Methods and systems for improving the security of secret authentication data during authentication transactions

1. A method for authenticating users comprising:

determining, by a communications device, text-strings for display thereon, each text-string corresponding to an item of information included in user secret authentication data, wherein at least one of the text-strings is included in a text-string registry and at least one of the text-strings is a new text-string;

authenticating, by the communications device, a user with authentication data simultaneously captured from the user with the communications device as the result of the user reciting the text-strings, the captured authentication data including at least different biometric data types; and

adding, by the communications device, the new text-string to the text-string registry after successfully authenticating the user.

2. The method for authenticating users in accordance with claim 1 , the biometric data types comprising voice and face biometric data, said authenticating step comprising:

transforming the captured voice biometric data into secret authentication data; and

comparing the secret authentication data against the user secret authentication data.

3. The method for authenticating users in accordance with claim 2 , said authenticating step further comprising determining whether the captured voice and face biometric data match biometric data included in a user enrollment data record stored in an authentication computer system when the secret authentication data matches the user secret authentication data.

4. The method for authenticating users in accordance with claim 1 , said authenticating step comprising evaluating synchronization between the different authentication data types included in the captured authentication data.

5. The method for authenticating users in accordance with claim 1 , said determining step comprising:

randomly selecting each text-string from a text-string registry; or

determining each text-string to be a least recently used text-string in the text-string registry.

6. The method for authenticating users in accordance with claim 1 , further comprising:

determining additional text-strings; and

associating a text-string or an additional text-string with each key in a keypad, each key being associated with key data, wherein the user recites the text-strings associated with key data corresponding to the items of information.

7. An apparatus for authenticating users comprising:

a processor; and

a memory configured to store at least enrollment data records, said apparatus being associated with a network and said memory being coupled to said processor and having instructions stored thereon which, when executed by said processor, cause said processor to:

determine text-strings for display on said apparatus, each text-string corresponding to an item of information included in user secret authentication data, wherein at least one of the text-strings is included in a text-string registry and at least one of the text-strings is a new text-string;

authenticate a user with authentication data simultaneously captured from the user with said apparatus as the result of the user reciting the text-strings, the captured authentication data including at least different biometric data types; and

add the new text-string to the text-string registry after successfully authenticating the user.

8. An apparatus for authenticating users in accordance with claim 7 wherein said processor is further caused to:

transform captured voice biometric data into secret authentication data when the captured biometric data includes voice and face biometric data; and

compare the secret authentication data against the user secret authentication data.

9. An apparatus for authenticating users in accordance with claim 8 , wherein said processor is further caused to determine whether the captured voice and face biometric data match biometric data included in a user enrollment data record stored in an authentication computer system when the secret authentication data matches the user secret authentication data.

10. An apparatus for authenticating users in accordance with claim 7 , wherein said processor is further caused to evaluate synchronization between the different authentication data types included in the captured authentication data.

11. An apparatus for authenticating users in accordance with claim 7 , wherein said processor is further caused to:

randomly select each text-string from a text-string registry; or

determine each text-string to be a least recently used text-string in the text-string registry.

12. An apparatus for authenticating users in accordance with claim 7 , wherein said processor is further caused to:

determine additional text-strings; and

associate a text-string or an additional text-string with each key in a keypad, each key being associated with key data, wherein the user recites the text-strings associated with key data corresponding to the items of information.

13. A computer program recorded on a non-transitory computer-readable recording medium included in a computer system for authenticating users, the computer program for causing the computer system to:

determine text-strings for display on said apparatus, each text-string corresponding to an item of information included in user secret authentication data, wherein at least one of the text-strings is included in a text-string registry and at least one of the text-strings is a new text-string;

authenticate a user with authentication data simultaneously captured from the user with said apparatus as the result of the user reciting the text-strings, the captured authentication data including at least different biometric data types; and

add the new text-string to the text-string registry after successfully authenticating the user.

14. A computer program in accordance with claim 13 for further causing the computer system to:

transform captured voice biometric data into secret authentication data when the captured biometric data includes voice and face biometric data; and

compare the secret authentication data against the user secret authentication data.

15. A computer program in accordance with claim 14 for further causing the computer system to determine whether the captured voice and face biometric data match biometric data included in a user enrollment data record stored in an authentication computer system when the secret authentication data matches the user secret authentication data.

16. A computer program in accordance with claim 13 for further causing the computer system to evaluate synchronization between the different authentication data types included in the captured authentication data.

17. A computer program in accordance with claim 13 for further causing the computer system to:

randomly select each text-string from a text-string registry; or

determine each text-string to be a least recently used text-string in the text-string registry.

18. A computer program in accordance with claim 13 for further causing the computer system to associate a text-string or an additional text-string with each key in a keypad, each key being associated with key data, wherein the user recites the text-strings associated with key data corresponding to the items of information.

19. A method for authenticating users comprising:

determining, by a communications device, text-strings for display thereon, each text-string corresponding to an item of information included in user secret authentication data, wherein at least one of the text-strings is included in a text-string registry and at least one of the text-strings is a new text-string;

authenticating, by the communications device, a user with face and voice biometric data simultaneously captured from the user with the communications device as the result of the user reciting the text-strings; and

adding, by the communications device, the new text-string to the text-string registry after successfully authenticating the user.