Authentication techniques utilizing a computing device

• US 9,021,565 B2
• Filed: 10/13/2011
• Issued: 04/28/2015
• Est. Priority Date: 10/13/2011
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Novack, Brian, Andres, Robert J., Birkes, Jerry, Drake, Alton W. II, Toretti, Gary A., Zeljkovic, Ilija, Wilpon, Jay, Stent, Amanda Joy, Whitescarver, James, Garay, Juan A
• Primary Examiner(s): Patel, Ashok
• Assistant Examiner(s): GRACIA, GARY S
• Application Number:
  US13/272,926
• Publication Number:
  US 20130097682A1
• Time in Patent Office: 1,293 Days
• Field of Search: 726/7
• US Class Current: 726/7
• CPC Class Codes: G06F 3/167 Audio in a user interface, e.g. using voice commands for navigating, audio feedback
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A pre-registration procedure is utilized to create a user profile for a user of a multi-factor authentication (“MFA”) service. A client application installation procedure is utilized to install a client application on a computing device that is to be utilized as an authentication factor for the MFA service. A computing device enrollment procedure is utilized to enroll the computing device on which the client application was installed for the MFA service. A voice enrollment procedure is utilized to create a voice print for the user of the computing device that is to be utilized as an authentication factor for the MFA service. An authentication procedure is utilized to provide multi-factor authenticated access to a service, such as an online service that provides access to sensitive account information.

Claims

1. A non-transitory computer-readable storage medium comprising computer-executable instructions that, when executed by a computing device, cause the computing device to perform operations comprising:

establishing a data session with an authentication server;

receiving a sample phrase over the data session, the sample phrase comprising a challenge phrase comprising a rewording of a challenge question as a statement comprising a blank portion for an answer to the challenge question;

presenting a voiceprint matching interface on a display of the computing device, the voiceprint matching interface comprising;

text corresponding to the statement,

a request for the user to speak the statement and to speak the answer to the challenge question in the blank portion of the statement,

a first option that, when selected by the user, plays audio corresponding to the statement, and

a second option that, when selected by the user, initiates a recording via a microphone of the computing device to record the statement spoken by the user;

receiving a speech input in response to the request;

inserting a device-specific audio artifact in the speech input of the statement spoken by the user, the device-specific audio artifact being inserted in the speech input of the statement spoken by the user in accordance with an artifacting scheme that is known by the authentication server and that is changed periodically, wherein the device-specific audio artifact comprises a distinct characteristic comprising a type and a specification of the microphone used to record the statement by the user, and wherein the user is never made aware of the artifacting scheme; and

transmitting the speech input to the authentication server via the data session.

2. The non-transitory computer-readable storage medium of claim 1, wherein the operations further comprise:

receiving a notification comprising an indication of a service for which authentication is required;

presenting the notification on the display of the computing device; and

receiving an input to proceed;

wherein presenting the voiceprint matching interface comprises presenting the voiceprint matching interface in response to receiving the input to proceed, and wherein establishing the data session comprises establishing the data session in response to receiving the notification.

3. The non-transitory computer-readable storage medium of claim 2, wherein the operations further comprise:

presenting an authentication prompt requesting input of an authentication credential;

receiving an input of the authentication credential; and

sending the authentication credential to the authentication server.

4. The non-transitory computer-readable storage medium of claim 3, wherein the operations further comprise:

receiving a further sample phrase over the data session;

presenting a further voiceprint matching interface on the display of the computing device, the further voiceprint matching interface comprising a request for the user to speak the further sample phrase;

receiving a further speech input of the further sample phrase; and

transmitting the further speech input to the authentication server via the data session.

5. The non-transitory computer-readable storage medium of claim 1, wherein the operations further comprise receiving a message specifying that an authentication process is complete.

6. The non-transitory computer-readable storage medium of claim 1, wherein the challenge question and the challenge answer are provided by the user in a user profile created during a pre-registration procedure.

