DYNAMIC VOICEPRINT AUTHENTICATION
A dynamic device key that identifies and authenticates a device and its user includes data representing captured sound of the user speaking a disposable pass phrase. The convenient and secure authentication of voice recognition is combined with convenient and secure device authentication by including biometric voice-recognition of the user in the dynamic device key. During registration, the user speaks all elements of a collection from which disposable pass phrases can be composed. The resulting audio signals, representing the user's voice print as modified by background noise introduced by the device and the environment, are used as references for subsequent authentication. During authentication, a dynamic device key challenge specifies a number of device attributes, including pass phrases to be spoken by the device's user. The pass phrases may be selected in a randomized manner from the collection of disposable pass phrases. The responsive dynamic device key includes data representing an audio signal captured through a microphone of the user speaking the disposable pass phrase and may be obscured with a nonce provided in the challenge. The result is very rigorous device and user authentication.
1 . A method for identifying a remotely located device and its user, the method comprising:
receiving device and user identification data from the device, wherein the device and user identification data includes:
a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices;
attribute data, wherein the attribute data represents one or more hardware configuration characteristics of the device; and
interactive attribute data, wherein the interactive attribute data represents one or more characteristics of a user of the device;
determining that the device identifier identifies the device;
determining that the attribute data is consistent with corresponding reference attribute data stored for the device; and
determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the user of the device;
wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the user of the device comprises:
parsing an audio signal from the interactive attribute data, wherein the audio signal includes data representing captured sound of the user speaking a disposable pass phrase;
determining whether the audio signal represents a voice of a recognized user by comparing the audio signal to a control audio signal that represents the disposable pass phrase spoken by the recognized user; and
authenticating the user as the recognized user upon a condition in which determining determines that the audio signal represents a voice of the recognized user.
2 . The method of claim 1 wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the device comprises:
determining that the interactive attribute data is not consistent with the corresponding reference interactive attribute data stored for the device; and
in response to determining that the interactive attribute data is not consistent with corresponding reference interactive attribute data stored for the device, requesting new device identification data from the device and, in response to the request, repeating the receiving of device identification data from the device.
3 . The method of claim 1 wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the device comprises:
applying predetermined comparison logic associated with the interactive attribute data.
4 . The method of claim 1 wherein the device and user identification data is responsive to a device and user identification challenge that includes data identifying a disposable pass phrase that includes one or more elements selected from a collection of two or more pass phrase elements in a randomized manner.
5 . The method of claim 1 wherein the audio signal is obscured with a nonce.
6 . A non-transitory computer readable medium useful in association with a computer that includes one or more processors and a memory, the computer readable medium including computer instructions that are configured to cause the computer, by execution of the computer instructions in the one or more processors from the memory, to identify a remotely located device and its user by at least:
receiving device and user identification data from the device, wherein the device and user identification data includes:
a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices;
attribute data, wherein the attribute data represents one or more hardware configuration characteristics of the device; and
interactive attribute data, wherein the interactive attribute data represents one or more characteristics of a user of the device;
determining that the device identifier identifies the device;
determining that the attribute data is consistent with corresponding reference attribute data stored for the device; and
determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the user of the device;
wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the user of the device comprises:
parsing an audio signal from the interactive attribute data, wherein the audio signal includes data representing captured sound of the user speaking a disposable pass phrase;
determining whether the audio signal represents a voice of a recognized user by comparing the audio signal to a control audio signal that represents the disposable pass phrase spoken by the recognized user; and
authenticating the user as the recognized user upon a condition in which determining determines that the audio signal represents a voice of the recognized user.
7 . The computer readable medium of claim 6 wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the device comprises:
determining that the interactive attribute data is not consistent with the corresponding reference interactive attribute data stored for the device; and
in response to determining that the interactive attribute data is not consistent with corresponding reference interactive attribute data stored for the device, requesting new device identification data from the device and, in response to the request, repeating the receiving of device identification data from the device.
8 . The computer readable medium of claim 6 wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the device comprises:
applying predetermined comparison logic associated with the interactive attribute data.
9 . The computer readable medium of claim 6 wherein the device and user identification data is responsive to a device and user identification challenge that includes data identifying a disposable pass phrase that includes one or more elements selected from a collection of two or more pass phrase elements in a randomized manner.
10 . The computer readable medium of claim 6 wherein the audio signal is obscured with a nonce.
11 . A computer system comprising:
at least one processor;
a computer readable medium that is operatively coupled to the processor;
network access circuitry that is operatively coupled to the processor; and
device and user identification logic (i) that executes at least in part in the processor from the computer readable medium and (ii) that, when executed, causes the processor to identify a remotely located device and its user by at least:
receiving device and user identification data from the device, wherein the device and user identification data includes:
a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices;
attribute data, wherein the attribute data represents one or more hardware configuration characteristics of the device; and
interactive attribute data, wherein the interactive attribute data represents one or more characteristics of a user of the device;
determining that the device identifier identifies the device;
determining that the attribute data is consistent with corresponding reference attribute data stored for the device; and
determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the user of the device;
wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the user of the device comprises:
parsing an audio signal from the interactive attribute data, wherein the audio signal includes data representing captured sound of the user speaking a disposable pass phrase;
determining whether the audio signal represents a voice of a recognized user by comparing the audio signal to a control audio signal that represents the disposable pass phrase spoken by the recognized user; and
authenticating the user as the recognized user upon a condition in which determining determines that the audio signal represents a voice of the recognized user.
12 . The computer system of claim 11 wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the device comprises:
determining that the interactive attribute data is not consistent with the corresponding reference interactive attribute data stored for the device; and
in response to determining that the interactive attribute data is not consistent with corresponding reference interactive attribute data stored for the device, requesting new device identification data from the device and, in response to the request, repeating the receiving of device identification data from the device.
13 . The computer system of claim 11 wherein determining that the interactive attribute data is consistent with corresponding reference interactive attribute data stored for the device comprises:
applying predetermined comparison logic associated with the interactive attribute data.
14 . The computer system of claim 11 wherein the device and user identification data is responsive to a device and user identification challenge that includes data identifying a disposable pass phrase that includes one or more elements selected from a collection of two or more pass phrase elements in a randomized manner.
15 . The computer system of claim 11 wherein the audio signal is obscured with a nonce.