Secure services

• US 20030046556A1
• Filed: 08/14/2002
• Published: 03/06/2003
• Est. Priority Date: 03/14/2000
• Status: Abandoned Application

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Attwater, David J, Fisher, John S, Marsh, Paul FR
• Application Number:
  US10/203,823
• Publication Number:
  US 20030046556A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G10L 15/193 Formal grammars, e.g. finite state automata, context free grammars or word networks
• CPC Class Codes: G10L 15/26 Speech to text systems G10L15/08 takes precedence

Abstract

A security code, for use as a PIN (personal identification number) in gaining access to a secure service, such as a banking application, is assigned by selecting natural language words from different sets of words of different parts of speech. For example one set may comprise adjectives, another participles, another nouns. The selected words are concatenated in a predetermined sequence, e.g. adjective-participle-noun, to provide a memorable phrase conforming to the grammer of the natural language. The code may be used via a speech recognition interface and via other channels.

Claims

1. A method of assigning a security code comprising

selecting a token from each of a plurality of sets of tokens and concatenating the said tokens to form a sequence for use as the security code,

storing a record of the sequence and of the identity of the party associated with the said security code, and

issuing the said sequence to the party,

characterised in that the tokens are natural language words and in that words for different positions in the sequence are selected from different respective sets of words, the different sets comprising words of different respective parts of speech, whereby the sequence constitutes a phrase conforming to the grammar of the said natural language.

2. A method according to claim 1, including associating a different number with each word in each set, and issuing to the party both a sequence of natural language words and the corresponding sequence of numbers.

3. A method according to claim 1 or 2, in which each word in a respective set has a different initial letter.

4. A method of operating a secure service comprising

a) receiving from a user a security code,

b) verifying the security code, and

c) executing a transaction with the user

characterised in that the security code comprises a sequence of natural language words and in that words for different positions in the sequence are selected from different respective sets of words, the different sets comprising words of different respective parts of speech, whereby the sequence constitutes a phrase conforming to the grammar of the said natural language.

5. A method according to claim 4, in which the step of receiving from the user the security code includes receiving a spoken security code at a speech recognition device pre-programmed with a recognition grammar comprising at least the said sets of natural language words.

6. A method according to claim 4 or 5, in which the secure service includes both a text interface and a speech interface, the method including receiving some security codes and executing some transactions via the text interface, and receiving other security codes and executing other transactions via the speech interface.

7. A method according to claim 5 or 6, in which the step of verifying the security code includes communicating to the user the words recognised by the speech recognition device and only when the user confirms the security code then communicating the security code to a verification application arranged to compare the security code with a record of security codes and user identities.