Voice Authentication Prompts for Deepfake-Resistant Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Voice-based authentication systems are vulnerable to deep fake attacks, allowing malicious actors to impersonate users and gain unauthorized access.

Innovation Solution

A computing platform utilizing a generative AI model generates voice-based authentication prompts, which are stored on a distributed ledger, and scores user responses to authenticate identity, initiating security actions if the score fails to meet a threshold.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional voice-based authentication is used, then user verification is simple and convenient, but the system becomes vulnerable to deep fake attacks

Engineering Contradiction:
Improveauthentication convenienceVSAvoidsecurity against deep fake attacks
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements dynamic authentication by generating different voice prompts on-demand rather than using static pre-recorded voices. The system dynamically creates unique authentication challenges each time, preventing deep fake attacks that rely on recording and replaying fixed voice patterns. This dynamic approach maintains ease of use while significantly improving security.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system performs preliminary voice analysis during the authentication process by evaluating multiple voice characteristics (pitch, tone, timbre, speech patterns) before making an authentication decision. This preliminary assessment of various voice parameters allows the system to detect deep fake attempts before granting access, balancing security requirements with user convenience.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If voice prompts are changed frequently to prevent deep fake attacks, then security is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity against deep fake attacksVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses the user's own voice characteristics and speech patterns as the authentication mechanism, eliminating the need for complex external verification systems. By analyzing intrinsic voice properties that are difficult to replicate, the system achieves high security without requiring complex additional hardware or multi-step verification processes, thus maintaining simplicity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent changes multiple voice parameters simultaneously (pitch, tone, timbre, speech rate, pausing patterns) to create dynamic authentication challenges. By varying these acoustic parameters rather than simply changing prompts frequently, the system achieves security against deep fake attacks while maintaining relatively simple system architecture, as the changes occur in the analysis domain rather than requiring complex system reconfiguration.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20260023837A1Deep Fake Attack Prevention for Voice Based Authentication Leveraging Generative Artificial Intelligence (AI) and Distributed Ledger Technology
Publication Date: 2026.01.22 BANK OF AMERICA CORP
  • US20260023837A1 patent drawing
  • US20260023837A1 patent drawing
  • US20260023837A1 patent drawing

AI summary

A computing platform may generate, using a generative AI model, voice based authentication prompts corresponding to a user. Upon receiving a registration request from the user, the computing platform may identify the voice based authentication prompts for the user. The computing platform may send, to a first computing device of the user, the voice based authentication prompts and may receive/store voice based authentication information corresponding to the voice based audio inputs. Based on receiving an access request, the computing platform may send the plurality of voice based authentication prompts, and may receive, from a second computing device, additional voice based audio inputs. The computing platform may score, based on the voice based authentication information, the additional voice based audio inputs. The computing platform may compare the score to a threshold. Based on identifying that the score fails to meet the threshold, the computing platform may initiate security actions.