Systems and methods for authenticating interactive voice response systems to callers
First Claim
Patent Images
1. A system for providing interactive voice response (IVR) to a user who has established an interactive communication connection with a trusted called party;
- said system comprising;
a prompt controller operative for providing voice prompts to the user, said voice prompts comprising an initial identification prompt soliciting data from said user, said solicited data identifying said user to said trusted called party;
said controller operative for, after the user has been identified providing the user a destination validation voice prompt, said destination validation voice prompt generated based upon said data solicited by the initial identification prompt and validating the trusted called party to the user;
said controller further operative for, after the trusted called party has been validated, providing an identification completion prompt soliciting additional data from said user, said solicited additional data validating the user to the trusted called party.
1 Assignment
0 Petitions
Accused Products
Abstract
By incorporating into the voice prompt response at least one item of private information, the caller knows that the IVR system providing the response is controlled by the trusted institution. Thus, when the caller does not hear the expected response, the caller is alerted to the fact that someone is masquerading as the trustworthy entity and the caller can then refuse to provide the desired information.
33 Citations
20 Claims
-
1. A system for providing interactive voice response (IVR) to a user who has established an interactive communication connection with a trusted called party;
- said system comprising;
a prompt controller operative for providing voice prompts to the user, said voice prompts comprising an initial identification prompt soliciting data from said user, said solicited data identifying said user to said trusted called party; said controller operative for, after the user has been identified providing the user a destination validation voice prompt, said destination validation voice prompt generated based upon said data solicited by the initial identification prompt and validating the trusted called party to the user; said controller further operative for, after the trusted called party has been validated, providing an identification completion prompt soliciting additional data from said user, said solicited additional data validating the user to the trusted called party. - View Dependent Claims (2, 3, 4, 19)
- said system comprising;
-
5. A method for operating an IVR comprising:
-
routing to an IVR system connections from calling users to a specific institution; inserting voice prompts by said IVR system on each routed connection, said voice prompts comprising a sequence of user validation voice prompts requesting user specific data from a calling user, said user specific data pertaining to said specific institution and allowing said specific institution to validate the calling user; and during the sequence of user validation voice prompts, inserting a destination validation voice prompt calculated to allow the calling user to verify that a connection has been established to an IVR properly associated with said specific institution. - View Dependent Claims (6, 7, 8, 9)
-
-
10. A system providing IVR services to a user calling an institution, comprising a processor and a memory, the memory being encoded with an application program comprising instructions executable by the processor, said program comprising:
-
code for prompting a calling user to provide a first identity token; code for verifying that a provided first identity token is valid; and code for providing a verification voice prompt to said calling user, said verification voice prompt containing information particular to said calling user and to said called institution sufficient for allowing said calling user to verify that said calling user is communicating with an institution called by said calling user; wherein said verification prompt occurs after initial identification of said calling user but prior to said calling user being asked for information usable in completing said identification. - View Dependent Claims (11, 12, 13, 14, 20)
-
-
15. A system for providing verification to a user calling an institution;
- said system comprising;
means for prompting a calling user to provide a first identity token; means for verifying that a provided first identity token is valid; means for providing a verification voice prompt to said calling user, said voice prompt containing information particular to said calling user and to said called institution sufficient for allowing said calling user to verify that said calling user is communicating with an institution called by said calling user; and means for controlling an exchange of information provided by said calling user with calling user specific data controlled by said called institution. - View Dependent Claims (16, 17, 18)
- said system comprising;
Specification