Voice signature with strong binding
AssigneeThe MITRE Corporation
InventorsRichard Graubart, Beth Abramowitz
Life of this patent
Estimating the term…
Abstract
Voice signature method. The signer obtains a public key from an intended recipient of a document to be electronically signed. The signer speaks a personal identification number (PIN) to generate a voice PIN and the signer also speaks at least the signer's name. The voice PIN and voice signature are appended to the document and the voice PIN is encrypted using the public key to create an encrypted voice PIN. A polynomial hash is generated based on the document, the voice signature and the encrypted voice PIN and this hash is itself encrypted based on the PIN to generate an encrypted hash. Finally, the document, the voice signature, the encrypted voice PIN and the encrypted hash are sent to the intended recipient.
Claims11
A method for electronically signing a document, comprising:
- by a first computing device,
- electronically obtaining a public key;
- receiving a spoken personal identification number (PIN) and generating a voice PIN from the spoken PIN;
- receiving a spoken intention to execute a document and generating a voice signature from the spoken intention to execute;
- encrypting the voice PIN using the public key;
- generating a polynomial hash based on the document, the voice signature and the encrypted voice PIN, wherein the polynomial hash varies with changes in at least the voice signature and the encrypted voice PIN;
- encrypting the hash using the PIN as an input to said encryption of the hash;
- and
- sending the document, the voice signature, the encrypted voice PIN, and the encrypted hash to a second computing device, the second computing device being of an intended recipient of the document,
- whereby the encrypted voice PIN is provided to the second computing device to allow, by the second computing device, i) generation, using the PIN resulting from a decryption of the encrypted voice PIN, of a comparative encrypted hash of the document, the voice signature, and the encrypted voice PIN for comparison with the encrypted hash, and ii) comparison of the voice of the voice PIN to the voice of the voice signature, such that no previously stored authentication data is necessary at the location of authentication.
A method for processing an electronically signed document, comprising:
- by a first computing device,
- receiving a document, a voice signature, an encrypted voice personal identification number (PIN), and an encrypted hash from a second computing device, the second computing device being of a signer;
- identifying an intention to execute the received document from the voice signature;
- comparing the encrypted hash received from the second computing device to a locally encrypted hash of the document, the voice signature and the encrypted voice PIN, the locally encrypted hash encrypted by the first computing device using a PIN resulting from a decryption, by the first computing device, of the encrypted voice PIN;
- comparing the voice of the voice PIN with the voice of the voice signature;
- and
- processing the received document on the basis of (i) a match between a voice of the voice PIN and a voice of the voice signature, (ii) a match between the locally encrypted hash and the encrypted hash received by the recipient, and (iii) the identified intention to execute the received document.
Dependencies are inferred from the claim text.