Multi-factor biometric authentication

• US 20070055517A1
• Filed: 08/30/2005
• Published: 03/08/2007
• Est. Priority Date: 08/30/2005
• Status: Abandoned Application

• Current Assignee: Authentivox
• Original Assignee: Authentivox
• Inventors: Spector, Brian
• Application Number:
  US11/217,074
• Publication Number:
  US 20070055517A1
• Time in Patent Office: Days
• US Class Current: 704/246
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G10L 17/24 the user being prompted to utter a password or a predefined phrase

Abstract

A method for verifying a person'"'"'s identity in order to gain access to electronic data, a data network, a physical location, or enable a commercial transaction. A request for identity verification is processed over a data network and the system is initiated which (i) transmits a disposable pass phrase over a data network to the user, (ii) prompts the user to vocalize the disposable pass phrase, a pass phrase, and user id, (iii) compares the recited speech of the user to the stored voiceprint of the user, the stored pass phrase and id of the user, and the generated disposable pass phrase, then (iv) issues a token or signal that represents whether the user was verified or not.

Claims

1. A method for authenticating a requesting user as a recognized user, the method comprising:

receiving a request to authenticate the requesting user as the recognized user;

generating a disposable pass phrase in response to the request;

sending the disposable pass phrase to the requesting user;

receiving an audio signal in response to the disposable pass phrase;

determining whether the audio signal represents a voice of the recognized user by comparing the audio signal to a control audio signal that represents the disposable pass phrase spoken by the recognized user; and

authenticating the requesting user as the recognized user upon a condition in which determining determines that the audio signal represents a voice of the recognized user.

2. The method of claim 1 wherein the disposable pass phrase is a password.

3. The method of claim 1 wherein generating the disposable pass phrase includes:

selecting one or more elements from a collection of two or more elements in a randomized manner; and

combining the selected elements to form the disposable pass phrase so as to include the selected elements.

4. The method of claim 3 wherein the control audio signal is a combination of prerecorded spoken elements of the recognized user, wherein the prerecorded spoken elements correspond to the selected elements of the disposable pass phrase.

5. The method of claim 3 wherein one or more of the elements of the collection correspond to respective letters of an alphabet.

6. The method of claim 3 wherein one or more of the elements of the collection correspond to respective numerals.

7. The method of claim 3 wherein determining comprises:

determining whether the audio signal represents the voice of the recognized user speaking the disposable pass phrase.

8. The method of claim 1 further comprising:

receiving an account identifying audio signal;

determining whether the account identifying audio signal represents the voice of the recognized user speaking a predetermined account identifier of the recognized user; and

authenticating the requesting as the recognized user upon both (i) the condition in which the audio signal represents the voice of the recognized user determines and (ii) a condition in which the account identifying audio signal represents the voice of the user speaking the predetermined account identifier.

9. The method of claim 8 further comprising:

receiving an account pass phrase audio signal;

determining whether the account pass phrase audio signal represents the voice of the recognized user speaking a predetermined account pass phrase of the recognized user; and

authenticating the requesting as the recognized user upon (i) the condition in which the audio signal represents the voice of the recognized user determines, (ii) the condition in which the account identifying audio signal represents the voice of the user speaking the predetermined account identifier, and (iii) a condition in which the account pass phrase audio signal represents the voice of the user speaking the predetermined account pass phrase.

10. The method of claim 1 wherein receiving the audio signal comprises:

initiating voice communications with the requesting user to establish a voice channel with the requesting user;

receiving the audio signal through the voice channel.

11. The method of claim 10 wherein initiating comprises initiating voice communications with the requesting user at a predetermined voice communications address associated with the recognized user.

12. The method of claim 11 wherein the voice communications address is a telephone number.

13. The method of claim 11 wherein the voice communications address is a user identifier of a voice-communication-enabled instant messaging system.

14. The method of claim 1 further comprising:

sending a sponsored audio message to the requesting user.

15. The method of claim 14 wherein the sponsored audio message is an audio branded message.

16. The method of claim 14 wherein sending the sponsored audio message is performed after authenticating the requesting user as the recognized user.

17. The method of claim 14 further comprising:

connecting the requesting user with a sponsor of the sponsored audio message.

