Authentication via a dynamic passphrase

• US 10,592,649 B2
• Filed: 08/09/2017
• Issued: 03/17/2020
• Est. Priority Date: 08/09/2017
• Status: Active Grant

• Current Assignee: Nice Ltd
• Original Assignee: Nice Ltd
• Inventors: Keret, Matan, Buzaglo, Amnon
• Primary Examiner(s): Simitoski, Michael
• Application Number:
  US15/672,518
• Publication Number:
  US 20190050545A1
• Time in Patent Office: 951 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G10L 17/00 Speaker identification or verification techniques
• CPC Class Codes: G10L 17/14 Use of phonemic categorisation or speech recognition prior to speaker recognition or verification
• CPC Class Codes: G10L 17/24 the user being prompted to utter a password or a predefined phrase
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A computerize method for voice authentication of a customer in a self-service system is provided. A request for authentication of the customer is received and the customer is enrolled in the self-service system with a text-independent voice print. A passphrase from a plurality of passphrases to transmit to the customer is determined based on comparing each of the plurality of passphrases to a text-dependent or text-independent voice biometric model. The passphrase is transmitted to the customer, and when the customer responds, an audio stream of the passphrase is received. The customer is authenticated by comparing the audio stream of the passphrase against the text-independent voice print. If the customer is authenticated, then storing the audio stream of the passphrase and the topic of the passphrase.

Claims

1. A computer-implemented method for voice authentication of a customer in a self-service system, the computer implemented method comprising:

creating a plurality of passphrases from recorded parts of prior interactions of the customer with the self-service system, the interactions comprising phrases the user has uttered, the phrases having more than n words, where n is based on the number of phonemes that can be used to create a phrase having a sufficient ability to be voice recognized by a voice biometric model;

receiving a request for authentication of the customer, the customer is enrolled in the self-service system with a text-independent voice print;

determining a passphrase from the plurality of passphrases to transmit to the customer based on comparing each of the plurality of passphrases to a text-dependent or text-independent voice biometric model;

transmitting a request to the customer to repeat the passphrase;

receiving an audio stream of the passphrase;

authenticating the customer by comparing the audio stream of the passphrase against the text-independent voice print; and

if the customer is authenticated, then storing the audio stream of the passphrase.

2. The computer-implemented method of claim 1 comprising upon receipt of a subsequent request for authentication of the customer, determining another passphrase that is different from the previous passphrase.

3. The computer-implemented method of claim 1 further comprising:

for each subsequent request for authentication, presenting the customer with a unique passphrase of the plurality of passphrases; and

storing an audio stream of each corresponding unique passphrase as recited by the customer.

4. The computer-implemented method of claim 1 wherein determining the passphrase further comprises selecting the passphrase from the plurality of passphrases such that the same passphrase is not used more than a minimum number of reuse times.

5. The computer-implemented method of claim 1 wherein determining the passphrase further comprising combining two or more passphrases from the plurality of passphrases.

6. The computer-implemented method of claim 1 further comprising for each passphrase in the plurality of passphrases that is transmitted to the customer a maximum number of use times, deleting the corresponding passphrases from the plurality of passphrases.

7. The computer-implemented method of claim 1 wherein the plurality of passphrases is input by a user.

8. The computer-implemented method of claim 1 wherein the plurality of passphrases is automatically populated.

9. The computer-implemented method of claim 1 wherein the plurality of passphrases is updated.

10. The computer-implemented method of claim 1 wherein the plurality of passphrases is updated when more than a predefined percentage of customers of a system that executed the method are enrolled with the same passphrases.

11. The computer-implemented method of claim 10 wherein updating the plurality of passphrases is based on computerized text.

12. The computer-implement method of claim 1 wherein the plurality of passphrases are generated by a random phrase generator.

13. The computer-implemented method of claim 1 wherein the passphrase that is selected from the plurality of passphrases has a higher likelihood of causing the customer to be authenticated in comparison to a random passphrase.