Methods and apparatus to enhance security of authentication
A system is disclosed that includes a processor including watermark logic to output a first watermark to an output device that outputs a first watermark signal, based on the first watermark, to an acoustic transmission medium. The processor also includes recording logic to capture, at a first time period, an authentication submission comprising the first watermark signal convolved, via the acoustic transmission medium, with a first passphrase signal. The system also includes a dynamic random access memory (DRAM). Other embodiments are disclosed and claimed.
1. An apparatus, comprising:
one or more processors; and
a storage disk or memory including machine-readable instructions that, when executed, cause the one or more processors to:
access an authentication standard including a first acoustically watermarked passphrase, the first acoustically watermarked passphrase having a first acoustic watermark and a first acoustic passphrase acoustically mixed with the first acoustic watermark during a first time period via a first common acoustic medium, the first acoustic watermark output by an acoustic output transducer during the first time period, the first acoustic passphrase spoken by a user during the first time period, the first acoustic watermark and the first acoustic passphrase captured by an acoustic input transducer during the first time period;
access an authentication submission including a second acoustically watermarked passphrase, the second acoustically watermarked passphrase having a second acoustic watermark and a second acoustic passphrase acoustically mixed with the second acoustic watermark during a second time period subsequent to the first time period via a second common acoustic medium, at least a portion of the second acoustic watermark output by the acoustic output transducer during the second time period, the second acoustic watermark and the second acoustic passphrase captured by the acoustic input transducer during the second time period;
determine whether a first timestamp embedded in the first acoustic watermark matches a second timestamp embedded in the second acoustic watermark; and
deny authentication in response to determining that the second timestamp matches the first timestamp.
2. The apparatus of claim 1 , wherein the user is a first user, and wherein the second acoustic passphrase is spoken by the first user during the second time period, spoken by a second user different from the first user during the second time period, or played from an audio recording medium during the second time period.
3. The apparatus of claim 1 , wherein the second acoustic watermark includes a first instance of the first acoustic watermark output by the acoustic output transducer during the first time period mixed with a second instance of the first acoustic watermark output by the acoustic output transducer during the second time period, the second acoustic watermark being indicative of a replay attack.
4. The apparatus of claim 1 , wherein the instructions, when executed, cause the one or more processors to generate the first acoustic watermark based on one or more component frequencies of the first acoustic passphrase.
5. The apparatus of claim 1 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether the second acoustic watermark matches the first acoustic watermark; and
deny authentication in response to determining that the second acoustic watermark does not match the first acoustic watermark.
6. The apparatus of claim 5 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether the second acoustic passphrase matches the first acoustic passphrase; and
grant authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
7. The apparatus of claim 6 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether a first biometric parameter of the first acoustic passphrase matches a second biometric parameter of the second acoustic passphrase; and
grant authentication in response to determining that the second biometric parameter matches the first biometric parameter, that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
8. A non-transitory computer readable storage medium comprising instructions that, when executed, cause one or more processors to at least:
access an authentication standard including a first acoustically watermarked passphrase, the first acoustically watermarked passphrase having a first acoustic watermark and a first acoustic passphrase acoustically mixed with the first acoustic watermark during a first time period via a first common acoustic medium, the first acoustic watermark output by an acoustic output transducer during the first time period, the first acoustic passphrase spoken by a user during the first time period, the first acoustic watermark and the first acoustic passphrase captured by an acoustic input transducer during the first time period;
access an authentication submission including a second acoustically watermarked passphrase, the second acoustically watermarked passphrase having a second acoustic watermark and a second acoustic passphrase acoustically mixed with the second acoustic watermark during a second time period subsequent to the first time period via a second common acoustic medium, at least a portion of the second acoustic watermark output by the acoustic output transducer during the second time period, the second acoustic watermark and the second acoustic passphrase captured by the acoustic input transducer during the second time period;
determine whether a first timestamp embedded in the first acoustic watermark matches a second timestamp embedded in the second acoustic watermark; and
deny authentication in response to determining that the second timestamp matches the first timestamp.