18. The method of claim 14 wherein connecting the requesting user with a sponsor of the sponsored audio message is performed in response to a user-generated signal representing consent of the requesting user to the connecting.

19. The method of claim 14 wherein connecting comprises:

opening a voice communications channel between the requesting user and the sponsor.

20. A computer readable medium useful in association with a computer which includes a processor and a memory, the computer readable medium including computer instructions which are configured to cause the computer to authenticate a requesting user as a recognized user by:

receiving a request to authenticate the requesting user as the recognized user;

generating a disposable pass phrase in response to the request;

sending the disposable pass phrase to the requesting user;

receiving an audio signal in response to the disposable pass phrase;

determining whether the audio signal represents a voice of the recognized user by comparing the audio signal to a control audio signal that represents the disposable pass phrase spoken by the recognized user; and

authenticating the requesting user as the recognized user upon a condition in which determining determines that the audio signal represents a voice of the recognized user.

21. The computer readable medium of claim 20 wherein the disposable pass phrase is a password.

22. The computer readable medium of claim 20 wherein generating the disposable pass phrase includes:

selecting one or more elements from a collection of two or more elements in a randomized manner; and

combining the selected elements to form the disposable pass phrase so as to include the selected elements.

23. The computer readable medium of claim 22 wherein the control audio signal is a combination of prerecorded spoken elements of the recognized user, wherein the prerecorded spoken elements correspond to the selected elements of the disposable pass phrase.

24. The computer readable medium of claim 22 wherein one or more of the elements of the collection correspond to respective letters of an alphabet.

25. The computer readable medium of claim 22 wherein one or more of the elements of the collection correspond to respective numerals.

26. The computer readable medium of claim 22 wherein determining comprises:

determining whether the audio signal represents the voice of the recognized user speaking the disposable pass phrase.

27. The computer readable medium of claim 20 wherein the computer instructions are configured to cause the computer to authenticate a requesting user as a recognized user by also:

receiving an account identifying audio signal;

determining whether the account identifying audio signal represents the voice of the recognized user speaking a predetermined account identifier of the recognized user; and

authenticating the requesting as the recognized user upon both (i) the condition in which the audio signal represents the voice of the recognized user determines and (ii) a condition in which the account identifying audio signal represents the voice of the user speaking the predetermined account identifier.

28. The computer readable medium of claim 27 wherein the computer instructions are configured to cause the computer to authenticate a requesting user as a recognized user by also:

receiving an account pass phrase audio signal;

determining whether the account pass phrase audio signal represents the voice of the recognized user speaking a predetermined account pass phrase of the recognized user; and

authenticating the requesting as the recognized user upon (i) the condition in which the audio signal represents the voice of the recognized user determines, (ii) the condition in which the account identifying audio signal represents the voice of the user speaking the predetermined account identifier, and (iii) a condition in which the account pass phrase audio signal represents the voice of the user speaking the predetermined account pass phrase.

29. The computer readable medium of claim 20 wherein receiving the audio signal comprises:

initiating voice communications with the requesting user to establish a voice channel with the requesting user;

receiving the audio signal through the voice channel.

30. The computer readable medium of claim 29 wherein initiating comprises initiating voice communications with the requesting user at a predetermined voice communications address associated with the recognized user.

31. The computer readable medium of claim 30 wherein the voice communications address is a telephone number.

32. The computer readable medium of claim 30 wherein the voice communications address is a user identifier of a voice-communication-enabled instant messaging system.

33. The computer readable medium of claim 20 wherein the computer instructions are configured to cause the computer to authenticate a requesting user as a recognized user by also:

sending a sponsored audio message to the requesting user.

34. The computer readable medium of claim 33 wherein the sponsored audio message is an audio branded message.

35. The computer readable medium of claim 33 wherein sending the sponsored audio message is performed after authenticating the requesting user as the recognized user.

36. The computer readable medium of claim 33 wherein the computer instructions are configured to cause the computer to authenticate a requesting user as a recognized user by also:

connecting the requesting user with a sponsor of the sponsored audio message.

37. The computer readable medium of claim 33 wherein connecting the requesting user with a sponsor of the sponsored audio message is performed in response to a user-generated signal representing consent of the requesting user to the connecting.

