Step-Up Authentication Using Spoken Passphrases
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conversational ambient computing lacks effective authentication methods, as voice-print technologies are not mature enough, and spoken alphanumeric passwords provide inconsistent security, necessitating an alternative means to verify user authorization for actions.
Innovation Solution
Implementing step-up authentication using spoken passphrases, where a secret passphrase is generated from a dictionary of easy-to-pronounce and distinguishable words, transmitted via a separate communication channel, and validated by the conversational interface after user submission, ensuring secure authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If voice-print technologies are used for authentication, then authentication capability is provided, but reliability is insufficient due to immaturity of the technology
Solution Approach 1:
The patent introduces a passphrase as an intermediary authentication element that bridges the conversational interface and secure authorization. The passphrase is transmitted through a separate communication channel (SMS, email, push notification) rather than being spoken directly in the conversational interface, eliminating the reliability issues of voice-print technology while maintaining authentication capability.
2Adaptability or versatility
If a spoken PIN is used for authorization, then authentication is provided, but security deteriorates because it can be easily overheard and compromised
Solution Approach 1:
The patent uses a passphrase transmitted through a separate communication channel as an intermediary, replacing the spoken PIN. This intermediary mechanism delivers the authentication credential through a different medium (text message, email, push notification) that cannot be overheard, thereby maintaining authorization capability while eliminating eavesdropping vulnerability.
Solution Approach 2:
The patent transitions the authentication from the audio dimension (spoken PIN in conversational interface) to the text/digital dimension (passphrase delivered via SMS, email, or push notification). This dimensional change moves the authentication out of the audible realm entirely, preventing eavesdropping while preserving the authorization function.
3Adaptability or versatility
If alphanumeric passwords are used for voice interfaces, then authentication is provided, but measurement precision deteriorates due to inconsistent voice recognition results
Solution Approach 1:
The patent introduces a passphrase as an intermediary that eliminates the need for voice recognition of complex alphanumeric sequences. The passphrase is delivered through a separate communication channel and simply needs to be spoken as a single coherent phrase, bypassing the voice recognition inconsistency problem while maintaining authentication functionality.
Data Source
AI summary
A back-end server system for step-up authentication for conversational interfaces using spoken passphrases receive a conversational request for an action which requires step-up authorization; respond to the user through conversational artificial intelligence (AI) warning the user that an additional step is required; transmit, over a dedicated communication channel to the user and different than the conversational interface, a secret passphrase generated using a spoken passphrase dictionary; receive, by the conversational interface, a spoken submission from the user in response to the warning; confirm validity of the received spoken submission by comparing the spoken submission to the passphrase; and in response to confirmation of the spoken submission, authorize the requested action.