Systems and methods for using voiceprints to generate passwords on mobile devices

• US 8,499,342 B1
• Filed: 09/09/2008
• Issued: 07/30/2013
• Est. Priority Date: 09/09/2008
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Macwan, Sanjay
• Primary Examiner(s): LE, CHAU D
• Application Number:
  US12/207,207
• Time in Patent Office: 1,785 Days
• Field of Search: 726 5- 7, 713/168, 713/186, 455410-411
• US Class Current: 726/7
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Systems for verifying a user'"'"'s voiceprint and generating a password for use at one or more application servers are disclosed. The systems can reside on a network or on a device. The application servers can be in communication with one or more devices or networks. Several methods for verifying the identity of the user using possession-based, knowledge-based, location-based, and biometric access control are disclosed.

Claims

1. A method, comprising:

receiving, by a voiceprint password system, master voice data associated with a user of an application server;

storing the master voice data in a storage device associated with the voiceprint password system;

receiving master device data associated with the user;

storing the master device data in the storage device;

associating the master device data with the user, wherein the master device data comprises data that identifies the device used by the user when submitting the master voice data;

receiving, by the voiceprint password system, a request from an entity for a password;

obtaining test device data associated with the entity requesting the password;

comparing the test device data with the master device data to determine whether the test device data substantially matches the master device data, wherein the test device data comprises data that identifies the device used by the entity requesting the password to access the voiceprint password system; and

responsive to determining that the test device data substantially matches the master device data;

obtaining sampled voice data from the entity requesting the password;

comparing the sampled voice data to the master voice data to determine whether the sampled voice data and the master voice data substantially match;

responsive to determining that the sampled voice data and the master voice data substantially match, determining, by the voiceprint password system, that the entity requesting the password should be authenticated; and

generating the password requested by the entity responsive to the voiceprint password system determining that the entity requesting the password should be authenticated.

2. The method of claim 1, further comprising transmitting the password to the application server.

3. The method of claim 1, further comprising transmitting the password to the entity requesting the password.

4. The method of claim 1, further comprising:

receiving master authentication data associated with the user;

storing the master authentication data in the storage device; and

associating the master authentication data with the user, wherein the master authentication data comprises at least one of a password and user identification.

5. The method of claim 4, further comprising:

challenging the entity requesting the password for test authentication data;

receiving the test authentication data; and

comparing the test authentication data with the master authentication data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated comprises determining that the master authentication data and the test authentication data substantially match.

6. The method of claim 1, further comprising:

receiving master location data from a node of a communications network, wherein the master location data comprises data that identifies an expected location of a communications device associated with the user;

receiving test location data, wherein the test location data comprises data that identifies the location of a communications device associated with the entity requesting the password;

comparing the test location data with the master location data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated is based on the location of the communications device associated with the entity requesting the password and the expected location of the communications device associated with the user.

7. A voiceprint password system, comprising:

a processor;

and

a memory in communication with the processor, the memory having stored thereon instructions, executable by the processor, to cause the processor to perform operations comprising;

receiving master voice data associated with a user of an application server;

storing the master voice data in the memory;

receiving master device data associated with the user;

storing the master device data in the storage device;

associating the master device data with the user, wherein the master device data comprises data that identifies the device used by the user when submitting the master voice data;

receiving a request from an entity for a password;

obtaining test device data associated with the entity requesting the password;

comparing the test device data with the master device data to determine whether the test device data substantially matches the master device data, wherein the test device data comprises data that identifies the device used by the entity requesting the password to access the voiceprint password system; and

responsive to determining that the test device data substantially matches the master device data;

obtaining sampled voice data from the entity requesting the password;

comparing the sampled voice data to the master voice data to determine whether he sampled voice data and the master voice data substantially match;

responsive to determining that the sampled voice data and the master voice data substantially match, determining that the entity requesting the password should be authenticated; and

generating the password requested by the entity responsive to determining that the entity requesting the password should be authenticated.

8. The voiceprint password system of claim 7, wherein the instructions further comprise instructions executable by the processor to cause the processor to initiate transmission of the password to the application server.

9. The voiceprint password system of claim 7, wherein the instructions further comprise instructions executable by the processor to cause the processor to perform operations comprising:

receiving master authentication data associated with the user;

storing the master authentication data in the memory, wherein the master authentication data comprises at least one of a password and user identification.

10. The voiceprint password system of claim 9, wherein the instructions further comprise instructions executable by the processor to cause the processor to perform operations comprising:

challenging the entity requesting the password for test authentication data;

receiving the test authentication data; and

comparing the test authentication data with the master authentication data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated comprises determining that the master authentication data and the test authentication data substantially match.

