Technology Review - Published By MIT
Advertisement

Say Hello to Voiceprinting

Voice biometrics is poised to add more security to phone-based transactions in Europe.

By Duncan Graham-Rowe

Tuesday, April 11, 2006

smaller text tool iconmedium text tool iconlarger text tool icon

Speech-recognition software is used today by banks and other institutions to conduct customer transactions over the phone without the need for a live customer-service representative. But such systems recognize mainly numbers and words, not individual voices. If you utter the right PIN and account number, you get through.

Now a system being readied for commercialization in Europe treats an individual's voice as the gate-opener. That capability would add another security layer: while your PIN can be compromised, your voice is not so easily stolen. It could also eliminate the need to remember and recite account numbers and PINs.

Owned by Surrey, U.K.-based Biometric Security, the system, called Voice Vault, requires users simply to utter their name, birth date, and a password, says chief technology officer Vance Harris. The company, like others in the field, already has a handful of banks as clients, who use "voiceprinting" for internal security purposes. But Voice Vault's system will be made available to general account holders at an undisclosed European bank by December, says Harris.

The system will require a user to remember a minimal amount information, while relying instead on that person's voice for authentication. First, customers "register" their voices in a training session that involves saying words designed to capture the frequencies associated with their voice. The system then constructs a statistical model that predicts what a speech waveform would look like when the person is uttering an entirely novel sentence.

Then, when that person's account is accessed over a phone, the system not only confirms that the articulated name, birthdate, and password are accurate, but also checks to see if the waveforms of those utterances match the template stored with the account.

Such modelling of the vocal tract is a popular approach these days for voice verification, says Aladdin Ariyaeeinia, a voice researcher at the University of Hertfordshire, England. Indeed, many companies are developing similar systems.

Much farther in the future is so-called "text independent" identification, which would be so good at recognizing individual voices that you'd merely call your bank and say "What's my balance?" without having to give any other information.

Voiceprints have some over other biometrics too. Ariyaeeinia notes that while some banks are now looking at using more established forms of biometrics for online banking -- fingerprints and iris scans -- these require additional hardware to perform the scans.

Comments

  • Accuracy?
    This sounds great.  Any statistics on its accuracy?
    Rate this comment: 12345
    Guest (Vincent So)
    04/11/2006
    Posts:1
  • Hello?
    Now the only technology required to steal your account is a wire-tap or voice-recorder. Duh.
    Rate this comment: 12345
    Guest (PeeDee)
    04/11/2006
    Posts:1
    • So that explains why they are wiretapping us
      They say it is just international calls but it is all calls.
      Rate this comment: 12345
      Guest (Jason)
      04/12/2006
      Posts:1
    • Using recordings for impostering
      If one uses text independent SIV with a liveness test, you go a long way to preventing successful imposter attacks. Of course, nothing is perfect or 100% accurate. Not even humans.
      Rate this comment: 12345
      Guest (John)
      06/06/2006
      Posts:1
  • More information
    How much would it cost an organization to implement a system like this one?
    Rate this comment: 12345
    Guest (Wanda S.)
    04/11/2006
    Posts:1
    • Cost depends on whether you are first
      Roughly, the first org will pay $100 million. The second will pay $100 thousand. The twentieth will pay $10,000 per processor, in license fees.
      Rate this comment: 12345
      Guest (Leprechaun)
      05/01/2006
      Posts:1
  • does this mean i can't log in if i have a sore throat or if i catch cold?
    does this mean i can't log in if i have a sore throat or if i catch cold?

    Mahurshi Akilla
    Rate this comment: 12345
    Guest (Mahurshi Akilla)
    04/12/2006
    Posts:1
    • Easily Forge
      It is well known that private investigator have voice simulation software/hardware.  They use it to similate an acquaintance/friend and call up people and ask questions.  Thus tricking the person to review vital information to someone they thought is a friend over the phone.  They can use the same technology to access your account by tricking your computer to think it is you over the phone.
      Rate this comment: 12345
      Guest (Danny Boy)
      04/16/2006
      Posts:1
      • It's not easy to spoof
        It's incorrect to say that voice simulation software can spoof a voice biometric... It's not a recording of the voice being saved. It is unique aspects of the voice in a profile. Tape recordings of the actual voice and voice simulation are not effective.
        Rate this comment: 12345
        Guest (Dan Miller)
        04/18/2006
        Posts:1
        • Spoofing is guaranteed
          You just get a copy of the biometric hardware and tweek your simulation until it passes. No problem.
          Rate this comment: 12345
          Guest (Leprechaun)
          05/01/2006
          Posts:1
    • Longitudinal testing
      If memory recalls, there is a 2004 report published at a biometrics conference at Oxford that shows that normal sore throats, sinusitis and aging doesn't dramatically impact a speaker verification system's effectiveness. Of course, major illness, such as complete laryngitis, can reduce proper authentication. The general rule is that if your mother can recognize your voice, so can the automated speaker verification systems.
      Rate this comment: 12345
      Guest (Avery Glasser)
      04/19/2006
      Posts:1
      • Colds and other such stuff
        In the case of a person having a cold, there is a increase in false rejects but not in false accepts. It is therefor a human factors issue not a security issue
        Rate this comment: 12345
        Guest (John)
        06/06/2006
        Posts:1
    • [no subject]
      can do my project on voice printing
      Rate this comment: 12345
      Guest (Alex)
      07/04/2006
      Posts:1

Resources

Events

Log In

Forgot your password?     Register »
Advertisement

Videos

Malleable Maps, Artistic Robots and Bubble Interfaces
Technology Review January/February 2010

Current Issue

Security in the Ether
Information technology's next grand challenge will be to secure the cloud--and prove we can trust it.
Advertisement
Advertisement
Advertisement
Subscribe to Technology Review's daily e-mail update. Enter your e-mail address

TECHNOLOGY RESOURCES

More Technology News from Forbes

Advertisement
MIT Massachusetts Institute of Technology © 2010 Technology Review. All Rights Reserved.