38. The computer readable medium of claim 33 wherein connecting comprises:

opening a voice communications channel between the requesting user and the sponsor.

39. A computer system comprising:

a processor;

a memory operatively coupled to the processor; and

an authentication module (i) which executes in the processor from the memory and (ii) which, when executed by the processor, causes the computer to authenticate a requesting user as a recognized user by;

receiving a request to authenticate the requesting user as the recognized user;

generating a disposable pass phrase in response to the request;

sending the disposable pass phrase to the requesting user;

receiving an audio signal in response to the disposable pass phrase;

determining whether the audio signal represents a voice of the recognized user by comparing the audio signal to a control audio signal that represents the disposable pass phrase spoken by the recognized user; and

authenticating the requesting user as the recognized user upon a condition in which determining determines that the audio signal represents a voice of the recognized user.

40. The computer system of claim 39 wherein the disposable pass phrase is a password.

41. The computer system of claim 39 wherein generating the disposable pass phrase includes:

selecting one or more elements from a collection of two or more elements in a randomized manner; and

combining the selected elements to form the disposable pass phrase so as to include the selected elements.

42. The computer system of claim 41 wherein the control audio signal is a combination of prerecorded spoken elements of the recognized user, wherein the prerecorded spoken elements correspond to the selected elements of the disposable pass phrase.

43. The computer system of claim 41 wherein one or more of the elements of the collection correspond to respective letters of an alphabet.

44. The computer system of claim 41 wherein one or more of the elements of the collection correspond to respective numerals.

45. The computer system of claim 41 wherein determining comprises:

determining whether the audio signal represents the voice of the recognized user speaking the disposable pass phrase.

46. The computer system of claim 39 wherein the authentication module is configured to cause the computer to authenticate a requesting user as a recognized user by also:

receiving an account identifying audio signal;

determining whether the account identifying audio signal represents the voice of the recognized user speaking a predetermined account identifier of the recognized user; and

authenticating the requesting as the recognized user upon both (i) the condition in which the audio signal represents the voice of the recognized user determines and (ii) a condition in which the account identifying audio signal represents the voice of the user speaking the predetermined account identifier.

47. The computer system of claim 46 wherein the authentication module is configured to cause the computer to authenticate a requesting user as a recognized user by also:

receiving an account pass phrase audio signal;

determining whether the account pass phrase audio signal represents the voice of the recognized user speaking a predetermined account pass phrase of the recognized user; and

authenticating the requesting as the recognized user upon (i) the condition in which the audio signal represents the voice of the recognized user determines, (ii) the condition in which the account identifying audio signal represents the voice of the user speaking the predetermined account identifier, and (iii) a condition in which the account pass phrase audio signal represents the voice of the user speaking the predetermined account pass phrase.

48. The computer system of claim 39 wherein receiving the audio signal comprises:

initiating voice communications with the requesting user to establish a voice channel with the requesting user;

receiving the audio signal through the voice channel.

49. The computer system of claim 48 wherein initiating comprises initiating voice communications with the requesting user at a predetermined voice communications address associated with the recognized user.

50. The computer system of claim 49 wherein the voice communications address is a telephone number.

51. The computer system of claim 49 wherein the voice communications address is a user identifier of a voice-communication-enabled instant messaging system.

52. The computer system of claim 39 wherein the authentication module is configured to cause the computer to authenticate a requesting user as a recognized user by also:

sending a sponsored audio message to the requesting user.

53. The computer system of claim 52 wherein the sponsored audio message is an audio branded message.

54. The computer system of claim 52 wherein sending the sponsored audio message is performed after authenticating the requesting user as the recognized user.

55. The computer system of claim 52 wherein the authentication module is configured to cause the computer to authenticate a requesting user as a recognized user by also:

connecting the requesting user with a sponsor of the sponsored audio message.

56. The computer system of claim 52 wherein connecting the requesting user with a sponsor of the sponsored audio message is performed in response to a user-generated signal representing consent of the requesting user to the connecting.

57. The computer system of claim 52 wherein connecting comprises:

opening a voice communications channel between the requesting user and the sponsor.