7. A method comprising:

establishing, by a computing device, a data session with an authentication server for authenticating a user to utilize a service;

receiving, by the computing device, a sample phrase over the data session;

presenting a voiceprint matching interface on a display of the computing device, the voiceprint matching interface comprising;

text corresponding to the sample phrase,

a request for the user to speak the sample phrase,

a first option that, when selected by the user, plays audio corresponding to the sample phrase, and

a second option that, when selected by the user, initiates a recording via a microphone of the computing device to record the sample phrase spoken by the user;

receiving, by the computing device, a speech input of the sample phrase;

inserting, by the computing device, a device-specific audio artifact in the speech input of the sample phrase spoken by the user, the device-specific audio artifact being inserted in the speech input of the sample phrase spoken by the user in accordance with an artifacting scheme that is known by the authentication server and that is changed periodically, wherein the device-specific audio artifact comprises a distinct characteristic comprising a type and a specification of the microphone used to record the statement by the user, and wherein the user is never made aware of the artifacting scheme; and

transmitting the speech input to the authentication server via the data session.

8. The method of claim 7, further comprising:

receiving a notification comprising an indication of a service for which authentication is required;

presenting the notification on the display of the computing device; and

receiving an input to proceed;

wherein presenting the voiceprint matching interface comprises presenting the voiceprint matching in response to receiving the input to proceed, and wherein establishing the data session comprises establishing the data session in response to receiving the notification.

9. The method of claim 8, further comprising:

presenting an authentication prompt requesting input of an authentication credential;

receiving an input of the authentication credential; and

sending the authentication credential to the authentication server.

10. The method of claim 9, further comprising:

receiving a further sample phrase over the data session;

presenting a further voiceprint matching interface on the display of the computing device, the further voiceprint matching interface comprising a request for the user to speak the further sample phrase;

receiving a further speech input of the further sample phrase; and

transmitting the further speech input to the authentication server via the data session.

11. The method of claim 7, further comprising receiving a message specifying that an authentication process is complete.

12. The method of claim 7, wherein the sample phrase is a voice passphrase provided by the user in a user profile created during a pre-registration procedure.

13. The method of claim 7, wherein the sample phrase comprises a challenge phrase comprising a rewording of a challenge question as a statement comprising a blank portion for an answer to the challenge question, wherein the challenge question is provided by the user in a user profile created during a pre-registration procedure.

14. A device comprising:

a display;

a microphone;

a processor; and

a memory that stores instructions that, when executed by the processor, cause the processor to perform operations comprising

establishing a data session with an authentication server,

receiving a sample phrase over the data session, the sample phrase comprising a challenge phrase comprising a rewording of a challenge question as a statement comprising a blank portion for an answer to the challenge question,

presenting a voiceprint matching interface on the display, the voiceprint matching interface comprising;

text corresponding to the statement,

a request for the user to speak the statement and to speak the answer to the challenge question in the blank portion of the statement,

a first option that, when selected by the user, plays audio corresponding to the statement, and

a second option that, when selected by the user, initiates a recording via the microphone to record the statement spoken by the user,

receiving a speech input via the microphone in response to the request,

inserting a device-specific audio artifact in the speech input of the statement spoken by the user, the device-specific audio artifact being inserted in the speech input of the statement spoken by the user in accordance with an artifacting scheme that is known by the authentication server and that is changed periodically, wherein the device-specific audio artifact comprises a distinct characteristic comprising a type and a specification of the microphone used to record the statement by the user, and wherein the user is never made aware of the artifacting scheme, and

transmitting the speech input to the authentication server via the data session.

15. The device of claim 14, wherein the operations further comprise:

receiving a notification comprising an indication of a service for which authentication is required;

presenting the notification on the display of the computing device; and

receiving an input to proceed;

wherein presenting the voiceprint matching interface comprises presenting the voiceprint matching interface in response to receiving the input to proceed, and wherein establishing the data session comprises establishing the data session in response to receiving the notification.

16. The device of claim 15, wherein the operations further comprise:

presenting an authentication prompt requesting input of an authentication credential;

receiving an input of the authentication credential; and

sending the authentication credential to the authentication server.

17. The device of claim 14, wherein the operations further comprise:

receiving a further sample phrase over the data session;

presenting a further voiceprint matching interface on the display of the computing device, the further voiceprint matching interface comprising a request for the user to speak the further sample phrase;

receiving a further speech input of the further sample phrase; and

transmitting the further speech input to the authentication server via the data session.

18. The device of claim 14, wherein the operations further comprise receiving a message specifying that an authentication process is complete.

19. The device of claim 14, wherein the challenge question and the challenge answer are provided by the user in a user profile created during a pre-registration procedure.