Digital process and arrangement for authenticating a user of a telecommunications or data network
Digital process for authentication of a user of a telecommunications or data network for access to protected data or a service reserved for a defined circle of users or for the use of data currently entered by the user, wherein a voice sample currently enunciated during an access attempt by the user on a telecommunications or VoIP terminal device is routed to a voice analysis unit and, herein, a current voice profile is computed and this is compared in a voice profile comparison unit against a previously stored initial voice profile and, in response to a positive comparison result, the user is authenticated and a first control signal enabling access, but in response to a negative comparison result a second control signal disabling access or triggering a substitute authentication procedure is generated.
1. A method for authenticating a user of a telecommunications or data network and adding to prepaid credit for a telephone, comprising steps of;
(a) communicating with the server by a user from a prepaid mobile phone, the communication providing a live voice sample for access to protected data or a financial transaction service reserved for a defined circle of users or for the use of data currently entered by the user;
(b) routing the voice sample to a voice analysis unit which computes and generates a current voice profile for the sample;
(c) receiving the routed voice sample at a voice comparison unit and comparing it for a positive match to stored voice profiles for users;
(d) authenticating the user of the mobile phone for access to a service and stored transaction data as a result of a positive match in step (c);
(e) generating a control signal at the voice analysis unit for enabling access to the user;
(f) receiving the control signal at the authentication server and allowing access to stored transaction data for initiating a financial transaction for the user including at least data required for a payment transaction to at least fill up credit for the prepaid mobile phone; and
(g) triggering and controlling adding credit to the prepaid mobile phone as a result of steps (d), (e) and (f);
wherein, at an input end of the voice analysis unit channel-adapted digital voice sample pre-processing is executed to eliminate impressed voice profile interference in the transmission channel between the prepaid mobile phone and a voice sample input interface.
2. The method of claim 1 , wherein the authentication processed on the authentication server sends the first or second control signal to a separate data management server over a protected control signal connection to allow access to the user.
3. The method of claim 1 , wherein filter parameters are used during voice sample pre-processing that have been determined in advance from channel codec parameters of the network standard used by the mobile phone.
4. The method of claim 1 , wherein, in the event the user is not authenticated in step (d), further comprising a step generating a second control signal disabling access and generating a substitute authentication procedure comprising entry of a PIN or code word and comparison with a previously stored PIN or code word.
5. The method of claim 4 , wherein during a first access attempt by the user of the mobile phone, the first control signal is generated in a response to entry of the PIN or the code word, and enunciation of a first voice sample.
6. The method of claim 5 , wherein during the first access attempt, the first control signal is generated as a response to entry of the PIN or the code word, and storage of the current voice profile evaluated from a first enunciated voice sample is generated.
7. The method of claim 1 , wherein a step is inserted for prompting a user to enunciate a voice sample or enter a PIN or code word, the prompt displayed or spoken to the user via the prepaid mobile phone.
8. A system server having software executing from memory providing a process for authenticating a user of a telecommunications or data network and adding credit to a prepaid mobile phone, comprising;
a prepaid mobile phone communicating a voice sample spoken by a user to the server over the network;
a voice analysis unit receiving the voice sample at an input interface from the prepaid mobile phone, the voice sample routed by the server and generating a current voice profile from the sample; and
a voice comparison unit for comparing the current voice profile with voice profiles previously stored in a voice profile storage unit for a match;
wherein in response to a positive match, a first control signal is generated authenticating the user for access to stored transaction data for initiating a financial transaction for the user, including at least transaction data required for a payment transaction to fill up a prepaid add credit for the prepaid mobile phone;
and wherein, at an input end of the voice analysis unit channel-adapted digital voice sample pre-processing is executed to eliminate impressed voice profile interference in the transmission channel between the prepaid mobile phone and a voice sample input interface.
9. The system server of claim 8 , further comprising a user prompting unit for receiving visual and/or audible user prompting, in particular to request a voice sample or to request entry of a PIN or code word on the user's prepaid mobile phone.
10. The system server of claim 8 , wherein the connection between the prepaid mobile phone and the server is a secure connection, during and/or directly after completion of the authentication procedure, allowing access to the user of stored protected data or documents with a control input of a data management server on which, or with a control input of a service server through which services reserved for a defined circle of users can be accessed or generated.
11. The system server of claim 8 , wherein a data input interface is provided at the server for receipt of data entered by the user on the prepaid mobile phone, a data storage unit connected to the data input interface for at least temporary storage of the data received and a data forwarding control unit connected by control signal to the voice profile comparison unit for forwarding of stored data in response to output of the first control signal by the voice profile comparison unit.
12. The system server of claim 8 wherein, wherein, in the event the user is not authenticated, a second control signal is generated disabling access and generating a substitute authentication procedure comprising entry of a PIN or code word and comparison with a previously stored PIN or code word.