System and method for multi-factor authentication of a communication device metadata with user authentication

1 . A system for multi-factor authentication of a communication device metadata with user authentication comprises:

a communication device equipped with an interactive application module, the communication device further comprising:

a voice recording module to capture, record and store user's voice sample during a user enrolment process, and a user authentication process;

a voice biometrics module having a user enrolment module to enroll new users, and a user authentication first module to authenticate a user's identity based on voice characteristics of a user command, wherein the user enrolment module is adapted to create a distinct voiceprint from the user's voice samples, the user authentication first module is configured to receive a voice command from an enrolled user to authenticate the user;

a digital signature module having:

a digital signature generation module configured to generate a digital signature by combining a communication device metadata, the user's voice sample and unique ID after authenticating the user from the voice command;

a digital signature authentication first module configured to authenticate the generated digital signature in the communication device, or sent the generated digital signature to a recipient device to authenticate the generated digital signature; and

a first communication module configured to communicate the generated digital signature, the communication device metadata, the voice command and the unique ID with the recipient device;

the recipient device comprises;

a second communication module to facilitate communication between the communication device and the recipient device;

a digital signature authentication second module to authenticate the generated digital signature;

a user authentication second module for authenticating the user's identity.

2 . The system as claimed in claim 1 , wherein the user enrolment module is adapted to capture the voice signatures from the user's voice samples using advanced signal processing and machine learning algorithms to extract unique voice characteristics from the user's voice sample, such as pitch, frequency, and formants to create the distinct voiceprint for the user.

3 . The system as claimed in claim 1 , wherein the generated digital signature is authenticated by the digital signature authentication first module or the digital signature authentication second module, wherein upon successful digital signature authentication, the user authentication first module or the user authentication second module captures the voice characteristics from the user command and then compares with the distinct voiceprint to authenticate the user's identity.

4 . The system as claimed in claim 1 , wherein the user authentication first module of the communication device is adapted to authenticate the user's identity within the communication device.

5 . The system as claimed in claim 1 , wherein the digital signature authentication first module of the communication device is adapted to authenticate the generated digital signature within the communication device.

6 . The system as claimed in claim 1 , wherein the digital signature generation module utilizes cryptographic algorithms to generate the digital signature.

7 . The system as claimed in claim 1 , wherein the digital signature authentication first module and the digital signature authentication second module utilizes cryptographic algorithms to decrypt the generated digital signature.

8 . The system as claimed in claim 1 , wherein the user enrolment process for enrolling the new user comprises the steps of:

receiving a username from the user;

generating the unique ID and associating the unique ID with the user;

recording the user's voice samples;

capturing voice signatures from the user's voice samples using advanced signal processing and machine learning algorithms to extract unique voice characteristics from the user's voice samples such as pitch, frequency, and formants, to create a distinct voiceprint for the user;

associating the distinct voiceprint with the username and the unique ID; and

storing the distinct voiceprint along with the username and the unique ID on the communication device, the recipient device, or both.

9 . The system as claimed in claim 1 , wherein the system is configured for performing multi-factor authentication of the communications device metadata with user authentication comprises the steps of:

providing, by the system, a security phrase to the users, for user authentication;

receiving the voice command from the user, a response of the user to the security phrase is received as the voice command by the communication device;

recording the voice command, the voice command is recorded by the voice recording module and the voice characteristics of the voice command are extracted for future reference;

comparing the extracted voice characteristics with the distinct voiceprint that is stored during the user enrolment process, a similarity score is calculated by comparing the extracted voice characteristics and the distinct voiceprint to authenticate the user;

authenticating the user if the similarity score is above a threshold value;

accessing the communication device metadata such as location, date, time, communication device details, and network information, if the user is authenticated;

generating the digital signature by signature object signing a hash object;

authenticating the generated digital signature using the digital signature authentication first module or the digital signature authentication second module;

capturing the voice characteristics from the voice command, the user authentication first module or the user authentication second module captures the voice characteristics from the voice command; and

comparing the voice characteristics of the voice command with the distinct voiceprints to authenticate the user's identity, if the user's identity is successfully verified, the communication device metadata is considered valid and sent for further processing.

10 . The system as claimed in claim 9 , wherein the generated digital signature along with the communication device metadata, the voice command, and the unique ID is communicated to a recipient device to authenticate the generated digital signature and user's identity, wherein the recipient device includes the digital signature authentication second module to authenticate the generated digital signature, and the user authentication second module to authenticate the user's identity.

11 . The system as claimed in claim 9 , wherein generating the digital signature comprises the steps of:

generating a hash object of the communication device metadata, the voice command, and the unique ID using a cryptographic algorithm (SHA256);

creating the signature object using a user's private key;

signing the generated hash object by the signature object for generating a unique digital signature.

12 . The system as claimed in claim 9 , wherein authenticating the generated digital signature comprises the steps of:

generating a hash object of the communication device metadata, the voice command, and the unique ID using a cryptographic algorithm (SHA256);

decrypting the digital signature to create a decrypted hash using a user's public key;

comparing the decrypted hash with the hash object of the communication device metadata, the voice command, and the unique ID, if both match, the digital signature is considered valid.