while implementing an active challenge/response mechanism to verify the liveness of a subject in a biometric authentication system can significantly enhance security, it also places an additional burden on the user. requiring users to perform specific actions can prolong the authentication process, increase the chance of user mistakes, and result in missed detections.

This can ultimately hinder the adoption of the technology. Consequently, the TrulySecure Voice Liveness Challenge has been carefully crafted to strike a balance between ease of use and security. It is both robust and user-friendly, ensuring that the enrollment and authentication processes remain relatively swift. It also provides flexibility in implementation, allowing for adjustments in ease of use and security tailored to specific applications.

TrulySecure Voice Liveness Challenge

Following the verification of the user's passphrase during an authentication attempt, the TrulySecure Voice Liveness Challenge prompts the user to sequentially speak a short series of two-digit numbers. These numbers are randomly selected from a set previously enrolled by the user.

To reduce the duration of the initial enrollment process, this set of numbers is expanded over time using utterances captured during authentication attempts. As outlined below, the liveness challenge can be configured in various ways to optimize the system for security and user-friendliness.

This system design offers several significant advantages over other voice liveness challenge methods, which are also detailed below.

Enrollment - The enrollment process begins with the user enrolling their chosen passphrase, as is standard in TrulySecure, by repeating it three times. Subsequently, the user is prompted to enroll three two-digit numbers, each following the same procedure used for the passphrase. These numbers are randomly selected by the system.

Authentication - During authentication, the user is first asked to provide their passphrase. The system then displays a sequence of three two-digit numbers. Two of these are randomly chosen from the enrolled set, serving as the liveness test.

Augmentation - The third number shown to the user is randomly selected from the set of unenrolled numbers. The audio from this number is then used to add it to the enrolled set for future liveness tests.

Enrollment

● The user is asked to repeat their chosen passphrase (e.g., "My Voice Is My Password") three times.

● The user is then prompted to enroll three two-digit numbers:

○ The system shows "27" and the user says "twenty-seven" (this is repeated three times to complete the enrollment of that number).

○ The system shows "84" and the user says "eighty-four" (this is repeated three times to complete the enrollment of that number).

○ The system shows "67" and the user says "sixty-seven" (this is repeated three times to complete the enrollment of that number).

Authentication

● The user speaks their chosen passphrase (e.g., "My Voice Is My Password").

● The user is then randomly prompted to say two of the enrolled two-digit numbers, plus a third unenrolled two-digit number (the sequence can vary):

○ The system shows "67" and the user says "sixty-seven".

○ The system shows "84" and the user says "eighty-four".

○ The system shows "53" and the user says "fifty-three".

● If the user's passphrase and the two enrolled numbers match the system's speaker verification test, the user is authenticated.

Augmentation

● The audio of the unenrolled two-digit number ("fifty-three" in this example) is saved for future enrollment. Once the user has spoken this number three times, the system enrolls it and adds it to the list for future liveness prompts.

Benefits

The choice of two-digit numbers as the liveness passphrases in the TrulySecure Voice Liveness Challenge provides several key advantages:

● These numbers are universally recognized symbols, understood globally by speakers of various languages. They can be spoken with any accent without affecting performance, as the verification process is language-independent.

● They can be articulated in any language (e.g., "vingt-sept" in French instead of "twenty-seven"), requiring no changes to the system. This eliminates the need for user interface localization, simplifying app maintenance (fewer versions to manage and less testing needed per release). Additionally, it removes the necessity for language-specific voice models, which require extensive data collection and tuning for each supported language, resulting in a smaller download package.

● They consist of multiple syllables, improving accuracy compared to single-syllable passphrases, which are more challenging to use.

● They enable the development of a large enrolled set from which to draw liveness prompts (90 possibilities for two-digit numbers from 10 to 99).

● They allow the system to scale to desired security levels:

○ More two-digit numbers can be required during enrollment to enhance initial security (at the cost of a longer enrollment process).

○ More two-digit numbers can be required during authentication.

○ The system can incorporate larger sets of numbers, including three-digit or higher numbers.

Some existing biometric systems use single-digit liveness challenges. Single digits are appealing because they are also universally recognized and offer a similar experience to text-based one-time passwords, familiar to consumers. For example, a single-digit liveness check might require the user to enroll by speaking a complete string of single digits multiple times and then authenticate by speaking a shorter string (e.g., during authentication, displaying "17945", to which the user says "one seven nine four five" in English). However, this method has significant drawbacks:

● It requires language-specific parsing of the utterance to recognize each digit during enrollment and authentication. Strong accents can make parsing more challenging and less accurate. If the user wishes to speak in a different language, a different language model is needed for parsing.

● It is less intuitive and robust than the two-digit number system. If the user misinterprets the prompt and does not speak the digits individually (e.g., saying "seventeen nine forty-five" instead of "one seven nine four five"), the system will fail. (In the TrulySecure system, the user only needs to be consistent in their response to the prompt.)

● The enrollment process is lengthy, requiring all ten digits to be spoken multiple times. Most single digits in English have only one syllable, which limits the system's accuracy. This can be mitigated by requesting more digits, but it increases the risk of an attacker recording a substantial portion of the enrolled prompts during a single authentication event.

