Methods and apparatus to enhance security of authentication
A system is disclosed that includes a processor including watermark logic to output a first watermark to an output device that outputs a first watermark signal, based on the first watermark, to an acoustic transmission medium. The processor also includes recording logic to capture, at a first time period, an authentication submission comprising the first watermark signal convolved, via the acoustic transmission medium, with a first passphrase signal. The system also includes a dynamic random access memory (DRAM). Other embodiments are disclosed and claimed.
1. A system, comprising:
an acoustic input transducer;
an acoustic output transducer;
a processor; and
a storage disk or memory including machine-readable instructions that, when executed, cause the processor to:
access an authentication standard including a first acoustically watermarked passphrase, the first acoustically watermarked passphrase having a first acoustic watermark and a first acoustic passphrase acoustically mixed with the first acoustic watermark at a first time via a first common acoustic medium, the first acoustic watermark output by the acoustic output transducer at the first time, the first acoustic passphrase spoken by a user at the first time, the first acoustic watermark and the first acoustic passphrase captured by the acoustic input transducer at the first time;
access an authentication submission including a second acoustically watermarked passphrase, the second acoustically watermarked passphrase having a second acoustic watermark and a second acoustic passphrase acoustically mixed with the second acoustic watermark at a second time subsequent to the first time via a second common acoustic medium, at least a portion of the second acoustic watermark output by the acoustic output transducer at the second time, the second acoustic watermark and the second acoustic passphrase captured by the acoustic input transducer at the second time;
determine whether the second acoustic watermark matches the first acoustic watermark;
determine whether a first timestamp embedded in the first acoustic watermark matches a second timestamp embedded in the second acoustic watermark; and
deny authentication in response to determining that the second acoustic watermark does not match the first acoustic watermark, or that the second timestamp matches the first timestamp.
2. The system of claim 1 , wherein the processor is to generate the first acoustic watermark based on one or more component frequencies of the first acoustic passphrase.
3. The system of claim 1 , wherein the processor is further to:
determine whether the second acoustic passphrase matches the first acoustic passphrase; and
grant authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
4. The system of claim 3 , wherein the processor is further to:
determine whether a first biometric parameter of the first acoustic passphrase matches a second biometric parameter of the second acoustic passphrase; and
grant authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, that the second timestamp does not match the first timestamp, and that the second biometric parameter matches the first biometric parameter.
5. The system of claim 1 , wherein the user is a first user, and wherein the second acoustic passphrase is spoken by the first user at the second time, spoken by a second user different from the first user at the second time, or played from an audio recording medium at the second time.
6. A method, comprising:
accessing, by executing an instruction with one or more processors, an authentication standard including a first acoustically watermarked passphrase, the first acoustically watermarked passphrase having a first acoustic watermark and a first acoustic passphrase acoustically mixed with the first acoustic watermark at a first time via a first common acoustic medium, the first acoustic watermark output by an acoustic output transducer at the first time, the first acoustic passphrase spoken by a user at the first time, the first acoustic watermark and the first acoustic passphrase captured by an acoustic input transducer at the first time;
accessing, by executing an instruction with the one or more processors, an authentication submission including a second acoustically watermarked passphrase, the second acoustically watermarked passphrase having a second acoustic watermark and a second acoustic passphrase acoustically mixed with the second acoustic watermark at a second time subsequent to the first time via a second common acoustic medium, at least a portion of the second acoustic watermark output by the acoustic output transducer at the second time, the second acoustic watermark and the second acoustic passphrase captured by the acoustic input transducer at the second time;
determining, by executing an instruction with the one or more processors, whether the second acoustic watermark matches the first acoustic watermark;
determining, by executing an instruction with the one or more processors, whether a first timestamp embedded in the first acoustic watermark matches a second timestamp embedded in the second acoustic watermark; and
denying authentication in response to determining that the second acoustic watermark does not match the first acoustic watermark, or that the second timestamp matches the first timestamp.
