System and method for voice authentication

• US 9,898,723 B2
• Filed: 12/18/2013
• Issued: 02/20/2018
• Est. Priority Date: 12/19/2012
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Rutherford, Robert, Hua, Julian
• Primary Examiner(s): Serrou, Abdelali
• Application Number:
  US14/132,576
• Publication Number:
  US 20140172430A1
• Time in Patent Office: 1,525 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 3/167 Audio in a user interface, e.g. using voice commands for navigating, audio feedback
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3272 using an audio code
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G10L 15/22 Procedures used during a speech recognition process, e.g. man-machine dialogue
• CPC Class Codes: G10L 17/00 Speaker identification or verification techniques
• CPC Class Codes: G10L 2015/225 Feedback of the input speech

Abstract

Embodiments of the invention provide for secure voice authentication through a communication device or access device. Certain embodiments allow for providing a word string to a communication device or authentication device. The communication or authentication device plays a supplemental signal that is unique to a transaction. The communication device or authentication device concurrently records an audio segment originating from the user and the supplemental signal. The audio segment is an attempt by the user to vocally reproduce the word string. The communication device or authentication device sends the concurrently recorded audio segment and supplemental signal, to a computer, where the computer authenticates the user.

Claims

1. A method for authenticating a user for a transaction, comprising:

receiving, by a device, a user request to initiate the transaction;

transmitting, by the device and to a server computer, a notification of the user request to the initiate the transaction;

in response to transmitting the notification to the server computer, receiving, by the device and from the server computer, a supplemental signal comprising an inaudible sound and an element unique to the transaction;

in response to receiving the supplemental signal, displaying, by the device, a word string to be repeated by the user, wherein the word string comprises a random element and a fixed element;

playing, by the device, the received supplemental signal;

concurrently recording, by the device, (a) an audio segment originating from the user while the user attempts to vocally reproduce the displayed word string and (b) the received supplemental signal; and

sending, by the device, the concurrently recorded audio segment and the received supplemental signal, to the server computer, wherein the server computer authenticates the user based at least in part on (a) the sent audio segment matching with a voice profile associated with the user and (b) the supplemental signal sent by the device matching the supplemental signal originally received by the device.

2. The method of claim 1 wherein the supplemental signal is played by a point-of-sale (POS) device while authenticating the user for the transaction.

3. The method of claim 1, wherein the inaudible sound comprises frequency components inaudible to a human being.

4. The method of claim 1, wherein the element unique to the transaction comprises at least one of a unique frequency, a unique pitch, or a unique speed of the supplemental signal.

5. A device, comprising:

a processor; and

a non-transitory computer-readable storage medium, comprising code executable by the processor for implementing a method for authenticating a user for a transaction, the method comprising;

receiving, by the device, a user request to initiate the transaction;

transmitting, by the device and to a server computer, a notification of the user request to the initiate the transaction;

in response to transmitting the notification to the server computer, receiving, by the device and from the server computer, a supplemental signal comprising an inaudible sound and an element unique to the transaction;

in response to receiving the supplemental signal, displaying, by the device, a word string to be repeated by the user, wherein the word string comprises a random element and a fixed element;

playing, by the device, the received supplemental signal;

concurrently recording, (a) by the device, an audio segment originating from the user while the user attempts to vocally reproduce the displayed word string and (b) the received supplemental signal; and

sending, by the device, the concurrently recorded audio segment and the received supplemental signal, to the server computer, wherein the server computer authenticates the user based at least in part on (a) the sent audio segment matching with a voice profile associated with the user and (b) the supplemental signal sent by the device matching the supplemental signal originally received by the device.

6. The device of claim 5 wherein the supplemental signal is played by a point-of-sale (POS) device while authenticating the user for the transaction.

7. The method of claim 5, wherein the inaudible sound comprises frequency components inaudible to a human being.

8. The method of claim 5, wherein the element unique to the transaction comprises at least one of a unique frequency, a unique pitch, or a unique speed of the supplemental signal.

9. A method for authenticating a user for a transaction, comprising:

receiving, from a device and by a server computer, a request to initiate the transaction;

transmitting, by the server computer and to the device, a supplemental signal comprising an inaudible sound and an element unique to the transaction;

receiving, by the server computer, authorization request comprising an (a) audio segment and (b) the transmitted supplemental signal, wherein the audio segment and the transmitted supplemental signal were concurrently recorded by the device while the device plays the transmitted supplemental signal and while the user attempts to vocally reproduce a word string displayed by the device, and wherein the word string comprises a random element and a fixed element;

verifying, by the server computer, that (a) the supplemental signal received in the authorization request matches the supplemental signal originally transmitted to the device and (b) that the received audio segment matches with a voice profile associated with the user; and

authenticating, by the server computer, the user for the transaction based at least in part on the verifying.

10. The method of claim 9 further comprising generating, by the server computer, the supplemental signal.

11. The method of claim 9 further comprising, receiving, a payment authorization request associated with the transaction, the payment authorization request including the concurrently recorded audio segment and supplemental signal.

12. The method of claim 9, wherein the inaudible sound comprises frequency components inaudible to a human being.

13. The method of claim 9, wherein the element unique to the transaction comprises at least one of a unique frequency, a unique pitch, or a unique speed of the supplemental signal.

14. A server computer, comprising:

a processor; and

a non-transitory computer-readable storage medium, comprising code executable by the processor for implementing a method for authenticating a user for a transaction, the method comprising;

receiving, from a device and by the server computer, a request to initiate a transaction;

transmitting, by the server computer and to the device, a supplemental signal comprising an inaudible sound and an element unique to the transaction;

receiving, by the server computer, an authorization request comprising an (a) audio segment and (b) the transmitted supplemental signal, wherein the audio segment and the transmitted supplemental signal were concurrently recorded by the device while the device plays the transmitted supplemental signal and while the user attempts to vocally reproduce a word string displayed by the device, and wherein the word string comprises a random element and a fixed element; and

verifying, by the server computer, that (a) the supplemental signal received in the authorization request matches the supplemental signal originally transmitted to the device and (b) that the received audio segment matches with a voice profile associated with the user; and

authenticating, by the server computer, the user for the transaction based at least in part on the verifying.

15. The server computer of claim 14 wherein the method further comprises generating, by the server computer, the supplemental signal.

16. The server computer of claim 14 wherein the method further comprises, receiving, a payment authorization request associated with the transaction, the payment authorization request including the concurrently recorded audio segment and supplemental signal.

17. The method of claim 14, wherein the inaudible sound comprises frequency components inaudible to a human being.

18. The method of claim 14, wherein the element unique to the transaction comprises at least one of a unique frequency, a unique pitch, or a unique speed of the supplemental signal.