● The system's security is constrained by the limited number of digits and cannot be scaled. Single-digit systems are limited to ten different inputs for prompts. An attacker who records all or a subset of these digits can easily splice them together to spoof the system.

Alternative Configurations

One approach to further reduce the enrollment process in the TrulySecure Voice Liveness Challenge is to initially enroll only the user-defined passphrase. The numbers are then enrolled over time using the augmentation method described above. This means there would be no liveness check for the first few authentication attempts, but the enrolled phrase list would quickly expand and become effective.

Another potential implementation of the TrulySecure Voice Liveness Challenge, yet to be developed, could replace two-digit numbers with a different set of non-linguistic, unambiguous symbols, such as photos of objects or emojis.

For instance, images of fruits (banana, orange, apple, pear, etc.) could be used. Similar to the two-digit numbers, the enrolled set could grow over time. As long as each user consistently translates each symbol into an utterance, the system will scale effectively.

Allowing users to choose the type of challenge could serve a dual purpose. Authentication systems often include a "reverse authentication" feature to assure the user that the system is legitimate and not a phishing attack, typically through an image selected at account creation. By letting users choose their challenge prompt category, they also gain reassurance that the system is authentic.

# linux  # git  # ai  # cos  # red  # speak  # swift  # less  # String  # if  # for  # while  # include  # require  # using  # Interface  # Event  # Collection  # number  # symbol  # this  # prompt  # unenrolled  # shown  # audio  # future  # add  # serving  # sequence  # test  # Augmentation 

相关栏目： 【 网站优化151355 】 【 网络推广146373 】 【 网络技术251813 】 【 AI营销90571 】

相关推荐： js代码实现下拉菜单【推荐】  如何在IIS中新建站点并配置端口与IP地址？  东莞市网站制作公司有哪些,东莞找工作用什么网站好？  Python函数文档自动校验_规范解析【教程】  ,怎么在广州志愿者网站注册？  广州网站制作公司哪家好一点,广州欧莱雅百库网络科技有限公司官网？  Swift中swift中的switch 语句  极客网站有哪些,DoNews、36氪、爱范儿、虎嗅、雷锋网、极客公园这些互联网媒体网站有什么差异？  如何构建满足综合性能需求的优质建站方案？  佛山网站制作系统,佛山企业变更地址网上办理步骤？  深圳网站制作平台,深圳市做网站好的公司有哪些？  大连网站制作费用,大连新青年网站，五年四班里的视频怎样下载啊？  Python高阶函数应用_函数作为参数说明【指导】  如何打造高效商业网站？建站目的决定转化率  谷歌Google入口永久地址_Google搜索引擎官网首页永久入口  php静态变量怎么调试_php静态变量作用域调试技巧【解答】  Python正则表达式进阶教程_复杂匹配与分组替换解析  怎么用AI帮你设计一套个性化的手机App图标？  php打包exe后无法访问网络共享_共享权限设置方法【教程】  Zeus浏览器网页版官网入口 宙斯浏览器官网在线通道  Laravel Eloquent关联是什么_Laravel模型一对一与一对多关系精讲  佐糖AI抠图怎样调整抠图精度_佐糖AI精度调整与放大细化操作【攻略】  深圳网站制作公司好吗,在深圳找工作哪个网站最好啊？  Java垃圾回收器的方法和原理总结  Laravel怎么创建自己的包(Package)_Laravel扩展包开发入门到发布  企业在线网站设计制作流程,想建设一个属于自己的企业网站，该如何去做？  Laravel怎么定时执行任务_Laravel任务调度器Schedule配置与Cron设置【教程】  香港服务器如何优化才能显著提升网站加载速度？  悟空浏览器如何设置小说背景色_悟空浏览器背景色设置【方法】  如何在建站之星网店版论坛获取技术支持？  Laravel如何升级到最新的版本_Laravel版本升级流程与兼容性处理  使用Dockerfile构建java web环境  JavaScript如何实现音频处理_Web Audio API如何工作？  手机网站制作平台,手机靓号代理商怎么制作属于自己的手机靓号网站？  logo在线制作免费网站在线制作好吗,DW网页制作时，如何在网页标题前加上logo？  网站制作软件有哪些,制图软件有哪些？  如何在云主机上快速搭建多站点网站？  Laravel怎么连接多个数据库_Laravel多数据库连接配置  再谈Python中的字符串与字符编码（推荐）  Laravel模型关联查询教程_Laravel Eloquent一对多关联写法  Laravel如何发送系统通知？（Notification渠道示例）  Laravel如何生成API文档？（Swagger/OpenAPI教程）  如何快速生成可下载的建站源码工具？  如何在IIS7中新建站点？详细步骤解析  js实现获取鼠标当前的位置  高端智能建站公司优选：品牌定制与SEO优化一站式服务  微信小程序 HTTPS报错整理常见问题及解决方案  网站设计制作书签怎么做,怎样将网页添加到书签/主页书签/桌面？  深圳网站制作培训,深圳哪些招聘网站比较好？  Laravel如何处理文件上传_Laravel Storage门面实现文件存储与管理