7. The method of claim 6 , further including generating, by executing an instruction with the one or more processors, the first acoustic watermark based on one or more component frequencies of the first acoustic passphrase.
8. The method of claim 6 , wherein the user is a first user, and wherein the second acoustic passphrase is spoken by the first user at the second time, spoken by a second user different from the first user at the second time, or played from an audio recording medium at the second time.
9. A non-transitory computer readable storage medium comprising instructions that, when executed, cause one or more processors to at least:
access an authentication standard including a first acoustically watermarked passphrase, the first acoustically watermarked passphrase having a first acoustic watermark and a first acoustic passphrase acoustically mixed with the first acoustic watermark at a first time via a first common acoustic medium, the first acoustic watermark output by an acoustic output transducer at the first time, the first acoustic passphrase spoken by a user at the first time, the first acoustic watermark and the first acoustic passphrase captured by an acoustic input transducer at the first time;
access an authentication submission including a second acoustically watermarked passphrase, the second acoustically watermarked passphrase having a second acoustic watermark and a second acoustic passphrase acoustically mixed with the second acoustic watermark at a second time subsequent to the first time via a second common acoustic medium, at least a portion of the second acoustic watermark output by the acoustic output transducer at the second time, the second acoustic watermark and the second acoustic passphrase captured by the acoustic input transducer at the second time;
determine whether the second acoustic watermark matches the first acoustic watermark;
determine whether a first timestamp embedded in the first acoustic watermark matches a second timestamp embedded in the second acoustic watermark; and
deny authentication in response to determining that the second acoustic watermark does not match the first acoustic watermark, or that the second timestamp matches the first timestamp.
10. The system of claim 1 , wherein the second acoustic watermark includes a first instance of the first acoustic watermark output by the acoustic output transducer at the first time mixed with a second instance of the first acoustic watermark output by the acoustic output transducer at the second time, the second acoustic watermark being indicative of a replay attack.
11. The method of claim 6 , wherein the second acoustic watermark includes a first instance of the first acoustic watermark output by the acoustic output transducer at the first time mixed with a second instance of the first acoustic watermark output by the acoustic output transducer at the second time, the second acoustic watermark being indicative of a replay attack.
12. The method of claim 6 , further including:
determining, by executing an instruction with the one or more processors, whether the second acoustic passphrase matches the first acoustic passphrase; and
granting authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
13. The method of claim 12 , further including:
determining, by executing an instruction with the one or more processors, whether a first biometric parameter of the first acoustic passphrase matches a second biometric parameter of the second acoustic passphrase; and
granting authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, that the second timestamp does not match the first timestamp, and that the second biometric parameter matches the first biometric parameter.
14. The non-transitory computer readable storage medium of claim 9 , wherein the second acoustic watermark includes a first instance of the first acoustic watermark output by the acoustic output transducer at the first time mixed with a second instance of the first acoustic watermark output by the acoustic output transducer at the second time, the second acoustic watermark being indicative of a replay attack.
15. The non-transitory computer readable storage medium of claim 9 , wherein the instructions, when executed, further cause the one or more processors to generate the first acoustic watermark based on one or more component frequencies of the first acoustic passphrase.
16. The non-transitory computer readable storage medium of claim 9 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether the second acoustic passphrase matches the first acoustic passphrase; and
grant authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase and that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
17. The non-transitory computer readable storage medium of claim 16 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether a first biometric parameter of the first acoustic passphrase matches a second biometric parameter of the second acoustic passphrase; and
grant authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, that the second timestamp does not match the first timestamp, and that the second biometric parameter matches the first biometric parameter.
18. The non-transitory computer readable storage medium of claim 9 , wherein the user is a first user, and wherein the second acoustic passphrase is spoken by the first user at the second time, spoken by a second user different from the first user at the second time, or played from an audio recording medium at the second time.