STTR Phase I: Dynamic Passphrase Voice Security System

本小型企业技术转移（STTR）第一阶段研究项目提出开发一种新颖的语音认证安全访问系统，该系统以双重方式独特地将语音验证与说话人验证相结合。作为身份验证的基础，建议的系统生成一次性密码短语，用户被要求立即响应。双重验证引擎验证响应是所需的密码短语，并且属于已声明的用户。提出的系统解决了先前语音认证系统与“耳镜”冲浪、窃听、猜测和重放攻击相关的漏洞。该提案为新出现的身份盗窃威胁提供了一个解决方案，因为个人或存储的秘密信息不能被大声说出。该提案进一步解决了传统密码系统与无效密码和密码管理相关的限制。该项目的研究目的是研究技术方法的可行性和商业潜力。本研究包括设计和开发一个具有代表性的双验证随机口令系统的原型。研究内容包括发动机精度、密码有效性和整体安全性的测量和分析。预计对窃听和重放敏感的语音应用将展示重要的安全改进，从而扩大语音认证的总体潜力。拟议活动的影响包括通过广泛增长的语音识别应用程序、语音通道和融合平台通过语音进行安全认证。随着越来越多的人在各种设备和网络（如VoIP或蜂窝）上使用他们的语音，实时语音应用将从所提出的方法中受益。所建议的语音安全方法也可以是具有视觉或其他适用障碍的人的选择。社会关注安全漏洞和相关身份盗窃的持续增加。该系统为这个问题提供了一个重要的选择，有可能对每年因欺诈而损失数百万美元的个人和组织产生积极影响。安全和身份验证技术以新颖独特的方式相结合，增强了我们对动态生物识别技术（如说话人验证）如何被用于推进技术的理解，这是前所未有的。该提案强调工业和大学的合作，并通过妇女拥有和经营的企业扩大代表性不足群体的参与。该提案促进了大学教师、研究人员和研究生参与的研究和教育的整合。

This Small Business Technology Transfer (STTR) Phase I research project proposes to develop a novel voice authentication security access system which uniquely combines speech verification with speaker verification in a dual fashion. As a basis for authentication, the proposed system generates a one-time pass-phrase which users are challenged to respond to immediately. The dual verification engine verifies that the response is the required pass-phrase and belongs to the claimed user. The proposed system addresses the vulnerabilities of previous voice authentication systems associated with 'ear shot' surfing, eavesdropping, guessing, and replaying attacks. The proposal offers a solution for emerging identity theft threats where personal or stored secret information cannot be said aloud. The proposal further addresses traditional password system limitations associated with ineffective passwords and password management. The research objective of this project is to investigate the feasibility of the technical approach and commercial potential. The research consists of the design and development of a prototype representative of the dual verification random pass-phrase proposed system. The research includes the measurement and analysis of engine accuracy, pass-phrase effectiveness and overall security. It is anticipated that important security improvements will be demonstrated for voice applications sensitive to eavesdropping and playback thereby expanding the overall potential for voice authentication.The impacts of the proposed activity include secure authentication through speech via the widely growing number of speech recognition applications, voice channels and converged platforms. As more individuals use their voice on a variety of devices and networks such as VoIP or cellular, real-time, speech applications will benefit from the proposed method. The proposed speech security method may also be the choice for those with visual or other applicable handicaps. Society is concerned with the continuous rise of security breaches and related identity theft. The system offers an important option to this problem with the possibility of positively impacting individuals and organizations that lose millions of dollars to fraud annually. The combination of security and authentication technologies in new and unique ways enhances our understanding of how a dynamic biometric, such as speaker verification, can be used to advance the technology as never before demonstrated. The proposal emphasizes the collaboration of industry and university and broadens the participation of underrepresented groups through a woman owned and operated business. The proposal facilitates the integration of research and education with the involvement of university faculty, researchers, and graduate students.