Friday, January 29, 2010

Securing a Website with Multi-factor Authentication and Voice Biometrics

In the example below, “XYZ, Inc.” has decided to secure a Website using multi-factor authentication and voice biometrics:

• “XYZ, Inc.” generates account IDs to all users and provides this data to its voice biometrics provider
• New users enroll by calling an assigned phone number, entering their account ID and repeating a pass-phrase three times (this process creates a “base” voiceprint)
• On subsequent Website visits, the user calls the assigned phone number, enters their account ID and repeats the pass-phrase once (this process creates a “sample” voiceprint)
• The user’s “sample” voiceprint is compared to the “base” voiceprint
• If the voiceprints match, the user is enabled to access the Website. If the voiceprints don't match, the user is directed to an alternate business process (e.g., help desk).

No comments:

Post a Comment