11. The voiceprint password system of claim 7, wherein the instructions further comprise instructions, executable by the processor, to cause the processor to perform operations comprising:

receiving master location data from a node of a communications network, wherein the master location data comprises data that identifies an expected location of a communications device associated with the user;

receiving test location data, wherein the test location data comprises data that identifies the location of a communications device associated with the entity requesting the password;

comparing the test location data with the master location data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated is based on the location of the communications device associated with the entity requesting the password and the expected location of the communications device associated with the user.

12. A mobile communications device, comprising:

a processor;

and

a memory in communication with the processor, the memory having stored thereon instructions, executable by the processor, to cause the processor to perform operations comprising;

receiving master voice data associated with a user of an application server;

storing the master voice data in the memory;

receiving master device data associated with the user;

storing the master device data in the storage device;

associating the master device data with the user, wherein the master device data comprises data that identifies the device used by the user when submitting the master voice data;

receiving a request from an entity for a password;

obtaining test device data associated with the entity requesting the password;

comparing the test device data with the master device data to determine whether the test device data substantially matches the master device data, wherein the test device data comprises data that identifies the device used by the entity requesting the password to access the voiceprint password system; and

responsive to the test device data substantially matching the master device data;

obtaining sampled voice data from the entity requesting the password;

comparing the sampled voice data to the master voice data to determine whether the sampled voice data and the master voice data substantially match;

responsive to the sampled voice data and the master voice data substantially matching, determining that the entity requesting the password should be authenticated; and

generate generating the password requested by the entity responsive to determining that the entity requesting the password should be authenticated.

13. The mobile communications device of claim 12, wherein the instructions further comprise instructions executable by the processor to cause the processor to initiate transmission of the password to the application server.

14. The mobile communications device of claim 12, wherein the instructions further comprise instructions executable by the processor to cause the processor to perform operations comprising:

receiving master authentication data associated with the user;

storing the master authentication data in the memory, wherein the master authentication data comprises at least one of a password and user identification.

15. The mobile communications device of claim 14, wherein the instructions further comprise instructions executable by the processor to cause the processor to perform operations comprising:

challenging the entity requesting the password for test authentication data;

receiving the test authentication data; and

comparing the test authentication data with the master authentication data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated comprises determining that the master authentication data and the test authentication data substantially match.

16. The mobile communications device of claim 12, wherein the instructions further comprise instructions, executable by the processor, to cause the processor to perform operations comprising:

receiving master location data from a node of a communications network, wherein the master location data comprises data that identifies an expected location of a communications device associated with the user;

receiving test location data, wherein the test location data comprises data that identifies the location of a communications device associated with the entity requesting the password;

comparing the test location data with the master location data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated is based on the location of the communications device associated with the entity requesting the password and the expected location of the communications device associated with the user.

17. A non-transitory computer readable medium comprising computer readable instructions that, when executed by a processor, cause the processor to perform operations comprising:

receiving master voice data associated with a user of an application server;

storing the master voice data in a storage device;

receiving master device data associated with the user;

storing the master device data in the storage device;

associating the master device data with the user, wherein the master device data comprises data that identifies the device used by the user when submitting the master voice data;

receiving a request from an entity for a password;

obtaining test device data associated with the entity requesting the password;

comparing the test device data with the master device data to determine whether the test device data substantially matches the master device data, wherein the test device data comprises data that identifies the device used by the entity requesting the password to access the voiceprint password system; and

responsive to determining that the test device data substantially matches the master device data;

obtaining sampled voice data from the entity requesting the password;

comparing the sampled voice data to the master voice data to determine whether the sampled voice data and the master voice data substantially match;

responsive to determining that the sampled voice data and the master voice data substantially match, determining that the entity requesting the password should be authenticated; and

generating the password requested by the entity responsive to the voiceprint password system determining that the entity requesting the password should be authenticated.

18. The non-transitory computer readable medium of claim 17, wherein the instructions further comprise instructions that, when executed by the processor, cause the processor to perform operations comprising:

receiving master authentication data associated with the user;

storing the master authentication data in the memory, wherein the master authentication data comprises at least one of a password and a user identification;

challenging the entity requesting the password for test authentication data;

receiving the test authentication data; and

comparing the test authentication data with the master authentication data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated comprises determining that the master authentication data and the test authentication data match.

19. The non-transitory computer readable medium of claim 17, further comprising computer readable instructions which, when executed by the processor, cause the processor to perform operations comprising:

receiving master location data from a node of a communications network, wherein the master location data comprises data that identifies an expected location of a communications device associated with the user;

receiving test location data, wherein the test location data comprises data that identifies the location of a communications device associated with the entity requesting the password;

comparing the test location data with the master location data to determine whether the entity requesting the password should be authenticated, wherein determining that the entity requesting the password should be authenticated is based on the location of the communications device associated with the entity requesting the password and the expected location of the communications device associated with the user.