9. The non-transitory computer readable storage medium of claim 8 , wherein the second acoustic watermark includes a first instance of the first acoustic watermark output by the acoustic output transducer during the first time period mixed with a second instance of the first acoustic watermark output by the acoustic output transducer during the second time period, the second acoustic watermark being indicative of a replay attack.
10. The non-transitory computer readable storage medium of claim 8 , wherein the instructions, when executed, further cause the one or more processors to generate the first acoustic watermark based on one or more component frequencies of the first acoustic passphrase.
11. The non-transitory computer readable storage medium of claim 8 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether the second acoustic watermark matches the first acoustic watermark; and
deny authentication in response to determining that the second acoustic watermark does not match the first acoustic watermark.
12. The non-transitory computer readable storage medium of claim 11 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether the second acoustic passphrase matches the first acoustic passphrase; and
grant authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
13. The non-transitory computer readable storage medium of claim 12 , wherein the instructions, when executed, further cause the one or more processors to:
determine whether a first biometric parameter of the first acoustic passphrase matches a second biometric parameter of the second acoustic passphrase; and
grant authentication in response to determining that the second biometric parameter matches the first biometric parameter, that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
14. A method, comprising:
accessing, by executing an instruction with one or more processors, an authentication standard including a first acoustically watermarked passphrase, the first acoustically watermarked passphrase having a first acoustic watermark and a first acoustic passphrase acoustically mixed with the first acoustic watermark during a first time period via a first common acoustic medium, the first acoustic watermark output by an acoustic output transducer during the first time period, the first acoustic passphrase spoken by a user during the first time period, the first acoustic watermark and the first acoustic passphrase captured by an acoustic input transducer during the first time period;
accessing, by executing an instruction with the one or more processors, an authentication submission including a second acoustically watermarked passphrase, the second acoustically watermarked passphrase having a second acoustic watermark and a second acoustic passphrase acoustically mixed with the second acoustic watermark during a second time period subsequent to the first time period via a second common acoustic medium, at least a portion of the second acoustic watermark output by the acoustic output transducer during the second time period, the second acoustic watermark and the second acoustic passphrase captured by the acoustic input transducer during the second time period;
determining, by executing an instruction with the one or more processors, whether a first timestamp embedded in the first acoustic watermark matches a second timestamp embedded in the second acoustic watermark; and
denying authentication in response to determining that the second timestamp matches the first timestamp.
15. The method of claim 14 , wherein the user is a first user, and wherein the second acoustic passphrase is spoken by the first user during the second time period, spoken by a second user different from the first user during the second time period, or played from an audio recording medium during the second time period.
16. The method of claim 14 , wherein the second acoustic watermark includes a first instance of the first acoustic watermark output by the acoustic output transducer during the first time period mixed with a second instance of the first acoustic watermark output by the acoustic output transducer during the second time period, the second acoustic watermark being indicative of a replay attack.
17. The method of claim 14 , further including generating, by executing an instruction with the one or more processors, the first acoustic watermark based on one or more component frequencies of the first acoustic passphrase.
18. The method of claim 14 , further including:
determining, by executing an instruction with the one or more processors, whether the second acoustic watermark matches the first acoustic watermark; and
denying authentication in response to determining that the second acoustic watermark does not match the first acoustic watermark.
19. The method of claim 18 , further including:
determining, by executing an instruction with the one or more processors, whether the second acoustic passphrase matches the first acoustic passphrase; and
granting authentication in response to determining that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.
20. The method of claim 19 , further including:
determining, by executing an instruction with the one or more processors, whether a first biometric parameter of the first acoustic passphrase matches a second biometric parameter of the second acoustic passphrase; and
granting authentication in response to determining that the second biometric parameter matches the first biometric parameter, that the second acoustic passphrase matches the first acoustic passphrase, that the second acoustic watermark matches the first acoustic watermark, and that the second timestamp does not match the first timestamp.