Voice-Enabled Device Verification Against Recorded Voice Commands
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing voice-enabled devices lack robust mechanisms to verify user identity, making them vulnerable to unauthorized voice commands, such as those from recorded voices, which can execute functions like purchases or security changes.
Innovation Solution
A dual-layer verification system where voice-enabled devices perform primary authentication through natural language processing and voice recognition, followed by secondary authentication using biometric inputs or passcodes on associated user devices via short-range signals, and further verification through long-range communications with computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If voice recognition and natural language processing are used for user verification, then ease of operation is improved, but reliability is worsened due to vulnerability to recorded voice attacks
Solution Approach 1:
The verification process is segmented into multiple independent layers: primary voice-based verification, secondary device-based verification, and tertiary computing device verification. Each layer operates independently and contributes to the overall authentication decision, preventing single-point failures and recorded voice attacks.
Solution Approach 2:
A user device (smartphone, tablet, or computer) acts as an intermediary between the voice-enabled device and the user. The intermediary device receives verification requests, performs additional authentication checks (biometric, passcode, authenticated message reply), and relays verification results back to the voice-enabled device.
2Reliability
If multiple layers of verification are implemented, then reliability is improved, but device complexity is worsened
Solution Approach 1:
The user device performs secondary verification autonomously without requiring direct user intervention for each step. The computing device automatically sends verification signals, receives responses, and makes authentication decisions based on pre-configured criteria, reducing system complexity while maintaining high reliability.
Solution Approach 2:
The verification system is designed to work across multiple device types (smartphones, tablets, computers) and multiple verification methods (biometric, passcode, authenticated message reply). This universal approach allows the same core architecture to handle diverse verification scenarios, reducing overall system complexity.
3Reliability
If short-range and long-range communication signals are used for verification, then reliability is improved, but loss of time is worsened due to multiple communication rounds
Solution Approach 1:
User devices and computing devices are pre-configured with verification criteria, authentication methods, and decision rules before verification is needed. This preliminary setup eliminates the need for real-time complex decision-making during the verification process, reducing communication rounds and time delays.
Solution Approach 2:
The system allows skipping of certain verification layers under specific conditions. For example, if primary voice verification succeeds and the user is in a trusted location or time window, secondary verification may be skipped or expedited, reducing overall verification time while maintaining security.
Data Source
AI summary
Provided are methods and systems to verify user identity for voice enabled devices. A voice input can instruct a voice enabled device to perform a plurality of functions/services that require user verification. Primary user verification can be performed by associating voice characteristics of the voice input to a profile associated with a user/user device. A signal (e.g., a BLE beacon) can be sent to the user device that causes the user device to perform secondary user verification. The secondary user verification can be based on a biometric input, passcode verification, authenticated message reply, for example. Based on the secondary user verification, an operational command associated with the voice input can be executed.