing the risk of visual observation or remote camera recording associated with physical key pressing.
3Productivity
If direct digit entry is used in an IVR system, then the productivity is improved, but the security is worsened due to potential interception of confidential information
Solution Approach 1:
The patent changes the parameter of information representation from direct numerical or textual input to coded substitution. By transforming the input format using a predefined dictionary where sensitive information is replaced with code words, the system maintains the efficiency of direct entry (productivity) while fundamentally altering the transmitted data's appearance. This parameter change ensures that intercepted communications do not reveal actual confidential information, thus improving security without sacrificing transaction speed.
Data Source
AI summary
A system and method that provides a user with the ability to transmit confidential information to an IVR system in a secure manner includes invoking an interactive voice response (IVR) routine, the IVR routine determining each of the digits in the sequence by making successive queries and/or digit guesses. A user of the voice communication device need only make an affirmative response or a negative response to each query or digit quess. Once determined, each of the digits in the sequence is sent to the destination system. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims.