Method and system for voice guided secure entry of private data in a public setting

• US 6,519,699 B2
• Filed: 08/07/1998
• Issued: 02/11/2003
• Est. Priority Date: 08/07/1998
• Status: Expired due to Term

• Current Assignee: Nuance Communications, Inc. (Microsoft Corporation)
• Original Assignee: International Business Machines Corporation
• Inventors: Lu, Qi (NMN), Teng, Shang-Hua
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): Seal, James
• Application Number:
  US09/130,594
• Publication Number:
  US 20010032316A1
• Time in Patent Office: 1,649 Days
• Field of Search: 713/182, 713/183, 380/28
• US Class Current: 713/182
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/493 Interactive information services, e.g. directory enquiries ; Arrangements therefor, e.g. interactive voice response [IVR] systems or voice portals

Abstract

Private user data is securely entered from a public location in a way that the private user data cannot be ascertained by observers. A voice agent generates vocal instructions for a user, instructing the user to enter response data. The vocal instructions are communicated to the user with a telephonic link, in a manner that is secure from observers of entry of the response data. The instructions implement an encryption function, which causes the private user data to be encrypted within the response data. The response data is entered by the user vocally into a telephone, or by pressing buttons on a telephone keypad, or by pressing keys on a computer keyboard. The response data entered by the user is received by a security agent, which ascertains the private user data from the response data, and which also determines the validity of the data.

Claims

1. A method for a user securely entering private user data using a system in public, the method comprising:

said system choosing an encryption function based on one or more of a security strength user for said encryption function, a life span of said encryption function, and a data entry to said user burden of said encryption function;

generating vocal instructions for entering response data, the vocal instructions implementing the encryption function;

communicating the vocal instructions for entering response data to the user, the vocal instructions being communicated in a manner to be secure from observers of entry of the response data by the user;

receiving the response data entered by the user, wherein said response data is entered vocally by said user;

ascertaining the private user data from the response data received from the user; and

determining the validity of the private user data.

2. The method of claim 1 wherein the exclusive-or encryption function is voice guided.

3. The method of claim 1 wherein the binary search is voice guided.

4. The method of claim 1 wherein the random replacement encryption function is voice guided.

5. The method of claim 1 wherein the random embedding encryption function is voice guided.

6. The method of claim 1 wherein receiving the response data comprises receiving electronic response data entered by the user.

7. A system for a user securely entering private user data in public, comprising:

means for generating vocal instructions for entering response data;

wherein said vocal instructions implement an encryption function based on one or more of a security strength needed for said encryption function chosen by said system, a life span of said encryption function, and a data entry burden to said user of said encryption function;

means for communicating the vocal instructions for entering response data to the user, the vocal instructions being communicated in a manner to be secure from observers of entry of the response data by the user;

means for receiving the response data entered by the user, wherein said response data is entered vocally by said user;

means for ascertaining the private user data from the response data received from the user; and

means for determining the validity of the private user data.

8. The system of claim 7 wherein the exclusive-or encryption function is voice guided.

9. The system of claim 7 wherein the binary search is voice guided.

10. The system of claim 7 wherein the random replacement encryption function is voice guided.

11. The system of claim 7 wherein the random embedding encryption function is voice guided.

12. The system of claim 7 wherein the means for generating vocal instructions for entering response data comprises an instruction producer and an audio generator.

13. The system of claim 7 wherein the means for communicating the vocal instructions to the user comprises a telephonic communication link.

14. The system of claim 7 wherein the means for receiving the response data comprises means for receiving vocal response data entered by the user.

15. The system of claim 7 wherein the means for receiving the response data comprises means for receiving electronic response data entered by the user.

16. The system of claim 7, further comprising a service provider for providing services to the user if the private user data is determined to be valid.

17. A system for a user securely entering private user data in public, comprising:

a voice agent configured to generate vocal instructions implementing an encryption function for entering response data based on one or more of a security strength needed for said encryption function chosen by said system, a life span of said encryption function, and a data entry burden to said user of said encryption function;

a telephonic communication link configured to communicate the vocal instructions for entering response data to the user, the vocal instructions being communicated in a manner to be secure from observers of entry of the response data by the user;

a security agent configured to receive the response data entered by the user, ascertain the private user data from the response data, and determine the validity of the private user data, wherein said response data is entered vocally by said user; and

a wherein said service provider configured to provide services to the user if the private user data is determined to be valid;

providing services to the user if the private user data is determined to be valid.

18. An article of manufacture comprising a data storage medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus to perform a method for a user securely entering private user data using a system in public, the method comprising:

said system choosing an encryption function based on one or more of a security strength needed for said encryption function, a life span of said encryption function, and a data entry burden to said user of said encryption function;

generating vocal instructions for entering response data, the vocal instructions implementing the encryption function;

communicating the vocal instructions for entering response data to the user over a communications link that is secure from observers of entry of the response data by the user;

receiving the response data entered by the user, wherein said response data is entered vocally by said user,

ascertaining the private user data from the response data received from the user; and

determining the validity of the private user data;

p1 providing services to the user if the private user data is determined to be valid.

19. The article of manufacture of claim 18 wherein the exclusive-or encryption function is voice guided.

20. The article of manufacture of claim 18 wherein the binary search is voice guided.

21. The article of manufacture of claim 18 wherein the random replacement encryption function is voice guided.

22. The article of manufacture of claim 18 wherein the random embedding encryption function is voice guided.

23. The article of manufacture of claim 18 wherein receiving the response data comprises receiving vocal response data entered by the user.